| 7 Jan 2026 |
 hexa | https://seclists.org/oss-sec/2026/q1/30 Sandro 🐧 | 02:37:26 |
| hexa | * https://seclists.org/oss-sec/2026/q1/30 wget2 Sandro 🐧 | 02:37:29 |
 tgerbet | https://github.com/NixOS/nixpkgs/pull/477654 | 09:26:44 |
| hexa | https://seclists.org/oss-sec/2026/q1/37 tlp | 19:30:01 |
| hexa | https://github.com/NixOS/nixpkgs/pull/477861 | 20:36:55 |
| 8 Jan 2026 |
|  lennart changed their profile picture. | 16:38:16 |
| hexa | https://www.openwall.com/lists/oss-security/2026/01/08/5 libtasn1 | 16:55:42 |
| hexa | https://github.com/NixOS/nixpkgs/pull/478141 | 17:22:22 |
| 9 Jan 2026 |
| hexa | https://seclists.org/oss-sec/2026/q1/46 inputplumber | 20:51:09 |
| hexa | https://seclists.org/oss-sec/2026/q1/47 net-snmp | 20:51:25 |
| 10 Jan 2026 |
| tgerbet | Unstable already fixed, triggered the backport for stable
https://github.com/NixOS/nixpkgs/pull/478675 | 09:23:13 |
| tgerbet | https://github.com/NixOS/nixpkgs/pull/478678 | 09:53:51 |
| 11 Jan 2026 |
| hexa | https://seclists.org/oss-sec/2026/q1/49 harfbuzz nullpointer deref | 02:05:18 |
|  ghpzin changed their display name from ghpzin (moved to @ghpzin:envs.net) to ghpzin. | 15:04:32 |
|  @ghpzin:envs.net left the room. | 16:18:27 |
| 12 Jan 2026 |
| hexa | https://seclists.org/oss-sec/2026/q1/57 libpng 1.6.54 | 23:45:31 |
| hexa | * https://seclists.org/oss-sec/2026/q1/57 libpng 1.6.54 @vcunat | 23:46:09 |
| hexa | * https://seclists.org/oss-sec/2026/q1/57 libpng 1.6.54 vcunat | 23:46:13 |
| 13 Jan 2026 |
 vcunat | Unfortunately, the -apng patches won't apply to this version, even if updated their latest version. | 07:56:55 |
