andi- changed the topic of #nixos-security to: Vulnerability Roundup Issues: https://github.com/NixOS/nixpkgs/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen+Vulnerability+roundup + https://broken.sh | Currently supported releases: unstable (master), 20.09, 20.03 (until 27th of November)
star_cloud has quit [Ping timeout: 260 seconds]
ris has quit [Ping timeout: 260 seconds]
justanotheruser has quit [Ping timeout: 246 seconds]
globin has quit [Quit: o/]
globin has joined #nixos-security
star_cloud has joined #nixos-security
rajivr has joined #nixos-security
cjb has quit []
justanotheruser has joined #nixos-security
FRidh has joined #nixos-security
cole-h has quit [Ping timeout: 268 seconds]
cole-h has joined #nixos-security
cole-h has quit [Client Quit]
justanotheruser has quit [Ping timeout: 250 seconds]
qyliss has quit [Quit: bye]
qyliss has joined #nixos-security
<hexa-> > Subject: CVE-2021-29136: umoci: malicious layer with symlink entry for "/"
<{^_^}> error: syntax error, unexpected WITH, expecting ')', at (string):494:49
<hexa-> allows overwriting of host files
<{^_^}> #118670 (by mweinelt, 33 minutes ago, open): Django: 2.2.19 -> 2.2.20; 3.1.7 -> 3.2; asgiref: 3.3.1 -> 3.3.2
<hexa-> > pkgs.ceph.version
<{^_^}> "15.2.8"
FRidh has quit [Quit: Konversation terminated!]
<lukegb> hexa-: NixOS is probably secure since I don't think the ceph dashboard actually works :)))
<hexa-> lol
<hexa-> lucky us
cole-h has joined #nixos-security
rajivr has quit [Quit: Connection closed for inactivity]
ris has joined #nixos-security
star_cloud has quit [Remote host closed the connection]
star_cloud has joined #nixos-security
star_cloud has quit [Excess Flood]
star_cloud has joined #nixos-security
<{^_^}> #118698 (by mweinelt, 2 minutes ago, open): umoci: 0.4.6 -> 0.4.7
supersandro2000 has quit [Disconnected by services]
supersandro2000 has joined #nixos-security