| 26 Aug 2025 |
 vcunat | Switching thundebrird-esr to 140 shouldn't be hard. | 14:20:10 |
 hexa | hm :thik | 14:20:16 |
| hexa | * hm 🤔 | 14:20:20 |
| hexa | 115 for win7-8 | 14:20:36 |
| vcunat | I hope there's no other 140 consumer anymore? | 14:20:37 |
| vcunat | * I hope there's no other 140 consumer anymore? (or older) | 14:20:50 |
| hexa | 
Download image.png | 14:21:02 |
| hexa | 🤡 | 14:21:03 |
| hexa | Christoph: that means floorp is affected as well and should finally move to 12.x | 14:21:29 |
| vcunat | The discussion applies also to NixOS 25.05. | 14:25:14 |
| hexa | if nothing moves I can restore the buildinfo patch later tonight or tomorrow | 14:26:13 |
 Christoph | In reply to @hexa:lossy.network
Christoph: that means floorp is affected as well and should finally move to 12.x Yeah, should be done by the weekend at latest. | 14:32:24 |
| vcunat | https://github.com/NixOS/nixpkgs/pull/437162 | 15:45:39 |
 aloisw | It does not lead to increased closure size, but https://github.com/NixOS/nixpkgs/pull/436667 also looks to have dropped the system_dir patch. | 16:07:48 |
| hexa | oh, that was for the native messaging stuff apparently | 16:17:50 |
| hexa | sorry, what a mess 😕 | 16:21:29 |
| hexa | will clean this up tonight | 16:22:19 |
| hexa | was also looking why we don't have PIE enabled for firefox and didn't manage to make it build with PIE enabled | 16:24:43 |
| aloisw | aloisw@exodus ~> file /nix/store/jx2i47bhvyjpjgiskd31m8j103rky12i-firefox-142.0/lib/firefox/firefox
/nix/store/jx2i47bhvyjpjgiskd31m8j103rky12i-firefox-142.0/lib/firefox/firefox: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /nix/store/8p33is69mjdw3bi1wmi8v2zpsxir8nwd-glibc-2.40-66/lib/ld-linux-x86-64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=c69e6e577c620c5f5dd652db72bde2490f45bb08, not stripped
That does seem to be a PIE? | 16:38:29 |
| hexa | huh | 16:39:24 |
| hexa | i was trusting checksec 🤪 | 16:39:31 |
| aloisw | That also tells mit it's a PIE? | 16:41:11 |
| hexa | fml | 16:41:25 |
| hexa | I was probably looking at the wrapper on the unwrapped package | 16:41:37 |
| aloisw | That's a position-dependent executable indeed. Weirdly in the wrapped one it's a shell script. | 16:45:29 |
 emily | we gotta turn on PIE by default… | 16:56:32 |
| emily | we're behind like every other distro on that | 16:56:38 |
| emily | I forget what the last blocker was | 16:56:41 |
| hexa | yep, 10 years or so | 16:56:44 |
| aloisw | Go stuff is still broken I think as it had none of the fix PRs merged. | 17:31:40 |
