| 15 Jun 2025 |
|  @c3r5b8:matrix.org left the room. | 13:32:29 |
| 16 Jun 2025 |
 adamcstephens | https://github.com/NixOS/nixpkgs/pull/417248 | 14:06:32 |
| 17 Jun 2025 |
 hexa | https://insinuator.net/2025/06/disclosure-multiple-vulnerabilities-xserver-xwayland/ | 14:51:36 |
| hexa | * https://insinuator.net/2025/06/disclosure-multiple-vulnerabilities-xserver-xwayland/ K900 Emantor | 14:52:04 |
 K900 | Woo | 14:56:19 |
| K900 | On it | 14:56:22 |
| K900 | xwayland: https://github.com/NixOS/nixpkgs/pull/417568 | 15:00:26 |
| K900 | And xorgserver (staging): https://github.com/NixOS/nixpkgs/pull/417569 | 15:03:29 |
| hexa | https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx unmaintained 😕 | 22:02:13 |
| hexa | * https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx unmaintained in nixpkgs 😕 | 22:02:17 |
| hexa |
Systems are vulnerable if they use pam_namespace to polyinstantiate a directory
| 22:02:49 |
| hexa | https://www.openwall.com/lists/oss-security/2025/06/17/5 libblockdev/udisks Jan Tojnar | 22:06:45 |
| 18 Jun 2025 |
 Jan Tojnar | thanks, opened https://github.com/NixOS/nixpkgs/pull/417763 | 07:20:55 |
 leona | can look in around 8 hours if no one beats me to that | 07:51:03 |
 h0nig2k | https://github.com/NixOS/nixpkgs/pull/417898 for CVE-2025-46727 (please backport to 25.05 as well, thank you) | 15:52:17 |
 vcunat | updated X too soon
A fix will be issued in xorg-server-21.1.18 and xwayland-24.1.8 shortly.
https://lists.x.org/archives/xorg-announce/2025-June/003611.html
| 16:08:45 |
| hexa | Redacted or Malformed Event | 16:23:13 |
| hexa | Redacted or Malformed Event | 16:23:39 |
| hexa | Redacted or Malformed Event | 16:23:49 |
 aleksana 🏳️⚧️ (force me to bed after 18:00 UTC) | In reply to @jtojnar:matrix.org
thanks, opened https://github.com/NixOS/nixpkgs/pull/417763 This hasn't been backported to 24.11 because of merge conflict, have we abandoned 24.11 yet? | 17:18:10 |
| hexa | not yet | 17:19:56 |
| vcunat | End of the month is promised traditionally. | 17:24:14 |
| 20 Jun 2025 |
|  @alina:kescher.at changed their display name from alina, dognitohazard 🏳️⚧️🐾 to alina, moved to @alina:catgirl.cloud. | 18:14:34 |
| @alina:kescher.at left the room. | 19:02:28 |
| 21 Jun 2025 |
| leona | Would like to get a review on the patch backport please https://github.com/NixOS/nixpkgs/pull/418180, as relevant for next staging cycle | 11:17:42 |
 Grimmauld (any/all) | (on a similar note, https://github.com/NixOS/nixpkgs/pull/418255 works as an update, but the diff is large enough for me to not feel competent with a backport. And the doc building is still bissing, as i don't know enough docbook to fix it. Either needs someone looking at docs or making the executive decision to just ignore docs on pam) | 11:19:24 |
| Grimmauld (any/all) | * (on a similar note, https://github.com/NixOS/nixpkgs/pull/418255 works as an update, but the diff is large enough for me to not feel comfortable with an immediate backport. And the doc building is still bissing, as i don't know enough docbook to fix it. Either needs someone looking at docs or making the executive decision to just ignore docs on pam) | 11:20:21 |
| Grimmauld (any/all) | * (on a similar note, https://github.com/NixOS/nixpkgs/pull/418255 works as an update, but the diff is large enough for me to not feel comfortable with an immediate backport. And the doc building is still missing, as i don't know enough docbook to fix it. Either needs someone looking at docs or making the executive decision to just ignore docs on pam) | 11:43:23 |
| 22 Jun 2025 |
|  SomeoneSerge (Ever OOMed by Element) changed their display name from SomeoneSerge (UTC+U[-12,12]) to SomeoneSerge (Ever OOMed by Element). | 12:12:51 |
|  Katalin 🔪 changed their display name from Katalin ⚧︎ to Katalin ⚧︎. | 20:44:15 |
