| 27 Apr 2026 |
 vcunat | (thinking of that because of staging-next-25.11 in progress) | 14:11:13 |
 Samuel Dionne-Riel | I don't know if I have the knowledge to state for sure, but “64-bit exploitation primitives verified”, just demonstrated on 32-bit? | 14:12:22 |
| vcunat | Ah, right. I read the line but missed the "exploitation" word and thus didn't get the meaning. | 14:13:39 |
|  Paul left the room. | 14:16:56 |
| vcunat | Considering the rebuild amount etc, I pulled it to staging-next-25.11 as well. | 14:26:18 |
|  Ninja joined the room. | 14:39:05 |
 stigo | Btw, if someone feels like merging this: https://github.com/NixOS/nixpkgs/pull/513690 (CryptX rng+fork() bug) | 19:14:18 |
| 28 Apr 2026 |
|  Aangularity joined the room. | 04:38:20 |
| Samuel Dionne-Riel | https://github.com/NixOS/nixpkgs/pull/512192#issuecomment-4339118013 | 21:16:29 |
 hexa | https://www.openwall.com/lists/oss-security/2026/04/28/20 | 23:45:11 |
 whispers [& it/fae] | looks like a non-issue: https://seclists.org/oss-sec/2026/q2/257. our source tarball has the correct line. | 23:55:36 |
| whispers [& it/fae] | looks like a non-issue: https://seclists.org/oss-sec/2026/q2/257. our source tarball (decompressed from traceroute/traceroute.c) has the correct line. | 23:56:02 |
| whispers [& it/fae] | looks like a non-issue: https://seclists.org/oss-sec/2026/q2/257. our source tarball (decompressed from traceroute.src) has the correct line. | 23:56:12 |
| whispers [& it/fae] | looks like a non-issue: https://www.openwall.com/lists/oss-security/2026/04/28/22. our source tarball (decompressed from traceroute.src) has the correct line. | 23:58:53 |
| 29 Apr 2026 |
| hexa | https://www.openwall.com/lists/oss-security/2026/04/29/1 starman stigo | 00:19:07 |
| stigo | https://github.com/NixOS/nixpkgs/pull/514601 | 00:52:28 |
| hexa | Scrumplex curl | 07:44:43 |
| hexa | Redacted or Malformed Event | 07:45:11 |
| Samuel Dionne-Riel | https://github.com/NixOS/nixpkgs/pull/514063 | 13:01:15 |
| stigo | https://github.com/NixOS/nixpkgs/pull/514747 <-- perlPackages.TextCSV_XS | 14:35:51 |
|  brett 💕 joined the room. | 21:08:26 |
| stigo | https://github.com/NixOS/nixpkgs/pull/514896 <-- perlPackages.Plack | 23:42:27 |
| 30 Apr 2026 |
 Fernando Rodrigues | https://github.com/NixOS/nixpkgs/pull/514428 | Xen Security Advisories #483-488 (when applicable) | 06:24:34 |
| vcunat | https://lists.gnutls.org/pipermail/gnutls-help/2026-April/004922.html | 07:34:27 |
| vcunat | (I can have a look later to update.) | 07:34:44 |
| vcunat | I don't see this mentioned in nixpkgs issues+PRs yet:
https://copy.fail | 08:17:44 |
| vcunat | (kernel, CVE-2026-31431) | 08:18:01 |
 leona | it's discussed heavly over in #security-discuss:nixos.org | 08:18:05 |
| leona | (we wait for the 6.12 release, greg will do sometime today likely) | 08:18:20 |
| vcunat | https://github.com/NixOS/nixpkgs/pull/515016 | 09:20:14 |
