!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

696 Members
Coordination and triage of security issues in nixpkgs215 Servers

Load older messages


SenderMessageTime
13 Jan 2025
@niklaskorz:korz.devNiklas Korz I think they're all already fixed in the version of vaultwarden we ship 15:29:40
@hexa:lossy.networkhexaearlier15:29:53
@hexa:lossy.networkhexathey were fixed in 1.32.515:30:14
@niklaskorz:korz.devNiklas KorzI see, thanks!15:33:12
14 Jan 2025
@hexa:lossy.networkhexahttps://www.openwall.com/lists/oss-security/2025/01/14/4 git 18:14:18
@hexa:lossy.networkhexahttps://kb.cert.org/vuls/id/952657 rsync 18:14:40
@hexa:lossy.networkhexahttps://github.com/NixOS/nixpkgs/pull/32201218:14:46
@hexa:lossy.networkhexa* https://github.com/NixOS/nixpkgs/pull/37378418:15:01
@tgerbet:matrix.orgtgerbetCurrently building 2.47.2 :) 18:16:42
@tgerbet:matrix.orgtgerbet* Currently building 2.47.2 :) https://github.com/NixOS/nixpkgs/pull/37378418:31:52
@tgerbet:matrix.orgtgerbet* Currently building 2.47.2 :) https://github.com/NixOS/nixpkgs/pull/37380118:32:10
@aidalgol:matrix.orgaidalgolhttps://www.yubico.com/support/security-advisories/ysa-2025-01/18:44:43
@hexa:lossy.networkhexa

No Yubico hardware is affected.

18:45:16
@hexa:lossy.networkhexapam-u2f18:45:29
@aidalgol:matrix.orgaidalgolAIUI, it's the PAM module for using U2F.18:46:18
@sophie:catgirl.cloudā›§-440729 [sophie raven] (it/its) changed their profile picture.18:56:36
@tgerbet:matrix.orgtgerbethttps://github.com/NixOS/nixpkgs/pull/37381819:30:17
@luke:vuksta.comLuke joined the room.20:47:26
15 Jan 2025
@leon:lhax.xyzleon joined the room.08:21:09
@ss:someonex.netSomeoneSerge (back on matrix) changed their display name from SomeoneSerge (utc+3) to SomeoneSerge.19:01:56
17 Jan 2025
@jwagner:wdz.deJohann Wagner changed their display name from Johann to Johann Wanger (hier nicht erreichbar).09:25:54
@jwagner:wdz.deJohann Wagner changed their display name from Johann Wanger (hier nicht erreichbar) to Johann Wagner.09:31:02
18 Jan 2025
@phileas:asra.grsyd installs gentoo (they/them) changed their display name from syd 9291 (they/them) to syd installs gentoo (they/them).16:26:46
19 Jan 2025
@rgrunbla:matrix.orgReventlov left the room.09:36:52
20 Jan 2025
@tgerbet:matrix.orgtgerbet vim Philip Taron (UTC-8) https://github.com/vim/vim/security/advisories/GHSA-j3g9-wg22-v955 22:21:02
21 Jan 2025
@philiptaron:matrix.orgPhilip Taron (UTC-8)
In reply to @tgerbet:matrix.org
vim Philip Taron (UTC-8) https://github.com/vim/vim/security/advisories/GHSA-j3g9-wg22-v955
I’m next at a computer tomorrow morning. Thanks for the heads up. Looks relatively minor all told.
01:44:04
@oak:universumi.fioak šŸ³ļøā€šŸŒˆā™„ļø changed their profile picture.22:35:37
@oak:universumi.fioak šŸ³ļøā€šŸŒˆā™„ļø changed their profile picture.22:37:18
22 Jan 2025
@philiptaron:matrix.orgPhilip Taron (UTC-8)https://github.com/NixOS/nixpkgs/pull/37589117:50:49
24 Jan 2025
@grimmauld:grimmauld.deGrimmauld (moving to @grimmauld:grapevine.grimmauld.de)Uh oh; We seem to be vulnerable to https://nvd.nist.gov/vuln/detail/CVE-2022-27470 and SDL_ttf has no maintainers and is 3 years outdated (no update script, and the project moved to github). Tasty 7.8 XD This seems straight-forward to fix, will send a PR once i get there.11:05:48

Show newer messages


Back to Room ListRoom Version: 6