1. 4

  2. 5

    I’ve come across numerous issues in RPM as part of my regular vulnerability tracking for NixOS. The state of RPM and the difficulty in finding patches was certainly eye opening for me. As far as I could tell (several months ago) distros were running a beta, unreleased version.

    This spurred an attempt to fuzz nix itself, but never spent the time to fully understand how to set up the fuzzer.