| 28 Apr 2026 |
 Samuel Dionne-Riel | https://github.com/NixOS/nixpkgs/pull/512192#issuecomment-4339118013 | 21:16:29 |
 hexa | https://www.openwall.com/lists/oss-security/2026/04/28/20 | 23:45:11 |
 whispers [& it/fae] | looks like a non-issue: https://seclists.org/oss-sec/2026/q2/257. our source tarball has the correct line. | 23:55:36 |
| whispers [& it/fae] | looks like a non-issue: https://seclists.org/oss-sec/2026/q2/257. our source tarball (decompressed from traceroute/traceroute.c) has the correct line. | 23:56:02 |
| whispers [& it/fae] | looks like a non-issue: https://seclists.org/oss-sec/2026/q2/257. our source tarball (decompressed from traceroute.src) has the correct line. | 23:56:12 |
| whispers [& it/fae] | looks like a non-issue: https://www.openwall.com/lists/oss-security/2026/04/28/22. our source tarball (decompressed from traceroute.src) has the correct line. | 23:58:53 |
| 29 Apr 2026 |
| hexa | https://www.openwall.com/lists/oss-security/2026/04/29/1 starman stigo | 00:19:07 |
 stigo | https://github.com/NixOS/nixpkgs/pull/514601 | 00:52:28 |
| hexa | Scrumplex curl | 07:44:43 |
| hexa | Redacted or Malformed Event | 07:45:11 |
| Samuel Dionne-Riel | https://github.com/NixOS/nixpkgs/pull/514063 | 13:01:15 |
| stigo | https://github.com/NixOS/nixpkgs/pull/514747 <-- perlPackages.TextCSV_XS | 14:35:51 |
|  brett 💕 joined the room. | 21:08:26 |
| stigo | https://github.com/NixOS/nixpkgs/pull/514896 <-- perlPackages.Plack | 23:42:27 |
| 30 Apr 2026 |
 Fernando Rodrigues | https://github.com/NixOS/nixpkgs/pull/514428 | Xen Security Advisories #483-488 (when applicable) | 06:24:34 |
 vcunat | https://lists.gnutls.org/pipermail/gnutls-help/2026-April/004922.html | 07:34:27 |
| vcunat | (I can have a look later to update.) | 07:34:44 |
| vcunat | I don't see this mentioned in nixpkgs issues+PRs yet:
https://copy.fail | 08:17:44 |
| vcunat | (kernel, CVE-2026-31431) | 08:18:01 |
 leona | it's discussed heavly over in #security-discuss:nixos.org | 08:18:05 |
| leona | (we wait for the 6.12 release, greg will do sometime today likely) | 08:18:20 |
| vcunat | https://github.com/NixOS/nixpkgs/pull/515016 | 09:20:14 |
|  autra joined the room. | 10:20:43 |
| autra | I'm not on the ML, but I could reproduce the copy.fail issue | 10:36:45 |
| hexa | #security-discuss:nixos.org | 10:38:54 |
| hexa | Redacted or Malformed Event | 10:39:06 |
| Fernando Rodrigues | * | 10:58:37 |
|  @enzime:nixos.dev joined the room. | 12:52:46 |
| @enzime:nixos.dev | hexa could you take a look at this PR? it removes DHE from nginx: https://github.com/NixOS/nixpkgs/pull/515057 | 12:54:04 |
| hexa | we're in breaking changes freeze unfortunately | 12:54:31 |
