Thanks for bringing this to my attention - I had no idea Fedora would
let something so serious be unfixed for so long, as I kinda assumed
Fedora is on top of security updates. Time to immediately delete
openh264 indeed! However:
Am 29.04.25 um 19:21 schrieb Leigh Scott:
sudo dnf swap *\openh264\* noopenh264 --allowerasing
Unfortunately that does not seem to work on f42:
$ sudo dnf swap \*openh264\* noopenh264 --allowerasing
Updating and loading repositories:
Repositories loaded.
Problem: cannot install the best candidate for the job
- conflicting requests
Package Arch Version Repository
Size
Reinstalling:
openh264 x86_64 2.4.1-2.fc42 fedora-cisco-op
1.1 MiB
replacing openh264 x86_64 2.4.1-2.fc42 fedora-cisco-op
1.1 MiB
Transaction Summary:
Reinstalling: 1 package
Replacing: 1 package
Total size of inbound packages is 419 KiB. Need to download 419 KiB.
After this operation, 0 B extra will be used (install 1 MiB, remove 1 MiB).
Is this ok [y/N]:
Any other way to close this wide open security hole?
--
Jonathan
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
