!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

747 Members
Coordination and triage of security issues in nixpkgs228 Servers

Load older messages


SenderMessageTime
6 Jul 2021
@linus.heckemann:matrix.mayflower.deLinux Hackerman * Yeah jtojnar's fix doesn't affect the build of openexr, it affects the builds of dependencies, so I'll backport his patch16:46:05
@linus.heckemann:matrix.mayflower.deLinux Hackermanoh lol there's a fix upstream https://github.com/AcademySoftwareFoundation/openexr/commit/2f19a01923885fda75ec9d19332de080ec7102bd just not in 2.5.7 >_<16:53:32
@obfusk:matrix.org幸猫 (𝗍𝗁𝖾𝗒/𝗍𝗁𝖾𝗆) changed their display name from 幸猫 to 幸猫 (they/them).18:58:16
@obfusk:matrix.org幸猫 (𝗍𝗁𝖾𝗒/𝗍𝗁𝖾𝗆) changed their display name from 幸猫 (they/them) to 幸猫 (π‘‘β„Žπ‘’π‘¦/π‘‘β„Žπ‘’π‘š).19:11:06
@spacesbot:nixos.devspacesbot - keeps a log of public NixOS channels changed their display name from spacesbot to spacesbot - keeps a log of public NixOS channels.22:11:49
@obfusk:matrix.org幸猫 (𝗍𝗁𝖾𝗒/𝗍𝗁𝖾𝗆) changed their display name from 幸猫 (π‘‘β„Žπ‘’π‘¦/π‘‘β„Žπ‘’π‘š) to 幸猫 (𝗍𝗁𝖾𝗒/𝗍𝗁𝖾𝗆).22:40:30
7 Jul 2021
@quantumghost:matrix.orgquantumghost joined the room.03:58:19
@lassulus:nixos.devlassulus joined the room.08:12:31
@stefandeml:matrix.orgstefandeml joined the room.08:25:55
@red:evil.redredFYI: I found an exploitable bug in the ponyc compiler which allowed an attacker to do silently(ish) bypass ponyc's supply chain attack defenses. It got fixed within a few hours and a new version of the compiler has been released. I'm testing the new nixpkgs package for it and will tag it with security when I get the PR up.17:56:20
@red:evil.redredThere is no assigned CVE or anything, didn't seem like any point since they fixed it within an hour :-P{17:57:45
@red:evil.redred * There is no assigned CVE or anything, didn't seem like any point since they fixed it within an hour :-P17:57:50
@red:evil.redredalthough now that I've said that out loud I'm doubting myself...17:58:33
@red:evil.redredsince a CVE notification is useful for people to know to update17:58:54
@stigo:matrix.orgstigo joined the room.18:08:37
@leo60228:matrix.orgleo60228 joined the room.18:25:09
@leo60228:matrix.orgleo60228it was mentioned on /r/nixos that the gpg keys on https://nixos.org/community/teams/security.html are expired18:25:46
@leo60228:matrix.orgleo60228i feel like this is probably bad?18:25:59
@stigo:matrix.orgstigo
In reply to @leo60228:matrix.org
i feel like this is probably bad?
grahamc (he/him): ^^
18:37:30
@grahamc:nixos.org@grahamc:nixos.orgah good to know, I'll update18:40:57
@grahamc:nixos.org@grahamc:nixos.orgbut also, I can't wait to get rid of myGPG key18:40:59
@roosemberth:orbstheorem.chRoosWhat would you be replacing it with?18:46:31
@grahamc:nixos.org@grahamc:nixos.organything 😭19:02:08
@sandro:supersandro.deSandroCan I fax it to you?19:11:28
@roosemberth:orbstheorem.chRoos:(19:16:57
@red:evil.redredbut GPG loves you graham19:32:15
@grahamc:nixos.org@grahamc:nixos.orgyes I'll accept fax19:36:12
8 Jul 2021
@_xmpp_julm=40sourcephile.fr:matrix.orgjulm left the room.13:16:41
@_xmpp_julm=40sourcephile.fr:matrix.orgjulm joined the room.14:46:37
@_xmpp_julm=40sourcephile.fr:matrix.orgjulm left the room.16:21:49

Show newer messages


Back to Room ListRoom Version: 6