!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

726 Members
Coordination and triage of security issues in nixpkgs225 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
30 Jan 2024
@aloisw:kde.org@aloisw:kde.org
In reply to @delroth:delroth.net
switching the wrappers to musl was a very good idea
The wrappers do not call syslog.
18:53:01
@delroth:delroth.netdelroththis was a general statement on glibc, not on this particular vuln :)18:54:37
@tgerbet:matrix.orgtgerbet
In reply to @delroth:delroth.net
https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt
https://github.com/NixOS/nixpkgs/pull/285050
18:57:59
@delroth:delroth.netdelrothwe can move followup discussion to the discuss channel, I think we do need to remediate that last glibc vuln because wrappers forward all of argv (including argv[0]) to the wrapped program18:58:10

Show newer messages


Back to Room ListRoom Version: 6