!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

661 Members
Coordination and triage of security issues in nixpkgs | Discussions in #security-discuss:nixos.org | Open PRs: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc+label%3A%221.severity%3A+security%22205 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
16 Apr 2025
@hexa:lossy.networkhexa * https://blogs.gnome.org/mcatanzaro/2025/04/15/dangerous-arbitrary-file-read-vulnerability-in-yelp-cve-2025-3155/ yelp Jan Tojnar 22:51:19
@hexa:lossy.networkhexa

If you are a Linux operating system vendor, please consider applying the provided patches even though they have not yet been accepted upstream. They’re probably not worse than the status quo!

22:51:29
@hexa:lossy.networkhexaaddresesd in https://github.com/NixOS/nixpkgs/pull/39918522:53:43
@hexa:lossy.networkhexa* addressed in https://github.com/NixOS/nixpkgs/pull/39918522:53:56
17 Apr 2025
@adam:robins.wtf@adam:robins.wtfhttps://github.com/NixOS/nixpkgs/pull/399345 https://github.com/NixOS/nixpkgs/pull/39934900:46:21
@hexa:lossy.networkhexanot in a position to review, but thanks for linking it00:46:51
@adam:robins.wtf@adam:robins.wtfMostly linking for visibility00:48:55
@binarious:matrix.orgbinariousSorry to ask here, but I'm unable to join other rooms to ask. What's the main NixOS room? Is it https://matrix.to/#/!6oudZq5zJjAyrxL2uY:0upti.me? Because I'm not allowed to join that room.04:53:29
@binarious:matrix.orgbinarious* Sorry to ask here, but I'm unable to join other rooms to ask. What's the main NixOS room? Is it https://matrix.to/#/!6oudZq5zJjAyrxL2uY:0upti.me? Because I'm not allowed to join that room ("You do not belong to any of the required rooms/spaces to join this room.").04:53:44
@sigmasquadron:matrix.orgSigmaSquadronYou need to join the NixOS Space at #community:nixos.org to access the room. This restriction has been set up due to recent spam attacks.04:54:47
@k900:0upti.meK900 #NixOS 04:54:53
@k900:0upti.meK900^ space04:54:55
@sigmasquadron:matrix.orgSigmaSquadronwait, the alias changed?04:55:04
@k900:0upti.meK900It has multiple e04:55:14
@k900:0upti.meK900* It has multiple I think?04:55:16
@binarious:matrix.orgbinariousI am part of the space. I also only see an invite button and not a join button at the top.04:55:52
@binarious:matrix.orgbinarious* I am part of the space - or should be. I also only see an invite button and not a join button at the top.04:56:01

Show newer messages


Back to Room ListRoom Version: 6