!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

660 Members
Coordination and triage of security issues in nixpkgs | Discussions in #security-discuss:nixos.org | Open PRs: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc+label%3A%221.severity%3A+security%22205 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
11 Sep 2025
@pyrox:pyrox.devdish [Fox/It/She]* do we have a "days since new CPU side channel vuln" counter16:44:08
@adam:robins.wtfadamcstephensWhether we did or not, it's 0 today16:44:25
@phanirithvij:matrix.orgloudgolem joined the room.17:50:57
@martijn:boers.emailmartijn changed their profile picture.18:33:51
@hexa:lossy.networkhexahttps://github.com/OpenPrinting/cups/releases/tag/v2.4.1320:36:43
@hexa:lossy.networkhexacan't believe I subscribed to cups releases 🫣20:37:01
@hexa:lossy.networkhexafree for anyone to pick up20:37:28
@hexa:lossy.networkhexa* free for anyone to pick up, the maintainer is AWOL20:37:33
@stigo:matrix.orgstigoIt's ☕️ :D20:52:53
12 Sep 2025
@jordanjoel1:matrix.org@jordanjoel1:matrix.org changed their profile picture.03:27:12
@jordanjoel1:matrix.org@jordanjoel1:matrix.org left the room.03:34:39
@aidalgol:tchncs.de@aidalgol:tchncs.de set a profile picture.09:21:38
@teutat3s:pub.solarteutat3shttps://github.com/NixOS/nixpkgs/pull/44207611:26:51
@sandro:supersandro.deSandro 🐧I would like to bring this package to the attention of the security minded people https://github.com/NixOS/nixpkgs/pull/433307 It is using very old vendored versions of fontforge and poppler, both over 5 years old, and at least poppler contains 10+ CVEs.11:35:13
@teutat3s:pub.solarteutat3shttps://github.com/NixOS/nixpkgs/pull/43999611:44:42
@emilazy:matrix.orgemilyonly been in the tree for 8 hours, let's revert11:45:13

Show newer messages


Back to Room ListRoom Version: 6