| 2 Aug 2025 |
| @saiko:knifepoint.net changed their profile picture. | 00:27:56 |
hexa | https://webkitgtk.org/security/WSA-2025-0005.html cc Jan Tojnar | 13:42:11 |
tgerbet | https://github.com/NixOS/nixpkgs/pull/430151 | 14:02:40 |
| 5 Aug 2025 |
hexa | https://lists.busybox.net/pipermail/busybox/2025-August/091665.html | 17:12:19 |
hexa | * https://lists.busybox.net/pipermail/busybox/2025-August/091665.html 0day | 17:13:27 |
hexa | * https://lists.busybox.net/pipermail/busybox/2025-August/091665.html busybox 0day | 17:13:30 |
Alyssa Ross | "I am happy to observe a 30-day embargo", they say, in a message to a public lits | 17:14:23 |
Alyssa Ross | * | 17:14:25 |
hexa | yeah 🤦♂️hence 0day | 17:14:43 |
K900 | oofe | 17:14:46 |
hexa | people in all security rooms I'm in are facepalming | 17:14:57 |
Alyssa Ross | tbf it's not like busybox is maintained anyway | 17:15:18 |
Alyssa Ross | so the 30 days is probably not going to make a substantial difference | 17:15:50 |
Alyssa Ross | oh wow, lots of commits recently | 17:16:13 |
Alyssa Ross | maybe I should resend my patch | 17:16:19 |
Alyssa Ross | (sorry, just realised this is triage) | 17:16:27 |
hexa | Alyssa Ross: patch from ariadne https://git.alpinelinux.org/aports/tree/main/busybox/0001-tar-fix-TOCTOU-symlink-race-condition.patch?__goaway_challenge=cookie&__goaway_id=798fc2a5dc35e31635444270e8cca34a&id=9e42dea5fba84a8afad1f1910b7d3884128a567e | 22:55:39 |