Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

libde265: 1.0.14 -> 1.0.15 #275720

Merged
merged 1 commit into from
Dec 25, 2023
Merged

libde265: 1.0.14 -> 1.0.15 #275720

merged 1 commit into from
Dec 25, 2023

Conversation

LeSuisse
Copy link
Contributor

Description of changes

Fixes CVE-2023-49465, CVE-2023-49467 and CVE-2023-49468

https://github.com/strukturag/libde265/releases/tag/v1.0.15

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Add a 👍 reaction to pull requests you find important.

@LeSuisse LeSuisse added 1.severity: security Issues which raise a security issue, or PRs that fix one backport staging-23.05 labels Dec 20, 2023
@LeSuisse
Copy link
Contributor Author

Ofborg eval issue seems to be unrelated to this change.

@LeSuisse
Copy link
Contributor Author

@ofborg eval

@ofborg ofborg bot requested a review from gebner December 23, 2023 11:30
risicle
risicle approved these changes Dec 25, 2023
View reviewed changes
Copy link
Contributor

@risicle risicle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Built passthru.tests on macos 12 x86_64 & nixos x86_64. Built pkgsStatic.tests.test-corpus-decode, pkgsi686Linux.tests.test-corpus-decode, pkgsLLVM.tests.test-corpus-decode. Built tests.test-corpus-decode, aarch64-linux/

@risicle risicle merged commit b3e1256 into NixOS:staging Dec 25, 2023
13 checks passed
@github-actions github-actions bot mentioned this pull request Dec 25, 2023
Merged
1 task
@github-actions GitHub Actions
Copy link
Contributor

Successfully created backport PR for staging-23.05:

@github-actions github-actions bot mentioned this pull request Dec 25, 2023
Merged
1 task
@github-actions GitHub Actions
Copy link
Contributor

Successfully created backport PR for staging-23.11:

@LeSuisse LeSuisse deleted the libde265-1.0.15 branch December 26, 2023 09:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@risicle risicle risicle approved these changes

@gebner gebner Awaiting requested review from gebner

Assignees
No one assigned
Labels
1.severity: security Issues which raise a security issue, or PRs that fix one 10.rebuild-darwin: 501+ 10.rebuild-darwin: 1001-2500 10.rebuild-linux: 501+ 10.rebuild-linux: 1001-2500
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@LeSuisse @risicle