!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

652 Members
Coordination and triage of security issues in nixpkgs | Discussions in #security-discuss:nixos.org | Open PRs: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc+label%3A%221.severity%3A+security%22202 Servers

Load older messages


SenderMessageTime
6 Aug 2025
@qyliss:fairydust.spaceAlyssa RossKeep it for the Friday kernel updates then?15:47:37
@hexa:lossy.networkhexasgtm15:47:43
@qyliss:fairydust.spaceAlyssa Rossleft a comment15:48:14
@sandro:supersandro.deSandro 🐧You need to strip the query strings otherwise the link is dead .... https://git.alpinelinux.org/aports/tree/main/busybox/0001-tar-fix-TOCTOU-symlink-race-condition.patch23:35:43
8 Aug 2025
@0x4a6f:nixos.dev0x4A6F joined the room.06:59:20
9 Aug 2025
@hexa:lossy.networkhexahttps://seclists.org/oss-sec/2025/q3/82 7-zip23:02:50
@hexa:lossy.networkhexa emily: do we have that one or the other one? 23:03:23
@emilazy:matrix.orgemilywe have both :(23:03:34
@emilazy:matrix.orgemily this one would be _7zz 23:03:46
@emilazy:matrix.orgemily p7zip is probably vulnerable since it's unmaintained 23:03:53
@emilazy:matrix.orgemilyplease feel free to kill that one with fire23:03:58
10 Aug 2025
@jkarlson:kapsi.fiEmil ThorsøeRedacted or Malformed Event16:28:24
@jkarlson:kapsi.fiEmil Thorsøehttps://github.com/Nheko-Reborn/nheko/releases/tag/v0.12.116:29:47
@jkarlson:kapsi.fiEmil Thorsøenot sure what it is, but marked security16:30:09
@hexa:lossy.networkhexahtml escaping16:57:12
@cafkafk:fem.ggcafkafk joined the room.19:19:00
12 Aug 2025
@psalden:matrix.org@psalden:matrix.org left the room.06:56:18
13 Aug 2025
@hexa:lossy.networkhexahttps://seclists.org/oss-sec/2025/q3/9818:17:03
@hexa:lossy.networkhexa* https://seclists.org/oss-sec/2025/q3/98 nginx18:17:04
@hexa:lossy.networkhexa* https://seclists.org/oss-sec/2025/q3/98 nginx ngx_mail_smtp_module18:17:27
14 Aug 2025
@jh-devv:matrix.org@jh-devv:matrix.org left the room.15:13:56
@h0nig2k:matrix.orgh0nig2khttps://github.com/NixOS/nixpkgs/pull/43375619:24:51
@grimmauld:grapevine.grimmauld.deGrimmauld (any/all)https://nvd.nist.gov/vuln/detail/CVE-2025-47807 https://nvd.nist.gov/vuln/detail/CVE-2025-47806 https://nvd.nist.gov/vuln/detail/CVE-2025-47219 https://nvd.nist.gov/vuln/detail/CVE-2025-47183 https://nvd.nist.gov/vuln/detail/CVE-2025-47808 https://github.com/NixOS/nixpkgs/pull/420649 (was already merged, but still putting this here for documentations sake)19:37:21
@grimmauld:grapevine.grimmauld.deGrimmauld (any/all)* GStreamer: https://nvd.nist.gov/vuln/detail/CVE-2025-47807 https://nvd.nist.gov/vuln/detail/CVE-2025-47806 https://nvd.nist.gov/vuln/detail/CVE-2025-47219 https://nvd.nist.gov/vuln/detail/CVE-2025-47183 https://nvd.nist.gov/vuln/detail/CVE-2025-47808 https://github.com/NixOS/nixpkgs/pull/420649 (was already merged, but still putting this here for documentations sake)19:42:42
@lt1379:matrix.orgLunhttps://github.com/NixOS/nixpkgs/pull/43376922:45:10
15 Aug 2025
@flipperskip:matrix.org@flipperskip:matrix.org left the room.04:11:40
@sersorrel:matrix.orgsorrel joined the room.09:52:27
16 Aug 2025
@grimmauld:grapevine.grimmauld.deGrimmauld (any/all)ImageMagick: CVE-2025-55005: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v393-38qx-v8fp CVE-2025-55004: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw CVE-2025-55160: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6hgw-6x87-578x https://github.com/NixOS/nixpkgs/pull/43324913:01:19
@17lifers:matrix.org17lifers (Ryan) joined the room.21:34:16
17 Aug 2025
@maridonkers:matrix.org@maridonkers:matrix.org left the room.19:07:13

Show newer messages


Back to Room ListRoom Version: 6