!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

695 Members
Coordination and triage of security issues in nixpkgs217 Servers

Load older messages


SenderMessageTime
5 Jun 2024
@insurgo:matrix.orgtlaurion aka Insurgo [ Timezone: ET ] changed their display name from Insurgo aka tlaurion [UTC-4] to Insurgo aka tlaurion [UTC-4] ( back June 6th).12:30:36
@katexochen:matrix.orgPaul Meyer (katexochen)Anyone wants to take a look at https://github.com/NixOS/nixpkgs/pull/317476 before merge?19:19:48
@tgerbet:matrix.orgtgerbetLet me run an aarch64 build, the build process of envoy can be a bit surprising…19:25:07
6 Jun 2024
@insurgo:matrix.orgtlaurion aka Insurgo [ Timezone: ET ] changed their display name from Insurgo aka tlaurion [UTC-4] ( back June 6th) to Insurgo aka tlaurion [UTC-4] (AFK still, replying from phone).16:35:49
@akechishiro:matrix.orgAkechiShiro set a profile picture.23:57:31
7 Jun 2024
@insurgo:matrix.orgtlaurion aka Insurgo [ Timezone: ET ] changed their display name from Insurgo aka tlaurion [UTC-4] (AFK still, replying from phone) to Insurgo aka tlaurion [UTC-4].16:28:05
8 Jun 2024
@alina:kescher.at@alina:kescher.at changed their display name from alina to alina🏳️‍⚧️🐾.10:38:05
@alina:kescher.at@alina:kescher.at changed their profile picture.10:39:44
@mtheil:scs.ems.hostMarkus Theilhttps://github.com/NixOS/nixpkgs/pull/31832217:29:11
9 Jun 2024
@mtheil:scs.ems.hostMarkus TheilFRR just tagged 10.0.1, which fixes multiple security critical bugs, e.g. CVE-2024-31951. The auto update bot already took notice of this tag: https://github.com/NixOS/nixpkgs/pull/31849616:07:06
10 Jun 2024
@mtheil:scs.ems.hostMarkus Theil

frr 10.0.1 and 9.0.3 probably fix at least:

  • CVE-2024-31948
  • CVE-2024-31949
  • CVE-2024-31950
  • CVE-2024-31951

I added a PR for 23.11 here: https://github.com/NixOS/nixpkgs/pull/318758

10:33:46
@Minijackson:matrix.orgMinijacksonJellyfin update that has a small security fix on first time setup: https://github.com/NixOS/nixpkgs/pull/318873 19:04:56
11 Jun 2024
@wxnzemof:matrix.orgwxnzemof joined the room.09:53:35
@wxnzemof:matrix.orgwxnzemofHi, this is probably benign but maybe worth looking into: https://github.com/nix-community/nix-installers/issues/4909:54:13
@sandro:supersandro.deSandroThis is what the GitHub Action does https://github.com/nix-community/nix-installers/blob/master/.github/workflows/gh-pages.yml11:40:17
@aynish:sealight.xyz@aynish:sealight.xyz left the room.14:56:41
@networkexception:chat.upi.li@networkexception:chat.upi.li changed their display name from networkException to networkException (moving to @networkexception:nwex.de).18:34:30
@sasha:the-apothecary.clubSashanoraa.gay (she/her, ze/zir) changed their display name from Sashanoraa.gay (ze/zir) to Sashanoraa.gay (ze/zir, she/her).21:46:14
12 Jun 2024
@hexa:lossy.networkhexahttps://conduit.rs/changelog/#v0-8-0-2024-06-12 (and conduwuit/grapevine for whoever uses those)19:09:11
@networkexception:nwex.denetworkException joined the room.19:28:47
@hexa:lossy.networkhexahttps://github.com/NixOS/nixpkgs/pull/31936219:57:39
@hexa:lossy.networkhexawill backport to release-24.05, given that the breaking changes in 0.7.0 don't affect us19:57:52
@hexa:lossy.networkhexa * will backport to release-24.05 and release-23.11, given that the breaking changes in 0.7.0 don't affect us 19:58:11
@hexa:lossy.networkhexamarked as vulnerable on 23.11, backport was not possible20:57:43
13 Jun 2024
@george:matrix.geonat.nzOahzEgroeg changed their display name from George to OahzEgroeg.10:49:08
14 Jun 2024
@george:matrix.geonat.nzOahzEgroeg left the room.09:43:26
@george:matrix.geonat.nzOahzEgroeg joined the room.09:47:22
@bernhard:o-g.atcnm joined the room.18:16:58
15 Jun 2024
@felschr:matrix.orgfelschrhttps://github.com/NixOS/nixpkgs/pull/31931511:13:57
@bedridden:matrix.orgbedridden joined the room.21:27:14

Show newer messages


Back to Room ListRoom Version: 6