Clik here to view.
CVE-2024-3094: Malicious code in xz 5.6.0 and 5.6.1 tarballs
payas: Guix has grafts precisely for this purpose. Can’t we have something similar? What roadblock as would there be for implementing and then utilizing such change? I’m also wondering about this. I...
View ArticleCVE-2024-3094: Malicious code in xz 5.6.0 and 5.6.1 tarballs
FYI, the downgrade of xz is in nixpkgs master now. *-linux binaries are basically all there. Read full topic
View ArticleCVE-2024-3094: Malicious code in xz 5.6.0 and 5.6.1 tarballs
hey, that didn’t take too long at all! Read full topic
View ArticleCVE-2024-3094: Malicious code in xz 5.6.0 and 5.6.1 tarballs
heads up that the PR reverting xz is now in nixos-unstable and nixpkgs-unstable https://nixpk.gs/pr-tracker.html?pr=300028 Read full topic
View ArticleCVE-2024-3094: Malicious code in xz 5.6.0 and 5.6.1 tarballs
This prompted us to add support for content addressable store to Cachix and see how much it would help with saving the rebuilds. I’ll report back once we have some results. Read full topic
View ArticleCVE-2024-3094: Malicious code in xz 5.6.0 and 5.6.1 tarballs
@domenkozar Do you have any results by now? Read full topic
View Article