| 8 Jun 2025 |
|  @-jb:matrix.org removed their display name Jb. | 09:16:56 |
| @-jb:matrix.org left the room. | 09:17:11 |
| 9 Jun 2025 |
 h0nig2k | https://github.com/NixOS/nixpkgs/issues/415282 for sqlite CVE's related to 25.05 | 12:23:07 |
| h0nig2k | * https://github.com/NixOS/nixpkgs/issues/415282 for sqlite CVE's related to 25.05, fixes are present for master already | 12:23:33 |
| h0nig2k | * https://github.com/NixOS/nixpkgs/issues/415282 for sqlite CVE's related to 25.05, fixes are present for master already but backport PR was closed | 12:30:06 |
|  Konys Synok joined the room. | 13:14:21 |
| 10 Jun 2025 |
 teutat3s | https://github.com/NixOS/nixpkgs/pull/415625 Fixes CVE-2025-48937 | 18:05:20 |
 hexa | K900: https://kde.org/info/security/advisory-20250609-1.txt konsole | 23:51:04 |
| hexa | * K900: https://kde.org/info/security/advisory-20250609-1.txt konsole https://proofnet.de/publikationen/konsole_rce.html | 23:51:11 |
| 11 Jun 2025 |
 K900 | In reply to @hexa:lossy.network
K900: https://kde.org/info/security/advisory-20250609-1.txt konsole Fixed in 25.04.2 so we should be good everywhere | 06:23:38 |
|  elamon joined the room. | 15:15:32 |
|  Katalin 🔪 changed their profile picture. | 16:11:59 |
| Katalin 🔪 changed their display name from Katalin 🔪 to Katalin ⚧︎. | 16:13:21 |
| 12 Jun 2025 |
|  tokudan changed their profile picture. | 11:54:22 |
 stigo | Red Hat just assigned CVEs for these:
CVE-2025-5914
CVE-2025-5915
CVE-2025-5916
CVE-2025-5917
CVE-2025-5918 | 17:54:47 |
| stigo | * Red Hat just assigned CVEs for these (in coordination with upstream):
CVE-2025-5914
CVE-2025-5915
CVE-2025-5916
CVE-2025-5917
CVE-2025-5918 | 17:56:40 |
| stigo | * Red Hat just recently assigned CVEs for these (in coordination with upstream):
CVE-2025-5914
CVE-2025-5915
CVE-2025-5916
CVE-2025-5917
CVE-2025-5918 | 18:02:21 |
| 13 Jun 2025 |
 ma27 | https://github.com/NixOS/nixpkgs/pull/416357, grafana 12.0.1+security-01 (fixes CVE-2025-3415).
nothing published yet, so I don't really know what this is about.
about to leave, when I'm back I'll also update the package on 24.11. | 07:10:29 |
| ma27 | https://github.com/NixOS/nixpkgs/pull/416418 for 24.11 | 10:37:25 |
| 15 Jun 2025 |
|  @c3r5b8:matrix.org left the room. | 13:32:29 |
| 16 Jun 2025 |
 adamcstephens | https://github.com/NixOS/nixpkgs/pull/417248 | 14:06:32 |
| 17 Jun 2025 |
| hexa | https://insinuator.net/2025/06/disclosure-multiple-vulnerabilities-xserver-xwayland/ | 14:51:36 |
| hexa | * https://insinuator.net/2025/06/disclosure-multiple-vulnerabilities-xserver-xwayland/ K900 Emantor | 14:52:04 |
| K900 | Woo | 14:56:19 |
| K900 | On it | 14:56:22 |
| K900 | xwayland: https://github.com/NixOS/nixpkgs/pull/417568 | 15:00:26 |
| K900 | And xorgserver (staging): https://github.com/NixOS/nixpkgs/pull/417569 | 15:03:29 |
| hexa | https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx unmaintained 😕 | 22:02:13 |
| hexa | * https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx unmaintained in nixpkgs 😕 | 22:02:17 |
| hexa |
Systems are vulnerable if they use pam_namespace to polyinstantiate a directory
| 22:02:49 |
