!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

367 Members
Discussions around Security | Triaging happens in #security:nixos.org124 Servers

Load older messages


SenderMessageTime
27 Oct 2024
@emilazy:matrix.orgemilybut just wanted to check whether the Thunderbird revert is desired.16:10:21
@hexa:lossy.networkhexaask vcunat16:11:25
@hexa:lossy.networkhexaI don't maintain thunderbird16:11:30
@hexa:lossy.networkhexa * I don't maintain genereally thunderbird16:11:36
@hexa:lossy.networkhexa * I don't maintain generally thunderbird16:11:39
@emilazy:matrix.orgemily ah, ok. vcunat: thoughts on the revert suggested in this comment https://github.com/NixOS/nixpkgs/pull/351205#pullrequestreview-2396239364? 16:17:04
28 Oct 2024
@hexa:lossy.networkhexahttps://github.com/melontini/bootloader-unlock-wall-of-shame16:12:35
29 Oct 2024
@eva:blahaj.nyceva removed their profile picture.22:26:36
@eva:blahaj.nyceva set a profile picture.22:26:52
1 Nov 2024
@quasigod:matrix.orgquasigod changed their profile picture.19:26:46
4 Nov 2024
@fifteenconcierge:matrix.org@fifteenconcierge:matrix.org joined the room.20:25:52
@fifteenconcierge:matrix.org@fifteenconcierge:matrix.org left the room.20:31:28
@fifteenconcierge:matrix.org@fifteenconcierge:matrix.org joined the room.20:35:42
5 Nov 2024
@sandro:supersandro.deSandro 🐧What do we want to do about https://github.com/NixOS/nixpkgs/pull/214195/files#r1644268804 ?15:27:10
@k900:0upti.meK900Continue not allowing Qt4, I guess?15:27:53
@hexa:lossy.networkhexaIs Qt4 security supported?15:29:28
@hexa:lossy.networkhexaimage.png
Download image.png
15:29:52
@hexa:lossy.networkhexaah, right.15:29:54
@hexa:lossy.networkhexa201515:30:07
@hexa:lossy.networkhexawe're not allowing any new python2 either, which went eol in 202015:30:29
@k900:0upti.meK900Absolutely not15:30:53
@sandro:supersandro.deSandro 🐧so someone wants to write that in the PR and close it? that would be champ15:31:25
@hexa:lossy.networkhexaI don't have the words today15:31:49
@lily:lily.flowersLily Foster
In reply to @k900:0upti.me
Continue not allowing Qt4, I guess?
https://github.com/NixOS/nixpkgs/pull/255185 👀
15:33:37
@aloisw:kde.org@aloisw:kde.org
In reply to @hexa:lossy.network
sent an image.
"end of life after 2015" "CVE-2009-2700" does not exactly inspire confidence either…
17:40:40
@emilazy:matrix.orgemilywe really ought to revert that…17:47:17
@emilazy:matrix.orgemily"If I could, I would just provide this package out-of tree, similar to how e.g. Arch (https://aur.archlinux.org/packages/jlink-systemview) does it, but this does not work for nixpkgs." um, it seems like the contributor just needs educating about flakes / NUR / …?17:47:59
@emilazy:matrix.orgemilyI'll post a reply and open a revert…17:49:24
@emilazy:matrix.orgemily
commit df61c2acb5e583320b330399d4e50cc441c3d198                                 
Author: Alyssa Ross <hi@alyssa.is>                                              
Date:   Sat Sep 14 10:10:49 2024 +0200                                          
                                                                                
    treewide: remove executable bit from .nix files                             
                                                                                
    ???

😆

17:55:06
@emilazy:matrix.orgemilyhttps://github.com/NixOS/nixpkgs/pull/35388018:09:20

Show newer messages


Back to Room ListRoom Version: 9