Could you please untag libtar-1.2.20-25.fc35 from f35-updates?
libtar-1.2.20-25.fc35
f35-updates
$ koji untag-build f35-updates libtar-1.2.20-25.fc35
The update introduces CVE-2021-33640.
The sooner the better.
We could untag it, but it would do absolutely nothing at all.
f35 is EOL, so we aren't making any more composes, so untagging it wouldn't affect the existing repos. ;(
Sorry, I don't think we can do anything about this at this point. ;(
Metadata Update from @kevin: - Issue close_status updated to: Will Not/Can Not fix - Issue status updated to: Closed (was: Open)
No worries. Thank you for having a look!