Re: [capnproto] Re: Cap'n Proto CVE-2022-46149

2022-12-02 Thread 'Kenton Varda' via Cap'n Proto
Thanks!

On Fri, Dec 2, 2022 at 12:12 PM tripl...@gmail.com 
wrote:

> This is only relevant if you use the pypi packages. If you compile pycapnp
> with system libcapnp you should only have to update your system packages.
>

Note that, unfortunately, you also need to recompile pycapnp against the
updated system packages, since part of the change is in inlined code.

-Kenton

-- 
You received this message because you are subscribed to the Google Groups 
"Cap'n Proto" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to capnproto+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/capnproto/CAJouXQkZNFnSWA46HuHVT7OUWQ%3DquR9ubJFfEWBiFQnOudTPxw%40mail.gmail.com.


[capnproto] Re: Cap'n Proto CVE-2022-46149

2022-12-02 Thread tripl...@gmail.com
pycapnp pypi packages have been patched as well 
https://pypi.org/project/pycapnp/ v1.2.2
(sorry for the delay, my PSU blew up...)

This is only relevant if you use the pypi packages. If you compile pycapnp 
with system libcapnp you should only have to update your system packages.

-Jacob

On Wednesday, November 30, 2022 at 7:14:22 AM UTC-8 ken...@cloudflare.com 
wrote:

> Hi capnproto,
>
> We have a security advisory today. Although we believe few applications 
> are actually affected, we recommend patching anyway. You can find the 
> details here:
>
>
> https://github.com/capnproto/capnproto/security/advisories/GHSA-qqff-4vw4-f6hx
>
> -Kenton
>

-- 
You received this message because you are subscribed to the Google Groups 
"Cap'n Proto" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to capnproto+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/capnproto/c992c6c4-2bb1-4427-ae25-48f1e9ba20e9n%40googlegroups.com.