!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

742 Members
Coordination and triage of security issues in nixpkgs227 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
29 Sep 2023
@hexa:lossy.networkhexaRedacted or Malformed Event01:47:10
@openssl_rand:projectsegfau.lt@openssl_rand:projectsegfau.lt left the room.02:04:43
@hexa:lossy.networkhexa
In reply to @hexa:lossy.network
libvpx https://www.openwall.com/lists/oss-security/2023/09/28/5
fixed on master/release-23.05, will be part of the next channel bumps, but we still need to take care of all the vendored instances. effort similar to libwebp coordinated in #security-discuss:nixos.org
13:50:51
@lotte:chir.rs@lotte:chir.rs changed their profile picture.17:14:59
30 Sep 2023
@felschr:matrix.orgfelschr

https://github.com/NixOS/nixpkgs/pull/258137

https://github.com/NixOS/nixpkgs/pull/258138

05:28:11
@cafkafk:gitter.imcafkafk changed their profile picture.15:56:10
@hexa:lossy.networkhexa exim https://lwn.net/Articles/946004/ ajs124 21:54:28
@hexa:lossy.networkhexa

""Fixes are available in a protected repository and are ready to be applied by the distribution maintainers""

21:55:09
@hexa:lossy.networkhexa *

Fixes are available in a protected repository and are ready to be applied by the distribution maintainers

21:55:14
@hexa:lossy.networkhexa👏21:55:23
@tomberek:matrix.orgtombereki misread that as "exif" at first and thought, oh no.. here we go21:55:28
@hexa:lossy.networkhexahaha, please no more audio/vidoe/image format vulnerabilities this year 😄 21:55:46
* @raitobezarius:matrix.orgraitobezarius gets the libFuzzer out of the pocket and runs it on libcaca21:56:06

Show newer messages


Back to Room ListRoom Version: 6