Skip to content

lapack: add patch for CVE-2021-4048#150788

Merged
veprbl merged 1 commit intoNixOS:stagingfrom
risicle:ris-lapack-CVE-2021-4048
Dec 25, 2021
Merged

lapack: add patch for CVE-2021-4048#150788
veprbl merged 1 commit intoNixOS:stagingfrom
risicle:ris-lapack-CVE-2021-4048

Conversation

@risicle
Copy link
Contributor

@risicle risicle commented Dec 15, 2021

Motivation for this change

https://nvd.nist.gov/vuln/detail/CVE-2021-4048

Things done
  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 22.05 Release Notes (or backporting 21.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
    • (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes
  • Fits CONTRIBUTING.md.

@risicle risicle added 1.severity: security Issues which raise a security issue, or PRs that fix one backport release-21.05 labels Dec 15, 2021
@ofborg ofborg bot added 10.rebuild-darwin: 501+ This PR causes many rebuilds on Darwin and should normally target the staging branches. 10.rebuild-darwin: 2501-5000 This PR causes many rebuilds on Darwin and should target the staging branches. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 2501-5000 This PR causes many rebuilds on Linux and should target the staging branches. labels Dec 15, 2021
@risicle risicle marked this pull request as ready for review December 15, 2021 01:58
@risicle
Copy link
Contributor Author

risicle commented Dec 15, 2021

Have tested on aarch64-linux too but, being emulated, 4 of the tests timeout. Not surprising.

@veprbl veprbl merged commit 1030e3e into NixOS:staging Dec 25, 2021
@github-actions
Copy link
Contributor

Backport failed for release-21.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-21.05
git worktree add -d .worktree/backport-150788-to-release-21.05 origin/release-21.05
cd .worktree/backport-150788-to-release-21.05
git checkout -b backport-150788-to-release-21.05
ancref=$(git merge-base cbee9da7f8fbe466be56bc4d2c6cc4d66ed73b61 6d952e40483a6951d585b79070872e81909409a9)
git cherry-pick -x $ancref..6d952e40483a6951d585b79070872e81909409a9

@github-actions
Copy link
Contributor

Successfully created backport PR #152147 for release-21.11.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 10.rebuild-darwin: 501+ This PR causes many rebuilds on Darwin and should normally target the staging branches. 10.rebuild-darwin: 2501-5000 This PR causes many rebuilds on Darwin and should target the staging branches. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 2501-5000 This PR causes many rebuilds on Linux and should target the staging branches.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants