Skip to content

[23.05] glibc: 2.37-39 -> 2.37-45#258975

Merged
flokli merged 1 commit intoNixOS:staging-23.05from
edef1c:cve-2023-4911-backport
Oct 4, 2023
Merged

[23.05] glibc: 2.37-39 -> 2.37-45#258975
flokli merged 1 commit intoNixOS:staging-23.05from
edef1c:cve-2023-4911-backport

Conversation

@edef1c
Copy link
Copy Markdown
Member

@edef1c edef1c commented Oct 4, 2023

Description of changes

Fixes CVE-2023-4911.
Backport of #258972.

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.11 Release Notes (or backporting 23.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@edef1c edef1c added 1.severity: mass-rebuild 1.severity: security Issues which raise a security issue, or PRs that fix one labels Oct 4, 2023
@Ma27 Ma27 changed the title glibc: 2.37-39 -> 2.37-45 [23.05] glibc: 2.37-39 -> 2.37-45 Oct 4, 2023
Fixes CVE-2023-4911.

Change-Id: I154c79a7c6822051903ef15c547c3567691b1457
@Ma27 Ma27 force-pushed the cve-2023-4911-backport branch from 1960e24 to 1daafd9 Compare October 4, 2023 12:18
@ofborg ofborg bot added the 10.rebuild-linux-stdenv This PR causes stdenv to rebuild on Linux and must target a staging branch. label Oct 4, 2023
@ofborg ofborg bot requested review from Ma27 and edolstra October 4, 2023 12:54
@ofborg ofborg bot added 10.rebuild-darwin: 11-100 This PR causes between 11 and 100 packages to rebuild on Darwin. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 5001+ This PR causes many rebuilds on Linux and must target the staging branches. labels Oct 4, 2023
@ofborg ofborg bot requested a review from Ma27 October 4, 2023 14:23
@delroth delroth added the 12.approvals: 1 This PR was reviewed and approved by one person. label Oct 4, 2023
Copy link
Copy Markdown
Member

@flokli flokli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also successfully ran nixosTests.nscd and nixosTests.avahi here.

@flokli flokli merged commit 928bfa9 into NixOS:staging-23.05 Oct 4, 2023
@nixos-discourse
Copy link
Copy Markdown

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/whats-the-requirement-for-a-package-to-be-updated/34018/1

@edef1c edef1c deleted the cve-2023-4911-backport branch September 14, 2025 20:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 10.rebuild-darwin: 11-100 This PR causes between 11 and 100 packages to rebuild on Darwin. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 5001+ This PR causes many rebuilds on Linux and must target the staging branches. 10.rebuild-linux-stdenv This PR causes stdenv to rebuild on Linux and must target a staging branch. 12.approvals: 1 This PR was reviewed and approved by one person.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants