Interesting question....The repo metadata obviously, sshd, and xz/lzma libs. Perhaps anything that depends on those three libs though.

-Paulson

On Wed, Apr 3, 2024 at 12:27 PM Carsten Otto <otto@informatik.rwth-aachen.de> wrote:
On Wed, Apr 03, 2024 at 12:16:56PM -0400, Paulson McIntyre wrote:
> Any chance some of the volume changes are due to patching/migrations
> related to the recent SSH vulnerability?

I tried, but I wasn't able to find any outstanding file or host. It
looks like it's more traffic all over the board, which I guess happens
if lots of users need to update lots of packages.

I do have lots of old logs, do you know of a few specific files that I
could check?
--
Dr. Carsten Otto
http://verify.rwth-aachen.de/otto/