!ZRgXNaHrdpGqwUnGnj:nixos.org

NixOS Security Triage

611 Members
Coordination and triage of security issues in nixpkgs | Discussions in #security-discuss:nixos.org | Open PRs: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc+label%3A%221.severity%3A+security%22193 Servers

Load older messages


SenderMessageTime
11 Jan 2025
@hexa:lossy.networkhexaeach individual intermediate commit, yeah17:09:43
@philiptaron:matrix.orgPhilip Taron (UTC-8)Ok, I think I understand.17:12:00
@philiptaron:matrix.orgPhilip Taron (UTC-8)* Ok, I think I understand. I picked the intermediate commits too.17:13:24
@hexa:lossy.networkhexalet's continue on the PR17:16:10
12 Jan 2025
@strutztm:strutztm.destrutztm joined the room.00:24:58
13 Jan 2025
@niklaskorz:korz.devNiklas Korz Not sure if these are the same that were fixed in vaultwarden 1.32.7 three weeks ago:
https://chaos.social/@fbausch/113821745299078611
15:28:46
@niklaskorz:korz.devNiklas Korz I think they're all already fixed in the version of vaultwarden we ship 15:29:40
@hexa:lossy.networkhexaearlier15:29:53
@hexa:lossy.networkhexathey were fixed in 1.32.515:30:14
@niklaskorz:korz.devNiklas KorzI see, thanks!15:33:12
14 Jan 2025
@hexa:lossy.networkhexahttps://www.openwall.com/lists/oss-security/2025/01/14/4 git 18:14:18
@hexa:lossy.networkhexahttps://kb.cert.org/vuls/id/952657 rsync 18:14:40
@hexa:lossy.networkhexahttps://github.com/NixOS/nixpkgs/pull/32201218:14:46
@hexa:lossy.networkhexa* https://github.com/NixOS/nixpkgs/pull/37378418:15:01
@tgerbet:matrix.orgtgerbetCurrently building 2.47.2 :) 18:16:42
@tgerbet:matrix.orgtgerbet* Currently building 2.47.2 :) https://github.com/NixOS/nixpkgs/pull/37378418:31:52
@tgerbet:matrix.orgtgerbet* Currently building 2.47.2 :) https://github.com/NixOS/nixpkgs/pull/37380118:32:10
@aidalgol:matrix.orgaidalgolhttps://www.yubico.com/support/security-advisories/ysa-2025-01/18:44:43
@hexa:lossy.networkhexa

No Yubico hardware is affected.

18:45:16
@hexa:lossy.networkhexapam-u2f18:45:29
@aidalgol:matrix.orgaidalgolAIUI, it's the PAM module for using U2F.18:46:18
@sophie:catgirl.cloud⛧-440729 [sophie] (it/its) changed their profile picture.18:56:36
@tgerbet:matrix.orgtgerbethttps://github.com/NixOS/nixpkgs/pull/37381819:30:17
@luke:vuksta.comLuke joined the room.20:47:26
15 Jan 2025
@leon:lhax.xyzleon joined the room.08:21:09
@ss:someonex.netSomeoneSerge changed their display name from SomeoneSerge (utc+3) to SomeoneSerge.19:01:56
17 Jan 2025
@jwagner:wdz.deJohann Wagner changed their display name from Johann to Johann Wanger (hier nicht erreichbar).09:25:54
@jwagner:wdz.deJohann Wagner changed their display name from Johann Wanger (hier nicht erreichbar) to Johann Wagner.09:31:02
18 Jan 2025
@phileas:asra.grsyd installs gentoo (they/them) changed their display name from syd 9291 (they/them) to syd installs gentoo (they/them).16:26:46
19 Jan 2025
@rgrunbla:matrix.org@rgrunbla:matrix.org left the room.09:36:52

There are no newer messages yet.


Back to Room ListRoom Version: 6