intel / intel/xpumanager

Security vulnerability in 1.2.39 and 1.2.41?

Open
#109 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
194
Forks
34
PR merge metrics
No merged PRs in 30d

Description

Release assets for 1.2.39 and 1.2.41 have been removed from the releases page, and 1.2.40 is missing. According to the GH API

```console
$ curl -fsSL https://api.github.com/repos/intel/xpumanager/releases/tags/V1.2.41 | jq '{created_at,updated_at}'
{
"created_at": "2025-04-16T07:03:00Z",
"updated_at": "2025-07-11T07:55:08Z"
}
$ curl -fsSL https://api.github.com/repos/intel/xpumanager/releases/tags/V1.2.39 | jq '{created_at,updated_at}'
{
"created_at": "2024-09-25T07:07:04Z",
"updated_at": "2025-07-11T07:56:12Z"
}
```

they were removed on July 11th, 2025. The 1.2.42 release includes a non-descript "Security enhancement".

Why were these assets removed? Do they contain an unannounced security vulnerability?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.