| 12 May 2025 |
 SigmaSquadron | XSA #469: https://github.com/NixOS/nixpkgs/pull/406506 | 17:19:43 |
 Morgan (@numinit) | https://www.vusec.net/projects/training-solo/ | 17:22:22 |
| 13 May 2025 |
|  kraem changed their profile picture. | 13:51:19 |
|  Moritz Sanft joined the room. | 14:53:22 |
 hexa | https://www.openwall.com/lists/oss-security/2025/05/13/5 leona osnyx (he/him) | 15:41:24 |
| hexa | * https://www.openwall.com/lists/oss-security/2025/05/13/5 leona osnyx (he/him) varnish | 15:41:30 |
| 14 May 2025 |
|  liberodark joined the room. | 10:14:11 |
| liberodark |
CVE-2024-57699 :
https://github.com/NixOS/nixpkgs/pull/406752 | 10:14:46 |
 leona | https://github.com/NixOS/nixpkgs/pull/407007 | 12:31:52 |
| kraem changed their profile picture. | 17:28:41 |
| 15 May 2025 |
| hexa | webkitgtk @jtojnar:matrix.org | 17:42:41 |
| hexa | https://webkitgtk.org/security/WSA-2025-0004.html | 17:43:25 |
 Jan Tojnar | Thanks, opened https://github.com/NixOS/nixpkgs/pull/407417 | 18:30:09 |
| 16 May 2025 |
|  Winter joined the room. | 01:58:58 |
| hexa | https://www.openwall.com/lists/oss-security/2025/05/16/7 glibc ma27 | 23:06:10 |
 emily | I suspect the only static setuid program on 90% of NixOS systems is our wrapper? | 23:06:54 |
| emily | which hopefully doesn't dlopen | 23:06:58 |
| emily | well, 90% is probably way too low for that figure. also sorry, forgot this was triage room | 23:07:16 |
| 17 May 2025 |
|  s-rein joined the room. | 03:31:56 |
 aloisw | The wrapper uses musl and erases LD_LIBRARY_PATH, so NixOS should indeed be unaffected. | 05:00:12 |
 ma27 | Agreed.
I'll prepare an update todya nonetheless since people are using nixpkgs to build all kinds of stuff. | 08:12:34 |
 vcunat | Sounds OK for the normal staging* workflow. | 08:34:01 |
 K900 | What's the plan for the next cycle? | 08:36:37 |
| K900 | I've got Mesa 25.1.1 and Qt 6.9.1 next week | 08:36:51 |
 Alyssa Ross | Still looking for Darwin testing on the Meson upgrade https://github.com/NixOS/nixpkgs/pull/402752 | 08:37:33 |
| Alyssa Ross | But this is the wrong room | 08:44:58 |
| ma27 | OK we don't have to do anything btw: the advisory states
Fix-Commit: 5451fa962cd0a90a0e2ec1d8910a559ace02bba0 (2.39)
the commit is from 2023 and part of the glibc we're shipping. | 08:58:36 |
| K900 | https://github.com/google/security-research/security/advisories/GHSA-qx2m-rcpc-v43v | 12:23:49 |
| K900 | Ayylmao | 12:24:09 |
 tgerbet | Fixed in https://github.com/NixOS/nixpkgs/pull/400278 and https://github.com/NixOS/nixpkgs/pull/403432
It looks like they did not update the fixed version field in the advisory | 12:26:11 |
