Remediating thousands of untracked security vulnerabilities in nixpkgs https://peertube.watch/videos/watch/33447294-22ea-4a49-8276-267bba09d4cc Through vendoring, many packages in nixpkgs end up including obsolete and vulnerable versions of their dependencies. This is especially prevalent for Rust, Go, JavaScript, Java and .NET software using strict lockfiles. How bad is the current situation really? What can nixpkgs contributors do to improve it? Speaker: Pierre Bourdon (delroth), Track: Nix and NixOS devroom, Room: H.1302 (Depage), When: Sunday 4 February 2024, 10:30–10:55 (Brussels time), Schedule: FOSDEM 2024 event page, Slides & links Slides (PDF), Slides (Google Docs), grep-nixos-cache, Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “Remediating thousands of untracked security vulnerabilities in nixpkgs” by Pierre Bourdon (delroth), FOSDEM 2024. Original recording: 2024/h1302/fosdem-2024-1983-remediating-thousands-of-untracked-security-vulnerabilities-in-nixpkgs.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Sun, 25 Oct 2026 01:52:16 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch Remediating thousands of untracked security vulnerabilities in nixpkgs https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/33447294-22ea-4a49-8276-267bba09d4cc All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.