libssh and libgcrypt recent vulnerability

2021-01-29 Thread Aris Adamantiadis
Hi everyone. Libgcrypt has been an itch that scratched both Andreas and me for a while. Till now, the biggest problem was the workload associated in maintaining the gcrypt backend (mostly with external contributions, but still). This backend was generously contributed by people who wanted lib

Re: libssh and libgcrypt recent vulnerability

2021-01-30 Thread Andreas Schneider
On Friday, 29 January 2021 22:42:27 CET Aris Adamantiadis wrote: > Hi everyone. Hi Aris, > Libgcrypt has been an itch that scratched both Andreas and me for a > while. Till now, the biggest problem was the workload associated in > maintaining the gcrypt backend (mostly with external contribution

Re: libssh and libgcrypt recent vulnerability

2021-02-01 Thread Jakub Jelen
On 1/30/21 8:36 PM, Andreas Schneider wrote: On Friday, 29 January 2021 22:42:27 CET Aris Adamantiadis wrote: Hi everyone. Hi Aris, Libgcrypt has been an itch that scratched both Andreas and me for a while. Till now, the biggest problem was the workload associated in maintaining the gcrypt

Re: libssh and libgcrypt recent vulnerability

2021-02-01 Thread Aris Adamantiadis
Hi Jakub, thank you for starting this discussion with actual commit proposed. We talked about this for some time already and this incident is raising the issue more priority again. For Fedora, we do not need libgcrypt backend, but I would certainly like to get hold of the ones who contributed