| 29 Apr 2026 |
 hexa | https://www.openwall.com/lists/oss-security/2026/04/29/1 starman stigo | 00:19:07 |
 stigo | https://github.com/NixOS/nixpkgs/pull/514601 | 00:52:28 |
| hexa | Scrumplex curl | 07:44:43 |
| hexa | Redacted or Malformed Event | 07:45:11 |
 Samuel Dionne-Riel | https://github.com/NixOS/nixpkgs/pull/514063 | 13:01:15 |
| stigo | https://github.com/NixOS/nixpkgs/pull/514747 <-- perlPackages.TextCSV_XS | 14:35:51 |
|  brett 💕 joined the room. | 21:08:26 |
| stigo | https://github.com/NixOS/nixpkgs/pull/514896 <-- perlPackages.Plack | 23:42:27 |
| 30 Apr 2026 |
 Fernando Rodrigues | https://github.com/NixOS/nixpkgs/pull/514428 | Xen Security Advisories #483-488 (when applicable) | 06:24:34 |
 vcunat | https://lists.gnutls.org/pipermail/gnutls-help/2026-April/004922.html | 07:34:27 |
| vcunat | (I can have a look later to update.) | 07:34:44 |
| vcunat | I don't see this mentioned in nixpkgs issues+PRs yet:
https://copy.fail | 08:17:44 |
| vcunat | (kernel, CVE-2026-31431) | 08:18:01 |
 leona | it's discussed heavly over in #security-discuss:nixos.org | 08:18:05 |
| leona | (we wait for the 6.12 release, greg will do sometime today likely) | 08:18:20 |
| vcunat | https://github.com/NixOS/nixpkgs/pull/515016 | 09:20:14 |
|  autra joined the room. | 10:20:43 |
| autra | I'm not on the ML, but I could reproduce the copy.fail issue | 10:36:45 |
| hexa | #security-discuss:nixos.org | 10:38:54 |
| hexa | Redacted or Malformed Event | 10:39:06 |
| Fernando Rodrigues | * | 10:58:37 |
|  Enzime joined the room. | 12:52:46 |
| Enzime | hexa could you take a look at this PR? it removes DHE from nginx: https://github.com/NixOS/nixpkgs/pull/515057 | 12:54:04 |
| hexa | we're in breaking changes freeze unfortunately | 12:54:31 |
| hexa | Redacted or Malformed Event | 12:54:41 |
| Enzime | In reply to @hexa:lossy.network
we're in breaking changes freeze unfortunately, so removing the option now is not ok. should we merge the first commit now? | 12:56:37 |
| Enzime | and then leave the dropping the NixOS option till after the freeze? | 12:56:59 |
| Enzime | * and then leave dropping the NixOS option till after the freeze? | 12:57:05 |
| hexa | DHE will only be used with dhparams anyway, so I hoped the warning would be sufficient | 12:59:03 |
| Enzime | just investigated further, it doesn't matter if the first commit is merged now as nginx will just disable DHE if DH params are not configured https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_dhparam | 13:22:10 |
