Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[23.05] glibc: 2.37-39 -> 2.37-45 #258975

Merged
merged 1 commit into from
Oct 4, 2023
Merged

[23.05] glibc: 2.37-39 -> 2.37-45 #258975

merged 1 commit into from
Oct 4, 2023

Conversation

edef1c
Copy link
Member

@edef1c edef1c commented Oct 4, 2023

Description of changes

Fixes CVE-2023-4911.
Backport of #258972.

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.11 Release Notes (or backporting 23.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@edef1c edef1c added 1.severity: mass-rebuild This PR causes a large number of packages to rebuild 1.severity: security Issues which raise a security issue, or PRs that fix one labels Oct 4, 2023
This was referenced Oct 4, 2023
Merged
Closed
@Ma27 Ma27 changed the title glibc: 2.37-39 -> 2.37-45 [23.05] glibc: 2.37-39 -> 2.37-45 Oct 4, 2023
@edef1c @Ma27
glibc: 2.37-39 -> 2.37-45
1daafd9 
Fixes CVE-2023-4911.

Change-Id: I154c79a7c6822051903ef15c547c3567691b1457
@flokli flokli mentioned this pull request Oct 4, 2023
Closed
4 tasks
@ofborg ofborg bot added the 10.rebuild-linux-stdenv This PR causes stdenv to rebuild label Oct 4, 2023
@ofborg ofborg bot requested review from edolstra and Ma27 October 4, 2023 12:54
@ofborg ofborg bot requested a review from Ma27 October 4, 2023 14:23
@delroth delroth added the 12.approvals: 1 This PR was reviewed and approved by one reputable person label Oct 4, 2023
flokli
flokli approved these changes Oct 4, 2023
View reviewed changes
Copy link
Contributor

@flokli flokli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also successfully ran nixosTests.nscd and nixosTests.avahi here.

@flokli flokli merged commit 928bfa9 into NixOS:staging-23.05 Oct 4, 2023
27 checks passed
@nixos-discourse
Copy link

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/whats-the-requirement-for-a-package-to-be-updated/34018/1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@flokli flokli flokli approved these changes

@edolstra edolstra Awaiting requested review from edolstra

@Ma27 Ma27 Awaiting requested review from Ma27

Assignees
No one assigned
Labels
1.severity: mass-rebuild This PR causes a large number of packages to rebuild 1.severity: security Issues which raise a security issue, or PRs that fix one 10.rebuild-darwin: 11-100 10.rebuild-linux: 501+ 10.rebuild-linux: 5001+ 10.rebuild-linux-stdenv This PR causes stdenv to rebuild 12.approvals: 1 This PR was reviewed and approved by one reputable person
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
5 participants
@edef1c @nixos-discourse @flokli @Ma27 @delroth