Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[22.11] ghostscript: add patch for CVE-2023-28879 #225940

Closed
wants to merge 1 commit into from
Closed

[22.11] ghostscript: add patch for CVE-2023-28879 #225940

wants to merge 1 commit into from

Conversation

risicle
Copy link
Contributor

@risicle risicle commented Apr 12, 2023 •
edited
Loading

Description of changes

https://nvd.nist.gov/vuln/detail/CVE-2023-28879
https://artifex.com/news/critical-security-vulnerability-fixed-in-ghostscript

See #225815 for master

Built packages that were added to passthru.tests in #225815 successfully on indicated platforms.

Things done
  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.05 Release Notes (or backporting 22.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@risicle risicle added the 1.severity: security Issues which raise a security issue, or PRs that fix one label Apr 12, 2023
@risicle risicle marked this pull request as ready for review April 12, 2023 21:36
@ofborg ofborg bot requested a review from viric April 12, 2023 21:49
vcunat added a commit that referenced this pull request Apr 13, 2023
@vcunat
Merge #225940: ghostscript: add patch for CVE-2023-28879
9519470 
...into staging-22.11
@vcunat
Copy link
Member

vcunat commented Apr 13, 2023

I'm not sure what happened here, but same-tree change got merged.

@vcunat vcunat closed this Apr 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@viric viric Awaiting requested review from viric

Assignees
No one assigned
Labels
1.severity: security Issues which raise a security issue, or PRs that fix one 10.rebuild-darwin: 501-1000 10.rebuild-darwin: 501+ 10.rebuild-linux: 501+ 10.rebuild-linux: 2501-5000
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@risicle @vcunat