| 30 Jun 2025 |
| dan_nrw changed their profile picture. | 17:17:27 |
tgerbet | https://github.com/NixOS/nixpkgs/pull/421314 | 19:31:01 |
h0nig2k | python setuptools CVE 7.7 (only 25.05): https://github.com/NixOS/nixpkgs/pull/421343 | 21:18:40 |
h0nig2k | * python setuptools CVE 7.7 (only 25.05): https://github.com/NixOS/nixpkgs/pull/421350 | 21:48:50 |
| 1 Jul 2025 |
| djacu joined the room. | 03:29:06 |
djacu | Hey Security Team
In case you haven't seen the recent post on discourse, the Marketing Team is preparing this year's community survey. I am reaching out to teams to see if there are any questions they would like to add to the survey to better serve the work you all do. More details in the post linked below.
https://discourse.nixos.org/t/community-feedback-requested-2025-nix-community-survey-planning/66155 | 03:29:17 |
| Pratham Patel changed their display name from Pratham Patel (you can mention me) to Pratham Patel. | 05:10:22 |
hexa | https://openssl-library.org/news/secadv/20250522.txt Markus Theil | 12:17:09 |
Markus Theil | Thx for the hint. Will add a PR this evening. | 13:57:22 |
Markus Theil | All mentioned CVEs are also fixed in the PR for 3.5.0 already merged to staging. Currently used version 3.4.x are not affected. | 13:58:26 |
SigmaSquadron | XSA #470: https://github.com/NixOS/nixpkgs/pull/421514 | 14:19:12 |
SigmaSquadron | * XSA #470: https://github.com/NixOS/nixpkgs/pull/421514 | 14:19:50 |
emily | on it. does it need backporting? | 14:39:36 |
| zororg joined the room. | 14:55:33 |
Markus Theil | https://github.com/NixOS/nixpkgs/pull/421531 is still compiling on my side. Will ping here, when ready and some smoke tests are done. | 15:33:21 |
SigmaSquadron | In reply to @emilazy:matrix.org on it. does it need backporting? yep, forgot the label, sorry. | 15:57:16 |
| Damian Poddebniak joined the room. | 20:54:51 |