!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

700 Members
Coordination and triage of security issues in nixpkgs217 Servers

Load older messages


SenderMessageTime
16 Jul 2024
@mtheil:scs.ems.hostMarkus TheilBotan had some CVEs fixed: https://github.com/NixOS/nixpkgs/pull/32762110:50:51
17 Jul 2024
@mtheil:scs.ems.hostMarkus TheilAutomatic backport to 24.05 failed. Here's the manual one: https://github.com/NixOS/nixpkgs/pull/32786509:09:32
18 Jul 2024
@tewi:queer.cattewi 🏳️‍⚧️ joined the room.00:26:15
@sofo:matrix.org@sofo:matrix.org removed their display name Sofie.16:37:28
@sofo:matrix.org@sofo:matrix.org set their display name to Sofie (AWAY).16:37:38
@tewi:queer.cattewi 🏳️‍⚧️ changed their profile picture.23:50:51
@tewi:queer.cattewi 🏳️‍⚧️ removed their profile picture.23:52:42
@tewi:queer.cattewi 🏳️‍⚧️ set a profile picture.23:53:17
19 Jul 2024
@hexa:lossy.networkhexa https://github.com/woodpecker-ci/woodpecker/releases/tag/v2.7.0 adamcstephens 🐝 00:03:17
@adam:robins.wtfadamcstephenshttps://github.com/NixOS/nixpkgs/pull/328330 https://github.com/NixOS/nixpkgs/pull/32833203:28:57
@adam:robins.wtfadamcstephens * https://github.com/NixOS/nixpkgs/pull/328330 https://github.com/NixOS/nixpkgs/pull/328332 i'm going to bed, but feel free to merge once the eval and linux builds pass.03:59:15
@easel:matrix.org@easel:matrix.org changed their profile picture.14:17:22
20 Jul 2024
@phileas:asra.grsyd installs gentoo (they/them) left the room.16:53:19
@phileas:asra.grsyd installs gentoo (they/them) joined the room.17:01:53
@felixfahrbahn:matrix.org@felixfahrbahn:matrix.org left the room.17:51:28
21 Jul 2024
@hanleym:matrix.org@hanleym:matrix.org left the room.11:46:07
22 Jul 2024
@nam3l33ss:matrix.org·☽•Nameless☆•777 · ± changed their profile picture.14:26:45
23 Jul 2024
@ezzobirbezziou:matrix.orgEzzobir Bezziou joined the room.08:22:51
@hexa:lossy.networkhexahttps://www.openwall.com/lists/oss-security/2024/07/23/1 bind915:14:52
@hexa:lossy.networkhexa * https://www.openwall.com/lists/oss-security/2024/07/23/1 bind9 globin 15:14:57
@hexa:lossy.networkhexahttps://github.com/NixOS/nixpkgs/pull/32944916:31:02
@vcunat:matrix.orgvcunatFTR, one of these CVEs was in a coordinated embargo with https://github.com/NixOS/nixpkgs/pull/32947119:58:02
@emilazy:matrix.orgemilyat last, NixOS is in on an embargo!19:59:59
24 Jul 2024
@vcunat:matrix.orgvcunatSuch embargoes are not new. It's actually hard for major open-source DNS vendors to keep up with researchers trying to break stuff. (though this particular one wasn't from 3rd party but the BIND team)05:24:35
@redstone-menace:matrix.orgR̴̨͕͇͍̞̮̐̅͆̌̀̉̐͋̈́̃̀͒́̎̅̚̚̚͠͝Ĕ̵̡̛͖͖̟̙̫̱͈̘̞̭͍͍͑̌̄͑̓̋̓̀̈̏̈́͊̇͊͆̉͂̏̀̃̚͘͝͝ͅͅD̶̡̢͔̱̖̮͙͉̘̺͓͍̩̮͈͍͗̃̀̏͌͘͜ͅŚ̸̬̭̯̬͙͇͓̬̩̳̤͚͓̤̩̺͉͖̉͛̓̿̎͊̿̆́̐͂̇͌̄̇̓͘ͅͅT̴̞̫̘̝͇͔̟̪̪̦͂̔̎̀̎ͅŎ̷̡̬̹̪͈̭̣͈̭̭͉̦̖̝̘̪͖͔̥̦̘̻̳Ṋ̶̛̫͈̳̘͚̜̔̋͆̅̈́͊̑͊̉̌̈́̾͑̈́̚ͅË̸̡̨̨̛͇̜̖͔͖̻̟̗̠̙͓̘̗̥͉͇̜͑͆͊͑͑̀̓͒͜͝͝ changed their display name from redstone-menace to Redstone.10:17:19
@hexa:lossy.networkhexahttps://www.openwall.com/lists/oss-security/2024/07/24/1 https://www.openwall.com/lists/oss-security/2024/07/24/2 can't say I've missed curl updates 🫠11:10:45
@hexa:lossy.networkhexahttps://github.com/NixOS/nixpkgs/pull/32963612:09:11
@hexa:lossy.networkhexahttps://github.com/NixOS/nixpkgs/pull/32964312:09:15
25 Jul 2024
@bumperboat:matrix.org@bumperboat:matrix.org changed their display name from bumperboat (UTC+2) to bumperboat.12:47:25
26 Jul 2024
@sasha:the-apothecary.clubSashanoraa.gay (she/her, ze/zir) changed their display name from Sashanoraa.gay (ze/zir, she/her) to Sashanoraa.gay (she/her, zi/zir).02:06:55

Show newer messages


Back to Room ListRoom Version: 6