| 16 Feb 2025 |
|  aloisw changed their profile picture. | 10:14:33 |
 Niklas Korz | https://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh
no idea how to find out what of nixpkgs might potentially be affected, but it has 3063 dependents on npm so there's a good chance it's not zero | 10:42:32 |
| Niklas Korz | it doesn't appear to be included in nodePackages at least | 10:48:51 |
| Niklas Korz | never mind, it is | 10:50:07 |
|  @steeringwheelrules:tchncs.de joined the room. | 15:49:30 |
 hexa | https://www.postgresql.org/message-id/173945575457.197393.6175786842655230205%40wrigleys.postgresql.org
https://www.postgresql.org/about/news/postgresql-173-167-1511-1416-and-1319-released-3015/
ma27
| 16:37:38 |
 vcunat | https://github.com/NixOS/nixpkgs/pull/382282 | 16:38:33 |
 ma27 | WIP already: https://github.com/NixOS/nixpkgs/pull/382282 | 16:38:35 |
| hexa | I suck at searching the PR tracker, sowwy 😄 | 16:39:35 |
| 17 Feb 2025 |
 Sandro | in:title is usually required to find things | 17:54:09 |
| 18 Feb 2025 |
| hexa | https://www.openwall.com/lists/oss-security/2025/02/18/1 | 11:39:02 |
| hexa | openssh | 11:39:05 |
 Arian | VerifyHostKeyDNS is not enabled by default on nixos right | 11:41:20 |
| Niklas Korz | no, but there are at least some public configs enabling it: https://grep.app/search?f.lang=Nix&f.lang.pattern=nix&q=VerifyHostKeyDNS | 11:44:04 |
| Arian | I definitely had it enabled in my homelab before because if was using SSHFP | 11:45:11 |
| Niklas Korz | oh, NuschtOS enables it by default (cc Sandro 🐧 👀) | 11:45:16 |
| Sandro | https://www.openssh.com/releasenotes.html#9.9p2 | 12:10:24 |
| Sandro | I don't see a PR yet | 12:11:53 |
 tgerbet | I'm running the tests right now | 12:45:25 |
|  @stites:matrix.org left the room. | 12:54:35 |
| tgerbet | https://github.com/NixOS/nixpkgs/pull/383096 | 13:07:40 |
 emily | I believe VerifyHostKeyDNS is only safe if you are running a DNSSEC-validating resolver locally. caveat emptor | 18:49:56 |
| emily | (I mean, even post-fix.) | 18:50:01 |
 leona | fun with grub
https://www.openwall.com/lists/oss-security/2025/02/18/3 | 19:15:47 |
| hexa | unmaintained … rip | 19:29:09 |
| 19 Feb 2025 |
|  sss | 20:06:15 |
| hexa | https://www.openwall.com/lists/oss-security/2025/02/19/1 exim @[0x4A6F] | 23:28:01 |
| hexa | In reply to@leona:leona.is
fun with grub
https://www.openwall.com/lists/oss-security/2025/02/18/3 [SECURITY PATCH 00/73] GRUB2 vulnerabilities - 2025/02/18, Daniel Kiper <=
<del>let's just casually apply this 73 patches</del> | 23:29:47 |
| hexa | [SECURITY PATCH 00/73] GRUB2 vulnerabilities - 2025/02/18, Daniel Kiper <=
let's just casually apply this 73 patches | 23:29:52 |
| hexa | [SECURITY PATCH 00/73] GRUB2 vulnerabilities - 2025/02/18, Daniel Kiper <=
let's just casually apply these 73 patches | 23:29:59 |
