| 27 Aug 2024 |
Mindavi | Lix hydra also has a patch publicly available, I saw | 18:45:21 |
Mindavi | Not sure if it covers everything but at least that endpoint | 18:45:33 |
das_j | CVE ID got assigned and we have published the advisory: https://github.com/NixOS/hydra/security/advisories/GHSA-xv29-v93r-2f5v | 18:57:51 |
das_j | In reply to @rick:matrix.ciphernetics.nl Lix hydra also has a patch publicly available, I saw We do things a bit differently though by adding another role so the decision whether someone can trigger evals is more granular | 18:58:45 |
| 28 Aug 2024 |
dramforever | do i have to get hydra_unstable if i want to get the fix? | 11:53:57 |
Mindavi | That's the only attribute available anyway, but yeah | 12:01:38 |