!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

657 Members
Coordination and triage of security issues in nixpkgs | Discussions in #security-discuss:nixos.org | Open PRs: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc+label%3A%221.severity%3A+security%22204 Servers

You have reached the beginning of time (for this room).

SenderMessageTime
5 Aug 2025
@qyliss:fairydust.spaceAlyssa Ross * 17:14:25
@hexa:lossy.networkhexayeah 🤦‍♂️hence 0day17:14:43
@k900:0upti.meK900oofe17:14:46
@hexa:lossy.networkhexapeople in all security rooms I'm in are facepalming17:14:57
@qyliss:fairydust.spaceAlyssa Rosstbf it's not like busybox is maintained anyway17:15:18
@qyliss:fairydust.spaceAlyssa Rossso the 30 days is probably not going to make a substantial difference17:15:50
@qyliss:fairydust.spaceAlyssa Rossoh wow, lots of commits recently17:16:13
@qyliss:fairydust.spaceAlyssa Rossmaybe I should resend my patch17:16:19
@qyliss:fairydust.spaceAlyssa Ross(sorry, just realised this is triage)17:16:27
@hexa:lossy.networkhexa Alyssa Ross: patch from ariadne https://git.alpinelinux.org/aports/tree/main/busybox/0001-tar-fix-TOCTOU-symlink-race-condition.patch?__goaway_challenge=cookie&__goaway_id=798fc2a5dc35e31635444270e8cca34a&id=9e42dea5fba84a8afad1f1910b7d3884128a567e 22:55:39
6 Aug 2025
@qyliss:fairydust.spaceAlyssa Ross
In reply to @hexa:lossy.network
Alyssa Ross: patch from ariadne https://git.alpinelinux.org/aports/tree/main/busybox/0001-tar-fix-TOCTOU-symlink-race-condition.patch?__goaway_challenge=cookie&__goaway_id=798fc2a5dc35e31635444270e8cca34a&id=9e42dea5fba84a8afad1f1910b7d3884128a567e
Does Busybox rebuild every NixOS test? 		06:41:34
@hexa:lossy.networkhexaI don't know10:44:02

Show newer messages

Back to Room ListRoom Version: 6