| 3 Apr 2025 |
|  @2xsaiko:tchncs.de changed their display name from 2xsaiko to 2xsaiko (moved! @saiko:knifepoint.net). | 12:52:04 |
 hexa | xz https://www.openwall.com/lists/oss-security/2025/04/03/1 | 17:21:28 |
|  dantefromhell changed their display name from dantefromhell to MATRIX dantefromhell. | 22:34:39 |
| dantefromhell changed their display name from MATRIX dantefromhell to dantefromhell. | 22:36:28 |
| 4 Apr 2025 |
 vcunat | xz staged via https://github.com/NixOS/nixpkgs/pull/393310#event-17120398189
But it's not addressed for 24.11 yet. Maybe simply patch from the upstream advisory: https://tukaani.org/xz/threaded-decoder-early-free.html | 05:52:06 |
| vcunat | * xz staged via https://github.com/NixOS/nixpkgs/pull/393310#event-17120398189
But it's not addressed for 24.11 yet. Maybe simply patch from the upstream advisory: https://tukaani.org/xz/threaded-decoder-early-free.html
(because a bigger update happened in the meantime) | 05:53:02 |
|  NixOS Moderation Bot unbanned  cafkafk. | 06:13:16 |
|  @qbit:tapenet.org left the room. | 16:10:41 |
| hexa | Jan Tojnar: https://gitlab.gnome.org/GNOME/yelp/-/issues/221 | 19:27:59 |
| hexa | https://www.pgadmin.org/docs/pgadmin4/9.2/release_notes_9_2.html | 20:52:23 |
|  bdd left the room. | 23:19:02 |
| bdd joined the room. | 23:21:47 |
| 5 Apr 2025 |
|  @tinybronca:sibnsk.net left the room. | 15:47:08 |
|  transcaffeine joined the room. | 19:48:29 |
|  amy joined the room. | 19:48:37 |
| transcaffeine | https://github.com/NixOS/nixpkgs/pull/396414
Fix validation of API parameters to FFmpeg [GHSA-2c3c-r7gp-q32m], by @Shadowghost
Fix trusting forward headers if none are configured [GHSA-qcmf-gmhm-rfv9], by @JPVenson
| 19:49:01 |
| transcaffeine | * jellyfin: https://github.com/NixOS/nixpkgs/pull/396414
Fix validation of API parameters to FFmpeg [GHSA-2c3c-r7gp-q32m], by @Shadowghost
Fix trusting forward headers if none are configured [GHSA-qcmf-gmhm-rfv9], by @JPVenson
| 19:51:15 |
| 7 Apr 2025 |
| hexa | https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-01.html Mic92 | 14:21:51 |
| hexa | * https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-01.html | 14:22:06 |
| hexa | rnhmjoj 🤔 | 14:22:29 |
| hexa | https://webkitgtk.org/security/WSA-2025-0003.html Jan Tojnar | 14:22:57 |
 Jan Tojnar | Thanks, opened https://github.com/NixOS/nixpkgs/pull/396865, currently building | 17:20:25 |
| 8 Apr 2025 |
| hexa | https://github.com/c-ares/c-ares/releases/tag/v1.34.5 | 13:13:37 |
| hexa | https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v | 13:14:27 |
|  ·☽•Nameless☆•777 · ± changed their profile picture. | 17:39:57 |
| 9 Apr 2025 |
| hexa | https://github.com/openwrt/packages/issues/26277 😢 | 21:43:25 |
| hexa | https://www.openwall.com/lists/oss-security/2025/04/09/4
https://github.com/NixOS/nixpkgs/pull/397503 | 22:11:12 |
 emily | (sounds like we should use libxml2 instead per new upstream defaults?) | 22:13:55 |
| hexa | bumping to 1.60.05 | 22:18:02 |
| hexa | https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-3983-rrqh-mvx5 Sandro 🐧 | 23:31:38 |
