gchristensen changed the topic of #nixos-security to: Vulnerability Roundup Issues: https://github.com/NixOS/nixpkgs/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen+Vulnerability+roundup + https://broken.sh
<ris> #73792
<{^_^}> https://github.com/NixOS/nixpkgs/pull/73792 (by risicle, 12 seconds ago, open): [r19.03] libextractor: add patch for CVE-2019-15531
ris has quit [Ping timeout: 258 seconds]
justan0theruser has quit [Ping timeout: 246 seconds]
justanotheruser has joined #nixos-security
justanotheruser has quit [Ping timeout: 240 seconds]
justanotheruser has joined #nixos-security
FRidh has joined #nixos-security
hmpffff has joined #nixos-security
FRidh has quit [Quit: Konversation terminated!]
hmpffff_ has joined #nixos-security
hmpffff has quit [Ping timeout: 240 seconds]
hmpffff has joined #nixos-security
hmpffff_ has quit [Ping timeout: 240 seconds]
hmpffff has quit [Quit: nchrrrr…]
hmpffff has joined #nixos-security
FRidh has joined #nixos-security
stigo has quit [Remote host closed the connection]
stigo has joined #nixos-security
<hexa-> #73497 tested and lgtm
<{^_^}> https://github.com/NixOS/nixpkgs/pull/73497 (by dtzWill, 4 days ago, open): microcodeIntel: 20191113 -> 20191115
hmpffff has quit [Quit: nchrrrr…]
IdleBot_51f8eb57 has quit [Remote host closed the connection]
IdleBot_5e50c57d has joined #nixos-security
FRidh has quit [Quit: Konversation terminated!]
hmpffff has joined #nixos-security
ris has joined #nixos-security
hmpffff has quit [Quit: nchrrrr…]
hmpffff has joined #nixos-security
hmpffff has quit [Quit: nchrrrr…]
hmpffff has joined #nixos-security
<asymmetric> gchristensen: hasn't wg been upstreamed into the kernel for a while now?
<asymmetric> the ascii art towards the bottom is beautiful
<gchristensen> no
<gchristensen> it hasn't merged yet. I think it has been submitted twice for review
<asymmetric> so until now it's been used as an external module?
<gchristensen> yea
<asymmetric> got it
<asymmetric> what's the advantage of upstreaming it vs keeping it as an external module?
<gchristensen> easier to install, easier to keep working with the kernel, trust factor
<gchristensen> it would be a shame if a single person chose ipsec over wireguard if only because ipsec is in the kernel and wireguard is not
<asymmetric> yeah wg is dope
<asymmetric> i found zx2c4 a bit blunt on https://github.com/NixOS/rfcs/pull/5 though
<{^_^}> rfcs#5 (by edolstra, 2 years ago, closed): [RFC 0005] Nix encryption
<gchristensen> he's a blunt person
<gchristensen> heh
<asymmetric> well his code will be right at home in the linux kernel then ;)
<gchristensen> heh yeah
justan0theruser has joined #nixos-security
justanotheruser has quit [Ping timeout: 245 seconds]
tv has quit [Ping timeout: 240 seconds]
tv has joined #nixos-security