andi- changed the topic of #nixos-security to: Vulnerability Roundup Issues: https://github.com/NixOS/nixpkgs/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen+Vulnerability+roundup + https://broken.sh | Currently supported releases: unstable (master), 20.09, 20.03 (until 27th of November)
star_cloud has quit [Ping timeout: 240 seconds]
rajivr has joined #nixos-security
star_cloud has joined #nixos-security
cole-h has quit [Ping timeout: 240 seconds]
cjb has quit [Quit: end of day]
Synthetica has joined #nixos-security
star_cloud has quit [Ping timeout: 240 seconds]
star_cloud has joined #nixos-security
cole-h has joined #nixos-security
star_cloud has quit [Ping timeout: 240 seconds]
<ris> hmm considering how to handle https://nvd.nist.gov/vuln/detail/CVE-2021-27219 for 20.09
<ris> it has been backported to glib 2.66 https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1927 but 20.09 is on 2.64
star_cloud has joined #nixos-security
lassulus has quit [Ping timeout: 245 seconds]
lassulus has joined #nixos-security
<{^_^}> #119910 (by mweinelt, 23 hours ago, open): [20.09] firefox: 87.0 -> 88.0; firefox-esr: 78.9.0esr -> 78.10.0esr
<lukegb> hexa-: want to include firefox-bin in that backport?
<lukegb> oh wait, wrong one
supersandro2000 has quit [Remote host closed the connection]
supersandro2000 has joined #nixos-security
supersandro2000 is now known as Guest17333
supersandro2000 has joined #nixos-security
Guest17333 has quit [Ping timeout: 260 seconds]
Synthetica has quit [Quit: Connection closed for inactivity]
<hexa-> lukegb: #119935
<{^_^}> https://github.com/NixOS/nixpkgs/pull/119935 (by taku0, 13 hours ago, open): [20.09] firefox-bin: 87.0 -> 88.0