Loganaden Velvindron

Update Log4j to 2.17 to fix several CVEs https://www.lunasec.io/docs/blog/log4j-zero-day/

vm2 sandbox escape: https://github.com/advisories/GHSA-7jxr-cg7f-gpgv

add option to anonymize sflowtool output for both ipv4 and ipv6. /24 …

4

…for ipv4 and /64 for ipv6.

Update LibOQS to 0.9.2 to fix Kyberslash (https://kyberslash.cr.yp.to/)

Deprecate Arcfour

2

It's now an internet standard: https://www.rfc-editor.org/authors/rfc8758.html There was a PR about this: https://github.com/mscdex/ssh2-streams/pull/125 Would it be an appropriate time to revisit this PR ?

Drop 4096 bytes of the early keystream

5

It might be safer to drop 4096 bytes to be on the safe side. See: https://twitter.com/nugxperience/status/1773906926503591970

This fixes https://nvd.nist.gov/vuln/detail/CVE-2021-45105 By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Dockerfile fails to build

6

This is the error currently faced with the latest version of Ubuntu. CMake Error at /usr/share/cmake-3.28/Modules/FindPackageHandleStandardArgs.cmake:230 (message): Could NOT find OpenSSL, try to set the path to OpenSSL root folder...

It will become active in 2026. Signed-off-by: Jagveer Loky ([email protected])

CPU extension detection for arm64 on NetBSD.

1

Joint work with Keelan Cannoo, Jeevesh Dindyal & UoM RICRG.