I can help with the PR, but not with the group sponsorship.
Hi all,
CVE-2022-27191 was published recently for golang-x-crypto and a BZ
ticket[2] has been opened for every package that depends on it. It has
a 7.5 score for CVSS 3.x.
FWIU, in order to fix this CVE, a new version of golang-x-crypto and
rebuilding all dependent packages is required.
I opened a PR[3] to update golang-x-crypto as the first step. As I'm
still not part of go-sig, can someone review, merge if OK and build it
for current Fedora releases? I applied today to be a member of
go-sig[4] to help with this and other tasks, but don't know how long
it will take to be accepted.
Kind regards,
Mikel Olasagasti (mikelo2)
_______________________________________________