Re: Python 3.5 and 3.6 removal (was Re: Bonfire of the Packages)

2024-03-30 Thread Jon Turney via Cygwin-apps
On 29/03/2024 18:32, David Rothenberger via Cygwin-apps wrote: On 3/28/2024 10:50 AM, Jon Turney via Cygwin-apps wrote: [...] David, Is it possible to update/rebuild rdiff-backup, which replies upon the soon-to-be removed python36? (Or indicate that you are no longer interested in

Re: xz upstream backdoor compromise (was: Cygwin: Linux xz issue)

2024-03-30 Thread Brian Inglis via Cygwin-apps
On 2024-03-29 16:43, Ron Murray via Cygwin wrote: There is a serious security issue with xz (and liblzma) versions 5.6.0-1 and 5.6.1-1. I note that cywin currently is suggesting an upgrade to 5.6.1-1, which is unsafe. I've looked at the cygwin archives and I don't see a reference to this: