!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

699 Members
Coordination and triage of security issues in nixpkgs214 Servers

Load older messages


SenderMessageTime
12 Apr 2025
@niklaskorz:korz.devNiklas Korz left the room.14:38:28
@niklaskorz:matrix.orgniklaskorz changed their profile picture.22:09:51
13 Apr 2025
@saiko:knifepoint.net@saiko:knifepoint.net joined the room.00:44:03
@2xsaiko:tchncs.de@2xsaiko:tchncs.de left the room.00:44:16
@ofalvai:matrix.orgofalvai joined the room.10:31:10
@stigo:matrix.orgstigohttps://github.com/NixOS/nixpkgs/pull/39835913:29:28
15 Apr 2025
@Valodim:stratum0.orgValodim

https://infosec.exchange/@briankrebs/114343835430587973

In case anyone didn't see it yet

21:22:30
@emilazy:matrix.orgemily discussed in #security-discuss:nixos.org fwiw 21:24:10
@Valodim:stratum0.orgValodim Ah, didn't see that. Thanks :) 21:24:49
@Valodim:stratum0.orgValodim (because the room was replaced and I didn't notice. Classic 😬) 21:25:26
16 Apr 2025
@insurgo:matrix.orgtlaurion aka Insurgo [ Timezone: ET ] changed their display name from tlaurion aka Insurgo [UTC-4] to tlaurion aka Insurgo [ https://time.is/ET ].05:15:34
@nam3l33ss:matrix.org·☽•Nameless☆•777 · ± changed their profile picture.06:49:51
@anton:gersthof.comAnton (he/him) joined the room.10:18:04
@hexa:lossy.networkhexa https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2 erlang/otp Minijackson adamcstephens 22:44:12
@hexa:lossy.networkhexa https://blogs.gnome.org/mcatanzaro/2025/04/15/dangerous-arbitrary-file-read-vulnerability-in-yelp-cve-2025-3155/ Jan Tojnar 22:51:15
@hexa:lossy.networkhexa * https://blogs.gnome.org/mcatanzaro/2025/04/15/dangerous-arbitrary-file-read-vulnerability-in-yelp-cve-2025-3155/ yelp Jan Tojnar 22:51:19
@hexa:lossy.networkhexa

If you are a Linux operating system vendor, please consider applying the provided patches even though they have not yet been accepted upstream. They’re probably not worse than the status quo!

22:51:29
@hexa:lossy.networkhexaaddresesd in https://github.com/NixOS/nixpkgs/pull/39918522:53:43
@hexa:lossy.networkhexa* addressed in https://github.com/NixOS/nixpkgs/pull/39918522:53:56
17 Apr 2025
@adam:robins.wtfadamcstephenshttps://github.com/NixOS/nixpkgs/pull/399345 https://github.com/NixOS/nixpkgs/pull/39934900:46:21
@hexa:lossy.networkhexanot in a position to review, but thanks for linking it00:46:51
@adam:robins.wtfadamcstephensMostly linking for visibility00:48:55
@binarious:matrix.orgbinariousSorry to ask here, but I'm unable to join other rooms to ask. What's the main NixOS room? Is it https://matrix.to/#/!6oudZq5zJjAyrxL2uY:0upti.me? Because I'm not allowed to join that room.04:53:29
@binarious:matrix.orgbinarious* Sorry to ask here, but I'm unable to join other rooms to ask. What's the main NixOS room? Is it https://matrix.to/#/!6oudZq5zJjAyrxL2uY:0upti.me? Because I'm not allowed to join that room ("You do not belong to any of the required rooms/spaces to join this room.").04:53:44
@sigmasquadron:matrix.orgSigmaSquadronYou need to join the NixOS Space at #community:nixos.org to access the room. This restriction has been set up due to recent spam attacks.04:54:47
@k900:0upti.meK900 #NixOS 04:54:53
@k900:0upti.meK900^ space04:54:55
@sigmasquadron:matrix.orgSigmaSquadronwait, the alias changed?04:55:04
@k900:0upti.meK900It has multiple e04:55:14
@k900:0upti.meK900* It has multiple I think?04:55:16

Show newer messages


Back to Room ListRoom Version: 6