Pay attention...likely to affect people here and possibly ma

[jiml8]

https://www.bleepingcomputer.com/news/s ... -aws-keys/

[sturmvogel]

To add some more content. "ctx" and "phpass" are not shipped with Mageia. Sideloading/downloading of additional librarys (deps) whilst build process is not possible on Mageia build clusters. So it is highly unlikely that any Mageia package is affected.

This warning is relevant for users which downloaded "ctx" and "phpass" from the relevant developers site and are using them on their own system. Even if (according to the linked arcticle) the usage of this packages is high, there is no single distribution out there which officially ships these packages. Centos7 is the only distribution version which ships php-phpass-0.3-5
https://pkgs.org/search/?q=phpass
https://pkgs.org/search/?q=ctx

The report at python-security for ctx (user which installed ctx between May 14, 2022 and May 24, 2022 are affected only):
https://python-security.readthedocs.io/pypi-vuln/index-2022-05-24-ctx-domain-takeover.html