!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

704 Members
Coordination and triage of security issues in nixpkgs216 Servers

Load older messages


SenderMessageTime
31 Mar 2025
@grimmauld:grimmauld.deGrimmauld (moving to @grimmauld:grapevine.grimmauld.de) changed their display name from Grimmauld (any/all) to Grimmauld (moving to @grimmauld:grapevine.grimmauld.de).14:11:35
@grimmauld:grapevine.grimmauld.deGrimmauld (any/all) joined the room.15:05:36
1 Apr 2025
@3wy-kra:matrix.uni-hannover.de@3wy-kra:matrix.uni-hannover.de left the room.09:36:09
@sandro:supersandro.deSandro changed their display name from Sandro 🐧 to Sandro 🐧 [c3d2].13:56:23
@sandro:supersandro.deSandro changed their display name from Sandro 🐧 [c3d2] to "Sandro [c3d2]".13:57:10
@sandro:supersandro.deSandro changed their display name from "Sandro [c3d2]" to Sandro 🐧 [c3d2].13:57:48
@sandro:supersandro.deSandro changed their display name from Sandro 🐧 [c3d2] to Sandro 🐧.13:58:50
2 Apr 2025
@fabaff:matrix.orgFabian Affolter left the room.07:31:23
@rntpts:synapse.rntpts.derntpts joined the room.18:18:26
@hexa:lossy.networkhexa midchildan: trafficserver https://seclists.org/oss-sec/2025/q2/7 23:02:23
@hexa:lossy.networkhexahttps://github.com/NixOS/nixpkgs/pull/39245723:03:04
3 Apr 2025
@mjolnir:nixos.orgNixOS Moderation Bot banned @cafkafk:fem.ggcafkafk (<no reason supplied>).11:42:00
@2xsaiko:tchncs.de@2xsaiko:tchncs.de changed their display name from 2xsaiko to 2xsaiko (moved! @saiko:knifepoint.net).12:52:04
@hexa:lossy.networkhexaxz https://www.openwall.com/lists/oss-security/2025/04/03/117:21:28
@dantefromhell:matrix.orgdantefromhell changed their display name from dantefromhell to MATRIX dantefromhell.22:34:39
@dantefromhell:matrix.orgdantefromhell changed their display name from MATRIX dantefromhell to dantefromhell.22:36:28
4 Apr 2025
@vcunat:matrix.orgvcunatxz staged via https://github.com/NixOS/nixpkgs/pull/393310#event-17120398189 But it's not addressed for 24.11 yet. Maybe simply patch from the upstream advisory: https://tukaani.org/xz/threaded-decoder-early-free.html05:52:06
@vcunat:matrix.orgvcunat* xz staged via https://github.com/NixOS/nixpkgs/pull/393310#event-17120398189 But it's not addressed for 24.11 yet. Maybe simply patch from the upstream advisory: https://tukaani.org/xz/threaded-decoder-early-free.html (because a bigger update happened in the meantime)05:53:02
@mjolnir:nixos.orgNixOS Moderation Bot unbanned @cafkafk:fem.ggcafkafk.06:13:16
@qbit:tapenet.org@qbit:tapenet.org left the room.16:10:41
@hexa:lossy.networkhexa Jan Tojnar: https://gitlab.gnome.org/GNOME/yelp/-/issues/221 19:27:59
@hexa:lossy.networkhexahttps://www.pgadmin.org/docs/pgadmin4/9.2/release_notes_9_2.html20:52:23
@bdd:mozilla.orgbdd left the room.23:19:02
@bdd:mozilla.orgbdd joined the room.23:21:47
5 Apr 2025
@tinybronca:sibnsk.net@tinybronca:sibnsk.net left the room.15:47:08
@transcaffeine:finallycoffee.eutranscaffeine joined the room.19:48:29
@amy:netzschleife.deamy joined the room.19:48:37
@transcaffeine:finallycoffee.eutranscaffeine

https://github.com/NixOS/nixpkgs/pull/396414

Fix validation of API parameters to FFmpeg [GHSA-2c3c-r7gp-q32m], by @Shadowghost
Fix trusting forward headers if none are configured [GHSA-qcmf-gmhm-rfv9], by @JPVenson

19:49:01
@transcaffeine:finallycoffee.eutranscaffeine *

jellyfin: https://github.com/NixOS/nixpkgs/pull/396414

Fix validation of API parameters to FFmpeg [GHSA-2c3c-r7gp-q32m], by @Shadowghost
Fix trusting forward headers if none are configured [GHSA-qcmf-gmhm-rfv9], by @JPVenson

19:51:15
7 Apr 2025
@hexa:lossy.networkhexa https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-01.html Mic92 14:21:51

Show newer messages


Back to Room ListRoom Version: 6