Volunteers needed to do security analysis on Deepin packages

Project Discussion
,
1

Dear all,

@adamwill recently brought up an issue with FESCo: Issue #3409: Deepin security review request - fesco - Pagure.io

TL;DR Deepin has recently been removed from openSUSE because of ongoing security issues

There are no CVEs as far as we are aware of, so it’s not quite straightforward to assess the severity of these issues at first glance; someone will have to go through all the Deepin packages, or at least those referenced in the openSUSE announcement, and assess the Fedora packages.

I’ll flag this to #security:fedoraproject.org and cross-post to the development list as well:

If anyone is willing to help, please coordinate either in comments here, in the mailing list, or in the Matrix room.

Best regards,

Michel Lind, on behalf of FESCo

5 Likes
3

I think this is worth to be pinned globally, also to shift some attention to the more/wider strategic points of @adamwill in the FESCo ticket → pinned globally until Monday

1 Like
4

What about