!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

699 Members
Coordination and triage of security issues in nixpkgs216 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
4 Nov 2024
@fifteenconcierge:matrix.org@fifteenconcierge:matrix.org joined the room.20:26:13
@fifteenconcierge:matrix.org@fifteenconcierge:matrix.org left the room.20:31:32
@fifteenconcierge:matrix.org@fifteenconcierge:matrix.org joined the room.20:35:42
@a1ois:matrix.orgAlois set a profile picture.21:12:08
@alois:kemono.sualois 🌱 joined the room.21:17:03
@a10is:matrix.orga10is joined the room.21:31:12
5 Nov 2024
@a1ois:matrix.orgAlois
In reply to @aleksana:mozilla.org
Someone reported on hacker news that yt-dlp 2024.10.22 (which we are also using) has malicious behavior: https://news.ycombinator.com/item?id=42040600
complete nonsense; can be safely ignored + we compile from source
00:17:59
@a1ois:matrix.orgAlois
In reply to @aleksana:mozilla.org
Someone reported on hacker news that yt-dlp 2024.10.22 (which we are also using) has malicious behavior: https://news.ycombinator.com/item?id=42040600
*
00:18:09
@grossmap:in.tum.de@grossmap:in.tum.de left the room.14:15:08
6 Nov 2024
@scrumplex:duckhub.ioScrumplexhttps://github.com/NixOS/nixpkgs/pull/35396808:12:13
7 Nov 2024
@emilazy:matrix.orgemilyhttps://github.com/NixOS/nixpkgs/pull/354139 https://github.com/NixOS/nixpkgs/pull/35414005:22:44
@vcunat:matrix.orgvcunatMissing expat triage for 24.05: https://github.com/NixOS/nixpkgs/pull/354155#issuecomment-246179524510:29:35
@vcunat:matrix.orgvcunatThough it's only a NULL dereference and 24.05 won't live very long anyway.10:34:08
@leona:leona.isleonait seems quite trivial to backport, so I'd do it 11:13:18
@teutat3s:pub.solarteutat3shttps://github.com/NixOS/nixpkgs/pull/35268917:26:39
8 Nov 2024
@jschvz:matrix.orgjschvz joined the room.02:57:52
10 Nov 2024
@chrisoboe:one.ems.hostChrisOboe removed their profile picture.11:56:25
11 Nov 2024
@k900:0upti.meK900 https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.4 uh oh 04:11:39
@k900:0upti.meK900Doing the update, it's probably not quite as bad because the vault is E2EE but still ba04:27:20
@k900:0upti.meK900* Doing the update, it's probably not quite as bad because the vault is E2EE but still bad04:27:21
@k900:0upti.meK900Merged, will run unstable-small now04:53:18

Show newer messages


Back to Room ListRoom Version: 6