| 22 Sep 2025 |
 hexa | https://trubka.network.cz/pipermail/bird-users/2025-September/018417.html | 21:38:56 |
 Tom | https://github.com/NixOS/nixpkgs/pull/445303 | 22:29:47 |
| hexa | https://seclists.org/oss-sec/2025/q3/177 Jan Tojnar | 23:16:39 |
| hexa | * https://seclists.org/oss-sec/2025/q3/177 webkitgtk Jan Tojnar | 23:16:43 |
| hexa | I'm a bit lost on webkitgtk versioning, we seem to be on 2.50.0 for all versions? | 23:17:48 |
| 23 Sep 2025 |
 vcunat | bird2 is NOT affected by these security issues, by the way. | 05:33:14 |
 Jan Tojnar | yes. The versions in attribute name indicate ABI variant: 6_0 linked against GTK 4 and libsoup 3, 4_1 linked against GTK 3 and libsoup 3, 4_0 linked against GTK 3 and libsoup 2 (insecure) | 09:27:13 |
|  kenji changed their display name from a-kenji to kenji. | 10:38:47 |
| 24 Sep 2025 |
 lennart | release notes are yet to be released, I guess that will open in the next 2-4 hours https://github.com/NixOS/nixpkgs/pull/445709 | 05:28:45 |
| lennart | * Zammad release notes are yet to be released, I guess that will open in the next 2-4 hours https://github.com/NixOS/nixpkgs/pull/445709 | 05:28:51 |
| lennart | there is a fix to one security problem included, that I discovered. but they also had more disclosure processes involved in that release. | 05:33:13 |
 Markus Theil | OpenSSL Release Announcement
The OpenSSL project team would like to announce the upcoming release of
OpenSSL Library versions 3.5.4, 3.4.3, 3.3.5, 3.2.5 and 3.0.18.
We will also be releasing extended support for OpenSSL Library versions 1.0.2zm and 1.1.1zd, which will be available to premium support customers.
These releases will be made available on Tuesday, 30th September 2025, between 1300 and 1700 UTC.
These are security-fix releases. The highest severity issue fixed in each of these releases is Moderate:
https://openssl-library.org/policies/general/security-policy/index.html
Yours
The OpenSSL Project Team
| 07:27:04 |
| Markus Theil | I'd like to skip 3.5.3 and directly bump to 3.5.4 and 3.0.18. | 07:27:56 |
| lennart | In reply to @lennart:0520.ch
Zammad release notes are yet to be released, I guess that will open in the next 2-4 hours https://github.com/NixOS/nixpkgs/pull/445709 three Security Advisories linkes
- https://zammad.com/en/advisories/zaa-2025-07
- https://zammad.com/en/advisories/zaa-2025-08
- https://zammad.com/en/advisories/zaa-2025-09 | 09:55:49 |
| lennart | * three Security Advisories linked
- https://zammad.com/en/advisories/zaa-2025-07
- https://zammad.com/en/advisories/zaa-2025-08
- https://zammad.com/en/advisories/zaa-2025-09
| 09:56:01 |
| 30 Sep 2025 |
| hexa | https://www.freeipa.org/release-notes/4-12-5.html | 16:03:10 |
| hexa | released a few hours ago | 16:04:56 |
| hexa | https://github.com/NixOS/nixpkgs/pull/447512 | 16:06:54 |
|  NixOS Moderation Bot banned  @joepie91:pixie.town (divsive behavior). | 19:23:47 |
|  @saiko:knifepoint.net left the room. | 19:27:19 |
| 1 Oct 2025 |
| Markus Theil | https://github.com/NixOS/nixpkgs/pull/447713 | 11:52:59 |
| Markus Theil | Will do the backport for 25.05 later today. | 11:53:08 |
| Markus Theil | (currently at work) | 11:54:05 |
| Markus Theil | OpenSSL 3.6 was released some minutes ago. Shall we directly switch 3.5.2 -> 3.6.0 in unstable? | 18:22:35 |
|  @magic_rb:matrix.redalder.org left the room. | 18:23:17 |
 K900 | staging, but presumably yes? | 18:25:55 |
| K900 | Unless it breaks shit again | 18:25:58 |
| K900 | Which openssl minor updates tend to | 18:26:03 |
 Grimmauld (any/all) | I am also still waiting for github.com/HDFGroup/hdf5/milestone/10, they pushed it back from sep 29th to nov 3rd, which is a pain. There is security fixes in there, and i somewhat doubt it'll get upstream backports to 1.14.x.... | 18:28:47 |
| Markus Theil | https://github.com/NixOS/nixpkgs/pull/447808 | 18:56:39 |
