Pascal Ernster

BinaryEye 1.45.0 crashes from QR code

3

Hi, I get reproducible crashes with BinaryEye 1.45.0 when trying to scan the following QR code: 

Insecure dependencies actionpack / activerecord / activesupport 5.2.8.1 in hyrax-v3.5.0

1

Hi, I've run `bundle install` against the `Gemfile` in a git checkout of hyrax-v3.5.0, and then `bundle-audit check` against the resulting `Gemfile.lock`. The result is the following list: ``` Name:...

Illegal instruction on Skylake CPUs on Linux kernel with GDS/downfall mitigation enabled

9

### Steps to reproduce On an Archlinux machine with an Intel Skylake CPU and the kernel configured to mitigate the "Downfall"/"Gather Data Sample" CPU vulnerability (booted with `gather_data_sampling=force`), `element-desktop 1.11.51`...

After distutils had already been deprecated in Python 3.10 and 3.11, it has been removed in Python 3.12: https://peps.python.org/pep-0632/ Therefore, limit the python distutils check to Python versions

Add support PKG_CONFIG_PATH/PKG_CONFIG_LIBDIR env vars for libcrypto and libssl

1

This enables support for compiling ccnet-server using an OpenSSL version installed outside the system's default prefix. Until ccnet-server supports openssl 1.1.0, this is required to compile for example on Archlinux...

Importing project that uses unknown/missing catalogue uses random other catalogue

5

It appears that if you import a project which uses a catalogue that the importing RDMO instance doesn't know, another random catalogue is used instead without even showing a warning....

django-mptt

6

The maintainer of django-mptt has marked the project as unmaintained, although it looks like he is still actively developing it: * https://github.com/django-mptt/django-mptt/blob/79301e1cb8902535c4954b32196963a6794bd74b/CHANGELOG.rst#013 * https://twitter.com/matthispam/status/1367205308439949313 The requirements.txt in rdmo 1.6-rc.1 [lists](https://github.com/rdmorganiser/rdmo/blob/1.6-rc.1/requirements.txt#L12)...

Use monospaced font to display certificate metadata

1

Please consider using a monospaced font to display the certificate metadata to make it easier to spot typos committed by the institution issuing the certificate. This is especially true since...

RFE: Possibility for grading quality of TLS connection

16

[SSLeuth](https://addons.mozilla.org/firefox/addon/ssleuth/) offered a simple grading of the TLS connections quality, based upon factors like "strength of the symmetric encryption", "strength of the key exchange", "strength of the MAC/AEAD", "forward secrecy",...