gchristensen changed the topic of #nixos-security to: Vulnerability Roundup Issues: https://github.com/NixOS/nixpkgs/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen+Vulnerability+roundup + https://broken.sh
justanotheruser has quit [Ping timeout: 240 seconds]
kleisli__ has quit [Quit: Leaving]
justanotheruser has joined #nixos-security
andi- has quit [Remote host closed the connection]
andi- has joined #nixos-security
FRidh has joined #nixos-security
FRidh2 has joined #nixos-security
FRidh has quit [Ping timeout: 258 seconds]
FRidh has joined #nixos-security
FRidh2 has quit [Ping timeout: 240 seconds]
zarel has quit [Ping timeout: 268 seconds]
FRidh has quit [Quit: Konversation terminated!]
justanotheruser has quit [Ping timeout: 272 seconds]
justanotheruser has joined #nixos-security
gchristensen has joined #nixos-security
c4rc4s has joined #nixos-security
justanotheruser has quit [Ping timeout: 260 seconds]
fpletz has joined #nixos-security
flokli has joined #nixos-security
justanotheruser has joined #nixos-security
zarel has joined #nixos-security
justanotheruser has quit [Ping timeout: 272 seconds]
<tokudan> nextcloud has released a security announcement, so this PR is now security relevant: https://github.com/NixOS/nixpkgs/pull/82061
<{^_^}> #82061 (by tokudan, 1 week ago, open): nextcloud: 18.0.0 -> 18.0.2
<flokli> tokudan: thanks for the ehads-up
<tokudan> flokli, thanks for acting so fast :)
<flokli> tokudan: no worries
<flokli> is there anything to do for 19.09?
<flokli> it's currently on 16.0.8
<flokli> there is a 16.0.9 from 2020-03-11, so I assume we should update to that
<flokli> brr, according to nC-SA-2020-015, <16.0.10 is affected. But there's no 16.0.10 ye
<flokli> brr, according to nC-SA-2020-015, <16.0.10 is affected. But there's no 16.0.10 yet
<{^_^}> nextcloud/server#19976 (by flokli, 4 minutes ago, open): nextcloud 16.0.10 release missing
<{^_^}> #82697 (by flokli, 9 seconds ago, open): [19.09] nextcloud: 16.0.8 -> 16.0.9
<tokudan> flokli, I'm heading for bed now, so I didn't want to wait for ofborg to test it :)
<flokli> no worries. maybe we have a response from upstream tomorrow! :-)