Comment 2 for bug 1864439

Revision history for this message
Matthias Klose (doko) wrote : Re: [MIR] libfido2, libcbor, mathjax (dependencies of openssh)

The packaging looks ok, both packages provide symbols files.

libcbor didn't have a release for about two years, and upstream seems to have accumulated a few bug reports.

Both packages need a security review, and maybe the security team subscribing to the packages (as they did for openssh itself).