| 4 Nov 2024 |
 aleksana 🏳️⚧️ (force me to bed after 18:00 UTC) | No conclusion has been drawn yet | 12:04:27 |
 Sandro 🐧 | we are not using the prebuilt binaries in the first place and the actual content is also being disputed | 15:52:07 |
|  martijn joined the room. | 18:41:25 |
|  Neco Arc left the room. | 19:58:37 |
|  @fifteenconcierge:matrix.org joined the room. | 20:26:13 |
| @fifteenconcierge:matrix.org left the room. | 20:31:32 |
| @fifteenconcierge:matrix.org joined the room. | 20:35:42 |
|  Alois set a profile picture. | 21:12:08 |
|  alois 🌱 joined the room. | 21:17:03 |
|  a10is joined the room. | 21:31:12 |
| 5 Nov 2024 |
| Alois | In reply to @aleksana:mozilla.org
Someone reported on hacker news that yt-dlp 2024.10.22 (which we are also using) has malicious behavior: https://news.ycombinator.com/item?id=42040600 complete nonsense; can be safely ignored + we compile from source | 00:17:59 |
| Alois | In reply to @aleksana:mozilla.org
Someone reported on hacker news that yt-dlp 2024.10.22 (which we are also using) has malicious behavior: https://news.ycombinator.com/item?id=42040600 * | 00:18:09 |
|  @grossmap:in.tum.de left the room. | 14:15:08 |
| 6 Nov 2024 |
 Scrumplex | https://github.com/NixOS/nixpkgs/pull/353968 | 08:12:13 |
| 7 Nov 2024 |
 emily | https://github.com/NixOS/nixpkgs/pull/354139 https://github.com/NixOS/nixpkgs/pull/354140 | 05:22:44 |
 vcunat | Missing expat triage for 24.05:
https://github.com/NixOS/nixpkgs/pull/354155#issuecomment-2461795245 | 10:29:35 |
| vcunat | Though it's only a NULL dereference and 24.05 won't live very long anyway. | 10:34:08 |
 leona | it seems quite trivial to backport, so I'd do it | 11:13:18 |
 teutat3s | https://github.com/NixOS/nixpkgs/pull/352689 | 17:26:39 |
| 8 Nov 2024 |
|  jschvz joined the room. | 02:57:52 |
| 10 Nov 2024 |
|  ChrisOboe removed their profile picture. | 11:56:25 |
| 11 Nov 2024 |
 K900 | https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.4 uh oh | 04:11:39 |
| K900 | Doing the update, it's probably not quite as bad because the vault is E2EE but still ba | 04:27:20 |
| K900 | * Doing the update, it's probably not quite as bad because the vault is E2EE but still bad | 04:27:21 |
| K900 | Merged, will run unstable-small now | 04:53:18 |
 dish [Fox/It/She] | i have my suspicions about what the actual security issues were, just reading the code won't speculate though | 04:53:47 |
| dish [Fox/It/She] | i have my suspicions about what the actual security issues were, just reading the code changes won't speculate though | 04:54:03 |
| dish [Fox/It/She] | though the comments in one part of the new code do explicitly mention now sanitizing against HTML/XSS injection attacks | 04:54:32 |
 hexa | https://github.com/NixOS/nixpkgs/pull/355240 | 17:51:40 |
| 12 Nov 2024 |
| teutat3s | https://github.com/NixOS/nixpkgs/pull/355400 | 11:38:01 |
