#kisslinux

Unofficial KISS Linux community channel | https://kisscommunity.bvnf.space | post logs or else | song of the day https://yewtu.be/watch?v=2djlxCWcNOM
Earlier messages
AtleoSquit (Remote host closed the connection)
...
soliwilosquit (Remote host closed the connection)
soliwilosjoined
phinxyquit (Ping timeout: 264 seconds)
phinxyjoined
...
thikkljoined
thikklquit (Remote host closed the connection)
thikkljoined
solaarequit (Ping timeout: 260 seconds)
solaarejoined
solaarequit (Ping timeout: 272 seconds)
solaarejoined
thikklquit (Remote host closed the connection)
thikkljoined
fererrorocherjoined
...
thikklquit (Remote host closed the connection)
...
thikkljoined
davidgarlandjoined
<davidgarland>just letting y'all know, since a friend told me about this: xz got backdoored, supposedly https://www.openwall.com/lists/oss-security/2024/03/29/4
<davidgarland>versions 5.6.0 and 5.6.1 are affected they say, and community packages seem to be packaging the latter
<davidgarland>relevant discussion here: https://news.ycombinator.com/item?id=39865810
thikklquit (Remote host closed the connection)
aesdefquit (Quit: No Ping reply in 180 seconds.)
aesdefjoined
<sad_plan>interesting
davidgarlandquit (Quit: Client closed)
aesdefquit (Quit: No Ping reply in 180 seconds.)
aesdefjoined
...
<angle>maybe just roll it back in core then?
<sad_plan>i dont belive kiss is affected by this. no bash, no sysD etc
...
aesdefquit (Quit: No Ping reply in 180 seconds.)
aesdefjoined
...
thikkljoined
thikklquit (Remote host closed the connection)
thikkljoined
thikklquit (Remote host closed the connection)
...
AtleoSjoined
...
<testuser[m]>https://codeberg.org/kiss-community/repo/issues/183#issuecomment-1721814
...
c_rwjoined
...
AtleoSquit (Ping timeout: 264 seconds)
Guest47joined
solaarequit (Ping timeout: 264 seconds)
Guest47left
Guest47joined
<Guest47>hi, is lvm2 and cryptseutp support static linking?
solaarejoined
solaarequit (Ping timeout: 260 seconds)
solaarejoined
<testuser[m]>Guest47 they should, but why?
<solaare>why is a software like xz getting regular updates anyway?? shouldnt this type of stuff be "finished" software?
Later messages