| 18 Nov 2025 |
 hexa | but the version on 25.05 is being put into question | 21:50:14 |
| hexa | * but the version (3.48.0) on 25.05 is being put into question | 21:50:23 |
 Grimmauld (any/all) | https://github.com/NixOS/nixpkgs/pull/463018 | 22:23:38 |
| 19 Nov 2025 |
| Grimmauld (any/all) | https://gitlab.gnome.org/GNOME/libxml2/-/issues/1012#note_2608283
So the supposed libxml2 vulnerability is now contested by the main developer, saying it isn't even a vulnerability and instead is documented behavior. We might not actually have to do anything. | 13:44:14 |
 dish [Fox/It/She] | still terrible api design though >.> | 16:13:05 |
 tgerbet | https://www.openwall.com/lists/oss-security/2025/11/18/1
I will deal with it and continue to expand the never ending list of patches of grub2 🫠
| 19:58:53 |
| 20 Nov 2025 |
|  fernsehmuell (☎️ 3376 he/him) changed their display name from fernsehmuell (he/his) to fernsehmuell (☎️ 3376 he/him). | 00:19:06 |
|  John joined the room. | 05:11:05 |
|  cve joined the room. | 13:42:24 |
| cve | Would someone mind having a look at 462970 and 463034?
Both pull requests are open for close to two days by now and they fix a medium-severity security vulnerability in Tor, potentially leading to a remote crash.
Besides, relays on the old version are also no longer advertised in the current Tor consensus, meaning they now display a scary red warning too.
| 13:53:22 |
| cve | * Would someone mind having a look at 462970 and 463034?
Both pull requests fix a medium-severity security vulnerability in Tor, potentially leading to a remote crash.
Besides, relays on the old version are also no longer advertised in the current Tor consensus, meaning they now display a scary red warning too.
| 13:53:38 |
|  Yevhen Zhyhalo joined the room. | 16:09:00 |
| hexa | https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18 gnutls vcunat | 19:21:32 |
| hexa | 3.8.11 basically | 19:21:44 |
 vcunat | https://github.com/NixOS/nixpkgs/pull/463470 | 19:21:55 |
| 21 Nov 2025 |
|  amadaluzia (🇹🇷 til 25th) changed their display name from amadaluzia to amadaluzia (in 🇹🇷 til 25). | 14:44:25 |
| amadaluzia (🇹🇷 til 25th) changed their display name from amadaluzia (in 🇹🇷 til 25) to amadaluzia (🇹🇷 til 25th). | 14:45:11 |
| 22 Nov 2025 |
| hexa | https://seclists.org/oss-sec/2025/q4/204 libpng | 13:31:44 |
| hexa | http://github.com/nixos/nixpkgs/pull/463987 | 13:32:11 |
| 23 Nov 2025 |
|  @easel:matrix.org left the room. | 01:50:39 |
