!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

658 Members
Coordination and triage of security issues in nixpkgs | Discussions in #security-discuss:nixos.org | Open PRs: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc+label%3A%221.severity%3A+security%22203 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
10 Sep 2025
@pyrox:pyrox.devdish [Fox/It/She]there aren't any consumers in nixpkgs, nor in any public config repos from a cursory glance at sourcegraph, so since there's no maintainers we could consider dropping02:23:29
@hexa:lossy.networkhexahttps://github.com/NixOS/nixpkgs/pull/44164502:24:21
@hexa:lossy.networkhexasame thought02:24:26
@pyrox:pyrox.devdish [Fox/It/She]🫡02:30:22
@pyrox:pyrox.devdish [Fox/It/She]considering a drop is technically breaking, add a nixpkgs release note maybe?02:30:55
@hexa:lossy.networkhexasure, why not.02:33:50
@hexa:lossy.networkhexapushed02:33:51
@pyrox:pyrox.devdish [Fox/It/She]perfect, ty! lgtm02:34:48
@grimmauld:grapevine.grimmauld.deGrimmauld (any/all)
In reply to @pyrox:pyrox.dev
considering a drop is technically breaking, add a nixpkgs release note maybe?
We have throws in aliases.nix, IMO package removals are discoverable enough to not need release notes. Our rlnotes are already entirely unreadable and way too verbose...
07:06:21
@hexa:lossy.networkhexahttps://seclists.org/oss-sec/2025/q3/160 https://seclists.org/oss-sec/2025/q3/16109:44:45
@pyrox:pyrox.devdish [Fox/It/She]
In reply to @grimmauld:grapevine.grimmauld.de
We have throws in aliases.nix, IMO package removals are discoverable enough to not need release notes. Our rlnotes are already entirely unreadable and way too verbose...
fair
12:09:37
@nerves:bark.lgbt@nerves:bark.lgbt left the room.12:31:55
@sandro:supersandro.deSandro 🐧First time seeing a test without a module 😅13:06:47
@niklaskorz:matrix.orgniklaskorzthe freshly dropped minecraft package had one too! (oops this is triage, not discussion)13:07:23
@matshch:matrix.orgArtem Leshchev joined the room.16:20:25
@matshch:matrix.orgArtem Leshchev set a profile picture.16:25:49
11 Sep 2025
@k900:0upti.meK900It's a day that ends in Y16:15:35
@k900:0upti.meK900And you know what that means16:15:37
@k900:0upti.meK900New! Intel! Side! Channel! Vulns!16:15:43
@k900:0upti.meK900https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.16.716:15:44

Show newer messages


Back to Room ListRoom Version: 6