!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

652 Members
Coordination and triage of security issues in nixpkgs | Discussions in #security-discuss:nixos.org | Open PRs: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc+label%3A%221.severity%3A+security%22202 Servers

Load older messages


SenderMessageTime
28 Oct 2025
@k900:0upti.meK900https://www.phoronix.com/news/X.Org-Server-3-Vuln-Oct-2025 Xorg again13:49:07
@k900:0upti.meK900xwayland: https://github.com/NixOS/nixpkgs/pull/456494 Someone else do xorgserver please my brain is very mush16:47:49
@zitrone:utwente.iozitrone joined the room.23:41:42
29 Oct 2025
@mdaniels5757:matrix.orgmdaniels5757Backport, approved by maintainer and containing security fixes: https://github.com/NixOS/nixpkgs/pull/45557000:54:25
2 Nov 2025
@amadaluzia:unredacted.orgamadaluzia joined the room.22:34:47
@amadaluzia:tchncs.de➡️@amadaluzia:unredacted.org changed their display name from amadaluzia to ➡️@amadaluzia:unredacted.org.22:48:07
4 Nov 2025
@cafkafk:gitter.imcafkafk changed their profile picture.08:22:52
@hexa:lossy.networkhexahttps://seclists.org/oss-sec/2025/q4/127 curl13:24:04
@grimmauld:grapevine.grimmauld.deGrimmauld (any/all) 8.17.0 is scheduled to be released tomorrow, i don't think we can do anything yet 13:26:52
@k900:0upti.meK900Do we yeet the cycle again then13:27:48
@vcunat:matrix.orgvcunatSeverity isn't mentioned yet?13:38:00
@vcunat:matrix.orgvcunat* Severity isn't mentioned yet? (I fail to see it)13:38:06
@vcunat:matrix.orgvcunatAh, now I see "Moderate".13:39:04
@vcunat:matrix.orgvcunatEither way, 25.05 seems more of a concern than master/unstable.13:40:37
@somasis:matrix.orgsomasis joined the room.19:08:23
@whispers:catgirl.cloudwhispers (it/fae) joined the room.20:15:04
@letgamer:tchncs.deAlex Stephan joined the room.20:17:01
@philipdb:matrix.orgPhiliPdB joined the room.22:13:31
@ncfavier:matrix.orgncfavier changed their profile picture.23:55:16
9 Nov 2025
@robert:funklause.dedotlambdahttps://github.com/NixOS/nixpkgs/pull/452743 arguably patches a denial of service vulnerability, no CVE assigned though05:59:45
@9hp71n:matrix.orgghpzin (moved to @ghpzin:envs.net) changed their display name from ghpzin to ghpzin (moved to @ghpzin:envs.net).15:03:37
@vincent:pimo.idVincent joined the room.22:43:09
10 Nov 2025
@felix.schroeter:scs.ems.hostFelix Schröter changed their display name from Felix Schröter (🌄 27.10. – 09.11.) to Felix Schröter.10:23:42
11 Nov 2025
@hexa:lossy.networkhexahttps://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-2025111118:08:51
@hexa:lossy.networkhexa cc flx 18:08:58
@flx-:matrix.orgflxhttps://github.com/NixOS/nixpkgs/pull/46073118:18:16
@oak:universumi.fioak 🏳️‍🌈♥️ changed their profile picture.19:20:42
12 Nov 2025
@inayet:matrix.orgInayet changed their display name from inayet to Inayet.12:38:28
@hexa:lossy.networkhexahttps://www.openwall.com/lists/oss-security/2025/11/12/1 https://www.openwall.com/lists/oss-security/2025/11/12/216:42:28
@hexa:lossy.networkhexaboth cups-filters16:42:36

There are no newer messages yet.


Back to Room ListRoom Version: 6