b42 has joined #nixos-security
domenkozar has quit [Quit: WeeChat 2.0]
MichaelRaskin has quit [Quit: MichaelRaskin]
periklis has joined #nixos-security
periklis has quit [Ping timeout: 240 seconds]
periklis has joined #nixos-security
pie_ has quit [Remote host closed the connection]
pie_ has joined #nixos-security
ckauhaus has joined #nixos-security
pie_ has quit [Ping timeout: 258 seconds]
pie_ has joined #nixos-security
pie__ has joined #nixos-security
pie_ has quit [Ping timeout: 244 seconds]
erictapen has joined #nixos-security
erictapen has quit [Ping timeout: 276 seconds]
{^_^} has quit [Remote host closed the connection]
erictapen has joined #nixos-security
justanotheruser has quit [Ping timeout: 246 seconds]
gchristensen has quit [Quit: WeeChat 2.2]
grahamc has joined #nixos-security
justanotheruser has joined #nixos-security
erictapen has quit [Ping timeout: 276 seconds]
pie_ has joined #nixos-security
pie__ has quit [Ping timeout: 258 seconds]
pie_ has quit [Ping timeout: 245 seconds]
grahamc is now known as gchristensen
gchristensen is now known as {^_^}
{^_^} is now known as gchristensen
{^_^} has joined #nixos-security
periklis has quit [Ping timeout: 245 seconds]
pie_ has joined #nixos-security
<ckauhaus> Hi all, time for another vulnerability roundup
erictapen has joined #nixos-security
<ckauhaus> 15 tickets this time
<gchristensen> yay
<pie_> thank you \o/
<ckauhaus> :-)
<simpson> ckauhaus++
<{^_^}> ckauhaus's karma got increased to 1
<gchristensen> ckauhaus++
<{^_^}> ckauhaus's karma got increased to 2
<ckauhaus> yay
pie__ has joined #nixos-security
<infinisil> "wpa_supplicant-2.7: 6 advisories" Oof
pie___ has quit [Remote host closed the connection]
<ckauhaus> sort of strong start for wpa_supplicant 2.7
<xorAxAx> what qualifies for this roundup?
<xorAxAx> infinisil, thats WPA3
<xorAxAx> (i am asking because of e.g. ghostscript having had a recent security issue, but its not in the list :-))
<ckauhaus> xorAxAx: I've scanned the current versions of nixpkgs-channels against NIST NVD
<xorAxAx> and subtracted the ones in the existing roundups?
<ckauhaus> yes
<xorAxAx> ghostscript was in the last one :-D
<xorAxAx> then i understand it, ok
<ckauhaus> every vuln is reported only once per branch (master, 19.03, 18.09)
<xorAxAx> yep
pie_ has quit [Remote host closed the connection]
pie_ has joined #nixos-security
gchristensen changed the topic of #nixos-security to: Vulnerability Roundup Issues: https://github.com/NixOS/nixpkgs/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen+Vulnerability+roundup + https://broken.sh
<gchristensen> andi-, ckauhaus, you're both +o in here now
pie_ has quit [Ping timeout: 246 seconds]
<ckauhaus> thx
<gchristensen> thank you :)
<andi-> oh thx, how come?
<gchristensen> y'all should probably have it
<ckauhaus> we can set the channel topic now
<andi-> nice
<gchristensen> or in case someone causes a ruckus
ckauhaus has quit [Quit: WeeChat 2.4]
<pie__> aww <.< ^.^ >.> was nice :p
pie_ has joined #nixos-security
erictapen has quit [Ping timeout: 250 seconds]