[Borgbackup] borgbackup 1.2.6 released, including a security fix!

Boris Kirkorowicz bkborg at kirk.de
Sun Sep 3 10:04:35 EDT 2023


Hi,
are the steps described in
> <https://github.com/borgbackup/borg/blob/1.2.6/docs/changes.rst#pre-125-archives-spoofing-vulnerability-cve-2023-36811>
necessary if borg's encryption was not used when creating the repos?


Am 31.08.23 um 23:51 schrieb Thomas Waldmann:
> borgbackup 1.2.6 was just released (including a security fix)!
> 
> https://github.com/borgbackup/borg/releases/tag/1.2.6
> 
> Basically it is the same as the 1.2.5 release of yesterday, but fixes
> issue #7791.
> 
> https://github.com/borgbackup/borg/issues/7791
> 
> Also, the cython version restrictions were removed, so package
> maintainers can now use any working Cython version they want.
> 
> The bundled .c files in the pypi package were built with latest Cython
> 0.29.x (which we use since years), but there are good chances that the
> rather fresh 3.0.x releases would work also.
> 
> ---
> 
> GPG Fingerprint: 6D5B EF9A DD20 7580 5747  B70F 9F88 FB52 FAF7 B393
> _______________________________________________
> Borgbackup mailing list
> Borgbackup at python.org
> https://mail.python.org/mailman/listinfo/borgbackup

-- 
Mit freundlichem Gruß                                 Best regards
                                  Kirkorowicz


More information about the Borgbackup mailing list