2026-06-09 10:01:04 <omni> XSA-491-494 sometime today.. https://xenbits.xen.org/xsa/
2026-06-09 14:11:40 <omni> !103589
2026-06-09 16:00:33 <omni> works
2026-06-11 21:36:19 <omni> what to do about main/openssl in 3.21-stable? it's at 3.3.7
2026-06-11 21:38:28 <omni> a couple of days ago we got the 3.0.21, 3.4.6, 3.5.7, 3.6.3 and 4.0.1 security patch releases
2026-06-11 21:57:22 <omni> perhaps some of the 3.4.6 git commits from 9 June 2026 could be used https://openssl-library.org/news/vulnerabilities/#2026
2026-06-11 21:57:42 <omni> (never mind algitbot)
2026-06-13 11:50:15 <omni> 3.24 is not yet tracked here https://security.alpinelinux.org/
2026-06-13 11:59:45 <ikke> Thanks, will update it
2026-06-17 22:23:17 <omni> https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/?search=expat
2026-06-17 22:25:09 <omni> I haven't looked into them to be confident enough to rule out breakage
2026-06-18 06:57:10 <dne> AFAICT the minor version bump is due to the added API function (XML_SetHashSalt16Bytes)
2026-06-18 06:58:41 <dne> related to https://github.com/python/cpython/issues/149018 (fixed in python 3.14.6)
2026-06-25 20:54:56 <dne> more expat CVEs: https://blog.hartwork.org/posts/expat-2-8-2-released/
2026-06-26 08:41:25 <dne> !104533
2026-06-26 08:55:27 <dne> and !104534