18:02 <hexa-> hey everyone

18:03 <hexa-> https://webkitgtk.org/security/WSA-2020-0008.html

18:03 <hexa-> we should deal with these on release-20.09 some way

18:04 <hexa-> https://security-tracker.debian.org/tracker/CVE-2020-13584

18:04 <hexa-> all unfixed in debian stable as of today

18:05 <hexa-> not sure if it is feasible to find the relevant patches … bump to 2.30.3 … mark as insecure

19:34 <hexa-> okay, debian updated buster to 2.30.3, and we should likely do the same

19:34 <hexa-> https://security-tracker.debian.org/tracker/CVE-2020-9948

23:36 <hexa-> https://github.com/NixOS/nixpkgs/pull/104820