!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

689 Members
Coordination and triage of security issues in nixpkgs | Discussions in #security-discuss:nixos.org | Open PRs: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc+label%3A%221.severity%3A+security%22210 Servers

Load older messages


SenderMessageTime
7 Apr 2026
@ma27:nicht-so.sexyma27fwiw when I introduced staging-nixos my impression was that there aren't enough such changes to warrant the extra effort of this process and I haven't heard anything else ever since.20:40:35
@joerg:thalheim.ioMic92https://github.com/NixOS/nixpkgs/pull/507730 this is the PR to merge staging-nixos21:01:57
@joerg:thalheim.ioMic92I am off for today, hope someone picks this up21:02:27
@winter:catgirl.cloudWinterdid anyone trigger a -small yet?21:42:41
@winter:catgirl.cloudWinterif not i'll do so unless someone shouts21:42:53
@winter:catgirl.cloudWinter* if not i'll do so unless someone shouts not to21:42:57
@winter:catgirl.cloudWinter* if not i'd like to do so unless someone shouts not to21:45:37
@leona:leona.isleonayes21:49:02
@winter:catgirl.cloudWinterkicked21:49:11
@leona:leona.isleonawaits for 25.11 to eval21:49:13
@winter:catgirl.cloudWinter* kicked off21:49:15
@winter:catgirl.cloudWinteroh oops21:49:23
@winter:catgirl.cloudWinter
Evaluation pending since: 34s ago

:melting:
21:49:46
@leona:leona.isleonadoesn't matter21:49:54
@leona:leona.isleonait waits anyway for release-25.11 to finish eval. That should happen in the next minutes21:50:09
@leona:leona.isleonaI'm going to sleep too. Someone should trigger an eval for nixos:unstable at some point21:50:28
@leona:leona.isleona* I'm going to bed too. Someone should trigger an eval for nixos:unstable at some point21:50:35
@winter:catgirl.cloudWinter (wait, where is that configured in the jobset?) 21:50:51
@leona:leona.isleonahydra-evaluator only evaluates one jobset at at ime21:51:09
@winter:catgirl.cloudWinter can do that once 25.11 and small are done 21:51:11
@leona:leona.isleona* hydra-evaluator only evaluates one jobset at at time21:51:13
@winter:catgirl.cloudWinter ah, right. wait, just to clarify: did you kick off a -small before i did? 21:51:40
@winter:catgirl.cloudWinterjust don't want to have two in a short period of time, if i have to cancel one i will21:51:53
@leona:leona.isleonaI evaled release-25.11. Then I evaled unstable-small (which just means that it will eval once 25.11 is finished). Your additional eval request for unstable-small merges with mine, so only one eval will be created21:52:56
@leona:leona.isleona* I evaled release-25.11. Then I evaled unstable-small (which just means that it will eval once 25.11 is finished / it gets added to the "eval queue"). Your additional eval request for unstable-small merges with mine, so only one eval will be created21:53:44
@tgerbet:matrix.orgtgerbet Flatpak sandbox escape CVE-2026-34078 + arbitrary file deletion on the host CVE-2026-34079 @getchoo:matrix.org https://github.com/flatpak/flatpak/releases/tag/1.16.4 22:22:00
@bart:bartoostveen.nlBart https://github.com/NixOS/nixpkgs/pull/507753 22:41:10
@bart:bartoostveen.nlBartBuilds on x86_64-linux, should not break any builds theoretically22:41:31
@informatic:hackerspace.plinfowski joined the room.23:35:02
8 Apr 2026
@jammie:matrix.orgJamieMagee set a profile picture.03:42:56

Show newer messages


Back to Room ListRoom Version: 6