!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

689 Members
Coordination and triage of security issues in nixpkgs | Discussions in #security-discuss:nixos.org | Open PRs: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc+label%3A%221.severity%3A+security%22210 Servers

Load older messages


SenderMessageTime
8 Apr 2026
@getchoo:matrix.orggetchoothe above was merged. will hopefully do the 25.11 backport tonight thanks for the heads up :)03:48:44
@k900:0upti.meK900Adjacent XDP update: https://www.phoronix.com/news/XDG-Desktop-Portal-1.20.405:17:20
@me:m4rc3l.deMarcel joined the room.13:11:09
@ar:is-a.catari ❄how about some openssl? https://openssl-library.org/news/secadv/20260407.txt15:08:27
@me:m4rc3l.deMarcel ive created a PR https://github.com/NixOS/nixpkgs/pull/507974 15:50:50
@bart:bartoostveen.nlBart https://github.com/NixOS/nixpkgs/pull/507985 16:15:46
@bart:bartoostveen.nlBart https://github.com/NixOS/nixpkgs/pull/507860 16:16:18
9 Apr 2026
@samuel.dionne-riel:cyberus-technology.deSamuel Dionne-Rielavahi CVEs and mitigation https://github.com/NixOS/nixpkgs/pull/50801214:19:37
@andre4ik3:matrix.organdre4ik3 joined the room.21:49:06
@andre4ik3:matrix.organdre4ik3Hi, would appreciate review/and or merge of https://github.com/NixOS/nixpkgs/pull/508083 for Cockpit CVE-2026-4631 (https://github.com/advisories/GHSA-rq49-h582-83m7)21:49:32
@caverav:matrix.orgcaverav joined the room.22:07:46
@opandddd:matrix.orgSapii joined the room.23:06:48
10 Apr 2026
@tom:dragar.deTomCould someone please take a look at this go bump: https://github.com/NixOS/nixpkgs/pull/508457 Particullary relevant for nixos-25.11 since there it's the default go version.20:35:19
11 Apr 2026
@bart:bartoostveen.nlBartRedacted or Malformed Event23:58:28
12 Apr 2026
@andre4ik3:matrix.organdre4ik3Backport for 25.11: https://github.com/NixOS/nixpkgs/pull/50892906:39:55
@leona:leona.isleona changed their profile picture.12:15:45
13 Apr 2026
@haliliaj06jiroh:matrix.orgAndrei Jiroh [moved to @ajhalili2006:tchncs.de] changed their display name from Andrei Jiroh [moved to @ajhalili2006:envs.net] to Andrei Jiroh [moved to @ajhalili2006:tchncs.de].00:19:56
@sandro:supersandro.deSandro 🐧

https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.5

dotlambda

00:55:56
@hexa:lossy.networkhexahttps://github.com/dani-garcia/vaultwarden/releases/tag/1.35.601:03:50
@alesya-h:nixos.devAlesya changed their display name from Alesya Huzik to Alesya.01:46:22
@qweered_real:matrix.orgAliaksandr joined the room.02:28:46
@teutat3s:pub.solarteutat3shttps://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/thread/6VW6OGVSC7LO3QUMBEZOPQFYYOFDJ452/12:18:31
@teutat3s:pub.solarteutat3shttps://github.com/NixOS/nixpkgs/pull/50959014:52:33
@teutat3s:pub.solarteutat3shttps://github.com/NixOS/nixpkgs/pull/50959114:52:40
@netali:cuties.devJenny joined the room.19:43:21
14 Apr 2026
@lukas:landgraf.moeLukas joined the room.01:53:47
@sandro:supersandro.deSandro 🐧Two critical authentication bypasses https://github.com/oauth2-proxy/oauth2-proxy/releases/tag/v7.15.211:49:55
@sandro:supersandro.deSandro 🐧https://github.com/NixOS/nixpkgs/pull/50994112:02:50
@vcunat:matrix.orgvcunatX.Org Security Advisory: multiple security issues X.Org X server and Xwayland https://lists.x.org/archives/xorg-announce/2026-April/003677.html16:22:07
@klea:catgirl.cloudklea (she/her) joined the room.16:23:16

Show newer messages


Back to Room ListRoom Version: 6