02:56 <pie__> not really a nixos issue but I dont really have much other security people to talk to; I haven't looked at HTTP/2 much but my initial impression is HTTP got a lot more complicated https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md it might be an interesting exercise to see if theres any design principles that would make the issues (haven't read through yet) in this CVE preventable

02:57 <pie__> oh tl;dr: something about a bunch of DoS vulnerabilities in http/2 implementations

19:38 <flokli> could somebody take a look at https://github.com/NixOS/nixpkgs/pull/66621 and https://github.com/NixOS/nixpkgs/pull/66622 ? They fix some scary gitlab cve

19:38 <{^_^}> #66621 (by flokli, 6 hours ago, open): gitlab-ce: 12.0.3 -> 12.1.6

19:38 <{^_^}> #66622 (by flokli, 6 hours ago, open): [19.03] gitlab updates