| 8 Jun 2021 |
das_j | https://github.com/orgs/NixOS/teams/security-notifications | 11:55:40 |
hexa | https://nixos.org/community/teams/security.html | 11:56:18 |
das_j | lol the members on the website don't match up with any of the two teams | 11:57:15 |
das_j | ah maybe the security-notifications team | 11:57:33 |
das_j | Alyssa Ross: the backports were just created | 11:57:53 |
das_j | * Alyssa Ross: the backports were created just now | 11:57:58 |
hexa | everything merged | 12:00:05 |
hexa | thanks for taking care of that | 12:00:07 |
das_j | fyi, don't delete your branch before the backports were created: https://github.com/NixOS/nixpkgs/pull/126193#issuecomment-856704261 | 12:04:10 |
Alyssa Ross | that's annoying -- the action shouldn't need the branch | 12:04:54 |
das_j | it doesn't. The backports were created anyway but that error was printed afterwards for some reason | 12:05:13 |
hexa | poke domen I guess? | 12:05:29 |
das_j | → #nixos-dev | 12:05:51 |
hexa | or create an issue here https://github.com/zeebe-io/backport-action | 12:05:54 |
| julianst joined the room. | 13:25:53 |
hexa | https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20210608 | 17:01:28 |
das_j | cross-posting this issue here since it seems to be pretty severe for people using firefox addons: https://github.com/NixOS/nixpkgs/issues/126065#issuecomment-857168329 | 21:28:20 |
hexa | we are aware and already looking into it | 21:29:57 |
das_j | thank you, that's great | 21:30:06 |
hexa | https://github.com/NixOS/nixpkgs/pull/126271 | 21:31:55 |
hexa | this is not a proper fix, since it introduces a regression into the release | 21:34:07 |
hexa | but fixing up p11-kit/cacert is going to take a while | 21:34:17 |
hexa | https://nvd.nist.gov/vuln/detail/CVE-2021-20201 | 22:58:16 |
hexa | fixed in spice >= 0.14.92, which is not a public release yet | 22:58:40 |
hexa | https://nvd.nist.gov/vuln/detail/CVE-2020-14355 | 22:59:29 |
hexa | fixed in spice-gtk >= 0.14.2-1, no public release yet | 22:59:49 |
| 9 Jun 2021 |
hexa | https://github.com/NixOS/nixpkgs/pull/126291 | 01:34:44 |
pennae | oh nice, 5th-gen doesn't get updates? :D | 01:52:11 |
| kranzes left the room. | 13:31:32 |
| scr1bbles joined the room. | 14:11:15 |