| 13 Apr 2024 |
| ⛧-440729 [sophie raven] (it/its) changed their display name from Sophie to sophie. | 08:27:37 |
tgerbet | https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_10.html
cc emily
| 11:06:14 |
tgerbet | Done in
https://github.com/NixOS/nixpkgs/pull/303377
https://github.com/NixOS/nixpkgs/pull/303471
Somehow missed it in GH search, sorry for the noise | 12:55:11 |
| 15 Apr 2024 |
@mtheil:scs.ems.host | Botan 3.4.0 was released: https://github.com/NixOS/nixpkgs/pull/304220 | 09:44:54 |
| djacu left the room. | 16:17:25 |
samueldr | https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html | 19:22:28 |
samueldr | * https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html ( https://hachyderm.io/@simontatham/112276855758487211 ) | 19:22:46 |
hexa | https://github.com/NixOS/nixpkgs/pull/304354 | 19:55:11 |
| 16 Apr 2024 |
| tlaurion aka Insurgo [ Timezone: ET ] changed their display name from Insurgo aka tlaurion [UTC-4:Processing backlog] to Insurgo aka tlaurion [UTC-4]. | 01:01:36 |
| 17 Apr 2024 |
felschr | https://github.com/NixOS/nixpkgs/pull/304595 | 03:15:53 |
vcunat | https://discourse.nixos.org/t/virus-detected-on-nixos-virtualbox-appliance/43534 | 06:12:01 |
hexa | continued in #security-discuss:nixos.org | 08:52:23 |
| K900 changed their display name from K900 ⚡️ to K9Ö0. | 17:16:43 |
| K900 changed their display name from K9Ö0 to K900. | 17:21:54 |
| K900 | 17:21:55 |
hexa | https://www.openwall.com/lists/oss-security/2024/04/17/9 ma27 | 22:53:09 |
| 18 Apr 2024 |
| dmorab joined the room. | 16:53:21 |
| smorci joined the room. | 19:52:56 |
| smorci changed their display name from Szekely Marton to smorci. | 19:54:16 |
| smorci set a profile picture. | 19:54:50 |
sugi | https://forgejo.org/2024-04-release-v1-21-11-0/ <- forgejo security update to 1.21.11 | 20:45:39 |
hexa | emily: | 21:07:16 |
hexa | * cc emily: | 21:07:21 |
| 19 Apr 2024 |
| mjm changed their profile picture. | 19:17:27 |
| 20 Apr 2024 |
| cafkafk changed their profile picture. | 13:17:14 |
| 21 Apr 2024 |
ris_ | what are we doing about hashicorp vault in stable now? CVE-2024-2660 indicates we should upgrade stable to 1.14.11, but the only 1.14.11 tag on github is v1.14.11+ent, which appears to be BSL | 18:59:50 |
magic_rb | we have to either not upgrade and mark as broken or change license, not really anything else we can do
(hashicorp never ceases to disappoint) | 19:00:58 |
magic_rb | * we have to either not upgrade and mark as insecure or change license, not really anything else we can do
(hashicorp never ceases to disappoint) | 19:01:14 |
ris_ | sure.. but which? | 19:48:09 |
magic_rb | We change the license and introduce a warning saying it changed in case someone has allowUnfree but doesnt want to use nonfree vault. If we broke it people couldnt upgrade at all | 19:49:13 |