andi- changed the topic of #nixos-security to: Vulnerability Roundup Issues: https://github.com/NixOS/nixpkgs/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen+Vulnerability+roundup + https://broken.sh | Currently supported releases: unstable (master), 20.09, 20.03 (until 27th of November)
rajivr has joined #nixos-security
supersandro20008 has joined #nixos-security
supersandro2000 has quit [Ping timeout: 264 seconds]
<hexa-> building gcc-10.2 before being able to build python is a downer
<hexa-> #113659
<{^_^}> https://github.com/NixOS/nixpkgs/pull/113659 (by mweinelt, 1 hour ago, open): python36: 3.6.12 -> 3.6.13; python37: 3.7.9 -> 3.7.10; python38/39/310: fix CVE-2021-3177
<hexa-> I hope I didn't mess up too much
supersandro20008 is now known as SuperSandro2000
<ajs124> hexa-++
<{^_^}> hexa-'s karma got increased to 23
<hexa-> ajs--124 :D
<hexa-> really, the python2 question :D
<hexa-> we can look into python2 once python3 is done ig
<hexa-> gentoo maintains a python2 fork as you have noticed
<hexa-> ajs124: ^
<ajs124> you gotta do what you gotta do. in my case, that's ask stupid questions about obsolete software
<hexa-> fine, looks easy enough to pull it in
<ajs124> but yeah, maybe we should just switch to the gentoo fork, instead of using their patches, because what else are we gonna do?
<hexa-> yeah, maybe
<hexa-> i'll pull the patch for now
<hexa-> switching the base should be discussed separately
<hexa-> seeing as we're loosing library support every day and we don't care about that either
tilpner_ has joined #nixos-security
tilpner has quit [Ping timeout: 264 seconds]
tilpner_ is now known as tilpner
<SuperSandro2000> We don't build python 2 by default anymore and most of the python changes do not respect backwards combability.
<hexa-> yes
<SuperSandro2000> building the PR for all python variants right now. Will be done in the morning
<hexa-> yeah, it is rather big due to gcc and openssl rebuilds
tilpner has quit [Read error: Connection reset by peer]
tilpner has joined #nixos-security
SuperSandro2000 has quit [Quit: Ping timeout (120 seconds)]
sgo has joined #nixos-security
stigo has quit [Ping timeout: 240 seconds]
ajs124 has quit [Quit: Bridge terminating on SIGTERM]
ajs124 has joined #nixos-security
SuperSandro2000 has joined #nixos-security
cole-h has quit [Ping timeout: 246 seconds]
tilpner_ has joined #nixos-security
tilpner has quit [Ping timeout: 272 seconds]
tilpner_ is now known as tilpner
globin has quit [Ping timeout: 240 seconds]
globin has joined #nixos-security
julianst[m] has quit [*.net *.split]
kalbasit[m] has quit [*.net *.split]
energizer has quit [*.net *.split]
energizer has joined #nixos-security
julianst[m] has joined #nixos-security
kalbasit[m] has joined #nixos-security
rosariopulella[m has quit [Ping timeout: 240 seconds]
thefloweringash has quit [Ping timeout: 240 seconds]
julianst[m] has quit [Ping timeout: 258 seconds]
kalbasit[m] has quit [Ping timeout: 258 seconds]
Yakulu[m] has quit [Ping timeout: 244 seconds]
cemguresci[m] has quit [Ping timeout: 244 seconds]
cwslimy[m] has quit [Ping timeout: 244 seconds]
bbigras has quit [Ping timeout: 244 seconds]
immae has quit [Ping timeout: 244 seconds]
nh2[m] has quit [Ping timeout: 250 seconds]
SushiDude[m] has quit [Ping timeout: 268 seconds]
danielrf[m] has quit [Ping timeout: 268 seconds]
colemickens has quit [Ping timeout: 265 seconds]
Ox4A6F has quit [Ping timeout: 250 seconds]
aanderse has quit [Ping timeout: 265 seconds]
SuperSandro2000 has quit [Ping timeout: 240 seconds]
SuperSandro2000 has joined #nixos-security
SuperSandro2000 has quit [Quit: The Lounge - https://thelounge.chat]
SuperSandro2000 has joined #nixos-security
justan0theruser is now known as justanotheruser
julianst[m] has joined #nixos-security
danielrf[m] has joined #nixos-security
bbigras has joined #nixos-security
nh2[m] has joined #nixos-security
Yakulu[m] has joined #nixos-security
thefloweringash has joined #nixos-security
aanderse has joined #nixos-security
immae has joined #nixos-security
kalbasit[m] has joined #nixos-security
cwNovusOrdoSeclo has joined #nixos-security
JJJollyjim has joined #nixos-security
colemickens has joined #nixos-security
cemguresci[m] has joined #nixos-security
rosariopulella[m has joined #nixos-security
Ox4A6F has joined #nixos-security
SushiDude[m] has joined #nixos-security
<andi-> thankfully glibc depends on python these days...
tilpner_ has joined #nixos-security
tilpner has quit [Ping timeout: 246 seconds]
tilpner_ is now known as tilpner
raboof has quit [Remote host closed the connection]
raboof has joined #nixos-security
raboof has quit []
raboof has joined #nixos-security
JJJollyjim has quit [Ping timeout: 258 seconds]
danielrf[m] has quit [Ping timeout: 258 seconds]
cemguresci[m] has quit [Ping timeout: 258 seconds]
nh2[m] has quit [Ping timeout: 240 seconds]
cole-h has joined #nixos-security
julianst[m] has quit [Ping timeout: 258 seconds]
jdnixx-M has quit [Ping timeout: 272 seconds]
julianst[m] has joined #nixos-security
danielrf[m] has joined #nixos-security
nh2[m] has joined #nixos-security
jdnixx-M has joined #nixos-security
cemguresci[m] has joined #nixos-security
tilpner_ has joined #nixos-security
tilpner has quit [Ping timeout: 240 seconds]
tilpner_ is now known as tilpner
cemguresci[m] has quit [Ping timeout: 244 seconds]
julianst[m] has quit [Ping timeout: 244 seconds]
colemickens has quit [Ping timeout: 244 seconds]
julianst[m] has joined #nixos-security
cemguresci[m] has joined #nixos-security
colemickens has joined #nixos-security
<flokli> ewww
rajivr has quit [Quit: Connection closed for inactivity]
<hexa-> so many opinions, but nobody likes to contribute to glibc to ease its bootstrapping :)
<ajs124> if they'd depend on python cryptography, glibc would literally depend on the rust compiler. that would make for some interesting bootstrapping.
energizer has quit [*.net *.split]
WilliButz has quit [*.net *.split]
samueldr has quit [*.net *.split]
energizer has joined #nixos-security
WilliButz has joined #nixos-security
samueldr has joined #nixos-security
samueldr has quit [Max SendQ exceeded]
samueldr has joined #nixos-security
<flokli> hexa-: do they only need python during build because of scripts/check-wrapper-headers.py?
<flokli> ah no, it seems also some header generation stuff
sgo has quit [Remote host closed the connection]