Vulnerability roundup 52: openjpeg, php, exiv2


#1

Hi all,

another vulnerability roundup is on:

As always, we are glad for everyone who helps out to get rid of these security issues. :slight_smile:

-Christian


#2

@ckauhaus What do you use to scrape the security roundups? It’s not the NixOS/security repo’s scripting, I imagine…


#3

#4

The raw data is obtained by running vulnix against the top-level output derivation of nixos/release-combined.nix. There is also quite a bit of plumbing and driver code around that at https://github.com/ckauhaus/nixos-vulnerability-roundup.

HTH