#nixos-security on 2019-06-17

2019-04-23 19:29 gchristensen changed the topic of #nixos-security to: Vulnerability Roundup Issues: https://github.com/NixOS/nixpkgs/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen+Vulnerability+roundup + https://broken.sh

04:29 hmpffff has joined #nixos-security

04:39 hmpffff has quit [Quit: nchrrrr…]

05:20 MichaelRaskin has quit [Quit: MichaelRaskin]

07:13 pie__ has quit [Ping timeout: 258 seconds]

08:01 pie__ has joined #nixos-security

08:16 hmpffff has joined #nixos-security

09:01 hmpffff has quit [Quit: nchrrrr…]

09:06 hmpffff has joined #nixos-security

09:18 hmpffff has quit [Quit: nchrrrr…]

09:24 hmpffff has joined #nixos-security

09:36 hmpffff has quit [Quit: nchrrrr…]

09:46 hmpffff has joined #nixos-security

09:47 hmpffff has quit [Client Quit]

09:50 hmpffff has joined #nixos-security

11:10 hmpffff has quit [Quit: nchrrrr…]

11:48 hmpffff has joined #nixos-security

13:10 hmpffff has quit [Quit: nchrrrr…]

14:56 galaxie has joined #nixos-security

16:40 pie__ has quit [Ping timeout: 245 seconds]

17:25 <hexa-> https://lore.kernel.org/netdev/20190617170354.37770-1-edumazet@google.com/T/

17:27 <hexa-> CVE-2019-11477

17:36 Synthetica has joined #nixos-security

17:36 <Foxboron> hexa-: 3 CVEs there

17:37 <hexa-> true

17:51 pie__ has joined #nixos-security

18:09 <marek> anyone with ofborg build for these two pretty please? https://github.com/NixOS/nixpkgs/pull/63357 https://github.com/NixOS/nixpkgs/pull/63358

18:09 <{^_^}> #63357 (by mmahut, 7 minutes ago, open): bluez: CVE-2018-10910

18:09 <{^_^}> #63358 (by mmahut, 3 minutes ago, open): bluez: CVE-2018-10910

18:24 hmpffff has joined #nixos-security

18:30 <qyliss> https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md

19:22 <ivan> yep https://news.ycombinator.com/item?id=20205566 / https://www.openwall.com/lists/oss-security/2019/06/17/5

19:26 <qyliss> new stables for them nice

19:26 <ekleog> marek: you can (should? :p) open a PR to add yourself to https://github.com/NixOS/ofborg/pull/366 ; access is pretty liberal :)

19:26 <{^_^}> ofborg#366 (by ivan, 1 week ago, merged): Add ivan to extra-known-users

19:47 <marek> ekleog: oh, I will try, hopefully gchristensen will be okay with it :)

19:47 <qyliss> https://github.com/NixOS/nixpkgs/pull/63373

19:47 <{^_^}> #63373 (by alyssais, 54 seconds ago, open): linux: multiple TCP-based remote denial of service vulnerabilities

19:50 <ekleog> marek: pretty sure he'll be :) ofborg access is sandboxed anyway, it's only for darwin ofborg access that the barrier is higher (due to there being no sandbox)

21:51 book` has joined #nixos-security

21:55 ivan has joined #nixos-security

23:06 hmpffff has quit [Quit: nchrrrr…]