0ccfa4af08
Not listed on official website[1], but present in release directory[2]... and seems legit[3][4] Fixes CVE, looks like: https://lwn.net/Articles/782828/ [1] https://www.archlinux.org/pacman/#_releases [2] https://sources.archlinux.org/other/pacman/ [3] https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/pacman&id=f48884ebff6788406fe1911f179a363bd2aeb9b1 [4] https://lists.archlinux.org/pipermail/pacman-dev/2019-March/023208.html