| 17 Apr 2024 |
 felschr | https://github.com/NixOS/nixpkgs/pull/304595 | 03:15:53 |
 vcunat | https://discourse.nixos.org/t/virus-detected-on-nixos-virtualbox-appliance/43534 | 06:12:01 |
 hexa | continued in #security-discuss:nixos.org | 08:52:23 |
|  K900 changed their display name from K900 ⚡️ to K9Ö0. | 17:16:43 |
| K900 changed their display name from K9Ö0 to K900. | 17:21:54 |
| K900 | 17:21:55 |
| hexa | https://www.openwall.com/lists/oss-security/2024/04/17/9 ma27 | 22:53:09 |
| 18 Apr 2024 |
|  dmorab joined the room. | 16:53:21 |
|  smorci joined the room. | 19:52:56 |
| smorci changed their display name from Szekely Marton to smorci. | 19:54:16 |
| smorci set a profile picture. | 19:54:50 |
 sugi | https://forgejo.org/2024-04-release-v1-21-11-0/ <- forgejo security update to 1.21.11 | 20:45:39 |
| hexa | emily: | 21:07:16 |
| hexa | * cc emily: | 21:07:21 |
| 19 Apr 2024 |
|  mjm changed their profile picture. | 19:17:27 |
| 20 Apr 2024 |
|  cafkafk changed their profile picture. | 13:17:14 |
| 21 Apr 2024 |
 ris_ | what are we doing about hashicorp vault in stable now? CVE-2024-2660 indicates we should upgrade stable to 1.14.11, but the only 1.14.11 tag on github is v1.14.11+ent, which appears to be BSL | 18:59:50 |
 magic_rb | we have to either not upgrade and mark as broken or change license, not really anything else we can do
(hashicorp never ceases to disappoint) | 19:00:58 |
| magic_rb | * we have to either not upgrade and mark as insecure or change license, not really anything else we can do
(hashicorp never ceases to disappoint) | 19:01:14 |
| ris_ | sure.. but which? | 19:48:09 |
| magic_rb | We change the license and introduce a warning saying it changed in case someone has allowUnfree but doesnt want to use nonfree vault. If we broke it people couldnt upgrade at all | 19:49:13 |
| magic_rb | * We change the license and introduce a warning saying it changed in case someone has allowUnfree but doesnt want to use nonfree vault. If we broke it people couldnt upgrade at all
Moving to #security-discuss:nixos.org | 19:49:52 |
| 22 Apr 2024 |
|  @sarosa:infosec.exchange joined the room. | 14:03:35 |
| 23 Apr 2024 |
 teutat3s | https://github.com/element-hq/synapse/releases/tag/v1.105.1
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31208 | 16:51:25 |
| teutat3s | Done in https://github.com/NixOS/nixpkgs/pull/306326 | 17:04:44 |
| 24 Apr 2024 |
|  @stablejoy:matrix.org changed their profile picture. | 08:59:19 |
| hexa | https://www.openwall.com/lists/oss-security/2024/04/24/1 pdns-recursor | 11:35:58 |
 [0x4A6F] | Not tested yet: https://github.com/NixOS/nixpkgs/pull/306543 | 14:23:29 |
|  Joachim Ernst joined the room. | 14:24:48 |
|  @lourkeur:nixos.dev left the room. | 14:26:49 |
