!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

686 Members
Coordination and triage of security issues in nixpkgs215 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
4 Nov 2024
@aleksana:mozilla.orgFind me at aleksana:qaq.liSomeone reported on hacker news that yt-dlp 2024.10.22 (which we are also using) has malicious behavior: https://news.ycombinator.com/item?id=4204060012:03:10
@aleksana:mozilla.orgFind me at aleksana:qaq.liNo conclusion has been drawn yet12:04:27
@sandro:supersandro.deSandrowe are not using the prebuilt binaries in the first place and the actual content is also being disputed 15:52:07
@martijn:plebian.nlmartijn joined the room.18:41:25
@frontraffle:transfem.devNeco Arc left the room.19:58:37
@fifteenconcierge:matrix.org@fifteenconcierge:matrix.org joined the room.20:26:13
@fifteenconcierge:matrix.org@fifteenconcierge:matrix.org left the room.20:31:32
@fifteenconcierge:matrix.org@fifteenconcierge:matrix.org joined the room.20:35:42
@a1ois:matrix.orgAlois set a profile picture.21:12:08
@alois:kemono.sualois 🌱 joined the room.21:17:03
@a10is:matrix.orga10is joined the room.21:31:12
5 Nov 2024
@a1ois:matrix.orgAlois
In reply to @aleksana:mozilla.org
Someone reported on hacker news that yt-dlp 2024.10.22 (which we are also using) has malicious behavior: https://news.ycombinator.com/item?id=42040600
complete nonsense; can be safely ignored + we compile from source
00:17:59
@a1ois:matrix.orgAlois
In reply to @aleksana:mozilla.org
Someone reported on hacker news that yt-dlp 2024.10.22 (which we are also using) has malicious behavior: https://news.ycombinator.com/item?id=42040600
*
00:18:09
@grossmap:in.tum.de@grossmap:in.tum.de left the room.14:15:08
6 Nov 2024
@scrumplex:duckhub.ioScrumplexhttps://github.com/NixOS/nixpkgs/pull/35396808:12:13
7 Nov 2024
@emilazy:matrix.orgemilyhttps://github.com/NixOS/nixpkgs/pull/354139 https://github.com/NixOS/nixpkgs/pull/35414005:22:44
@vcunat:matrix.orgvcunatMissing expat triage for 24.05: https://github.com/NixOS/nixpkgs/pull/354155#issuecomment-246179524510:29:35
@vcunat:matrix.orgvcunatThough it's only a NULL dereference and 24.05 won't live very long anyway.10:34:08
@leona:leona.isleonait seems quite trivial to backport, so I'd do it 11:13:18

Show newer messages


Back to Room ListRoom Version: 6