| 6 Jul 2021 |
 hexa | * https://nvd.nist.gov/vuln/detail/CVE-2021-32718
https://nvd.nist.gov/vuln/detail/CVE-2021-32719
both regarding rabbitmq-server, which is quite a bit behind | 14:00:45 |
| hexa | and CVE-2021-3598 in openexr, working on an update right now: https://github.com/AcademySoftwareFoundation/openexr/pull/1037 | 14:02:53 |
| hexa | * and CVE-2021-3598 in openexr, working on an update right now: https://github.com/AcademySoftwareFoundation/openexr/pull/1037, the CVE for this is still reserved. | 14:03:12 |
|  7c6f434c left the room. | 15:48:56 |
| hexa | * and CVE-2021-3598 in openexr<s>, working on an update right now:</s>https://github.com/AcademySoftwareFoundation/openexr/pull/1037, the CVE for this is still reserved. | 16:19:02 |
| hexa | * and CVE-2021-3598 in openexr~~, working on an update right now:~~ https://github.com/AcademySoftwareFoundation/openexr/pull/1037, the CVE for this is still reserved. | 16:19:13 |
| hexa | * and CVE-2021-3598 in openexr https://github.com/AcademySoftwareFoundation/openexr/pull/1037, the CVE for this is still reserved. | 16:19:22 |
 Linux Hackerman | <del> :) | 16:19:21 |
| hexa | * and CVE-2021-3598 in openexr, which I'm working on right now: https://github.com/AcademySoftwareFoundation/openexr/pull/1037, the CVE for this is still reserved. | 16:19:40 |
| hexa | thanks! | 16:19:44 |
| hexa | openexr requires some cmake knowledge to update, which I don't have | 16:20:14 |
| Linux Hackerman | Hm, where? The derivation looks straightforward to em | 16:21:43 |
| Linux Hackerman | * Hm, where? The derivation looks straightforward to me | 16:21:44 |
| hexa | https://github.com/AcademySoftwareFoundation/openexr/commit/6442fb71a86c09fb0a8118b6dbd93bcec4883a3c | 16:24:34 |
| hexa | https://github.com/NixOS/nixpkgs/blob/master/pkgs/development/libraries/openexr/default.nix#L26 | 16:25:11 |
| Linux Hackerman | oh, and that patch no longer applies? | 16:25:14 |
| hexa | neither on 2.5.7 nor on 3.0.5 | 16:25:28 |
| Linux Hackerman | aah ok. I'll take a look | 16:25:42 |
| Linux Hackerman | https://github.com/AcademySoftwareFoundation/openexr/pull/815 hm looks like it was merged so we can probably remove it. | 16:26:16 |
| Linux Hackerman | or not :) | 16:28:40 |
| hexa |
/nix/store/qdf49mvm79r83n9c9s7pkmmjqwhrw8jv-stdenv-linux/setup: line 88: cd: IlmBase: No such file or directory
| 16:29:11 |
| Linux Hackerman | https://github.com/NixOS/nixpkgs/pull/129462 | 16:40:39 |
| Linux Hackerman | hm wait that might not be quite right. | 16:42:23 |
| hexa | heh, weird. I remember that failing for me on staging-21.05 as well | 16:42:34 |
| Linux Hackerman | since it was only merged into 3.x | 16:42:38 |
| hexa | also please target staging | 16:42:42 |
| hexa | https://github.com/AcademySoftwareFoundation/openexr/pull/1037 | 16:44:10 |
| hexa | this pr was tagged with v2.5.7, and the release notes for that release mentions two oss-fuzz fixes | 16:44:31 |
| Linux Hackerman | Yeah jtojnar's fix doesn't affect the build of openexr, it affects the builds of dependencies, so I'll forward-port his patch | 16:46:02 |
| Linux Hackerman | * Yeah jtojnar's fix doesn't affect the build of openexr, it affects the builds of dependencies, so I'll backport his patch | 16:46:05 |
