| 5 Jan 2026 |
|  Felix Schröter changed their display name from Felix Schröter (🎄2025-12-20T00/2026-01-05T00) to Felix Schröter. | 10:47:16 |
| 7 Jan 2026 |
 hexa | https://seclists.org/oss-sec/2026/q1/30 Sandro 🐧 | 02:37:26 |
| hexa | * https://seclists.org/oss-sec/2026/q1/30 wget2 Sandro 🐧 | 02:37:29 |
 tgerbet | https://github.com/NixOS/nixpkgs/pull/477654 | 09:26:44 |
| hexa | https://seclists.org/oss-sec/2026/q1/37 tlp | 19:30:01 |
| hexa | https://github.com/NixOS/nixpkgs/pull/477861 | 20:36:55 |
| 8 Jan 2026 |
|  lennart changed their profile picture. | 16:38:16 |
| hexa | https://www.openwall.com/lists/oss-security/2026/01/08/5 libtasn1 | 16:55:42 |
| hexa | https://github.com/NixOS/nixpkgs/pull/478141 | 17:22:22 |
| 9 Jan 2026 |
| hexa | https://seclists.org/oss-sec/2026/q1/46 inputplumber | 20:51:09 |
| hexa | https://seclists.org/oss-sec/2026/q1/47 net-snmp | 20:51:25 |
| 10 Jan 2026 |
| tgerbet | Unstable already fixed, triggered the backport for stable
https://github.com/NixOS/nixpkgs/pull/478675 | 09:23:13 |
| tgerbet | https://github.com/NixOS/nixpkgs/pull/478678 | 09:53:51 |
| 11 Jan 2026 |
| hexa | https://seclists.org/oss-sec/2026/q1/49 harfbuzz nullpointer deref | 02:05:18 |
|  ghpzin changed their display name from ghpzin (moved to @ghpzin:envs.net) to ghpzin. | 15:04:32 |
|  @ghpzin:envs.net left the room. | 16:18:27 |
| 12 Jan 2026 |
| hexa | https://seclists.org/oss-sec/2026/q1/57 libpng 1.6.54 | 23:45:31 |
| hexa | * https://seclists.org/oss-sec/2026/q1/57 libpng 1.6.54 @vcunat | 23:46:09 |
| hexa | * https://seclists.org/oss-sec/2026/q1/57 libpng 1.6.54 vcunat | 23:46:13 |
| 13 Jan 2026 |
 vcunat | Unfortunately, the -apng patches won't apply to this version, even if updated their latest version. | 07:56:55 |
| 14 Jan 2026 |
 Sandro | FreeRDP 3.20.1, 9 CVEs https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1 | 13:12:33 |
| 15 Jan 2026 |
 h0nig2k | zlib CVE 9.3: https://github.com/NixOS/nixpkgs/issues/480358 | 13:00:45 |
| vcunat |
untgz will be removed in the next release.
(the issue is in the untgz utility, not in zlib itself)
| 13:07:53 |
| vcunat | And zlib in nixpkgs doesn't seem to build any utilities. | 13:09:58 |
 lord_fomo | Redacted or Malformed Event | 16:00:14 |
 leona | Redacted or Malformed Event | 16:04:27 |
| hexa | Redacted or Malformed Event | 16:04:36 |
| lord_fomo | Redacted or Malformed Event | 16:35:07 |
 magic_rb | Redacted or Malformed Event | 16:35:33 |
| lord_fomo | Redacted or Malformed Event | 16:36:22 |
