Skip to content

libwebp: fix MFSA-TMP-2023-0001#225814

Merged
mweinelt merged 1 commit intoNixOS:stagingfrom
helsinki-systems:fix/libwebp-sec
Apr 11, 2023
Merged

libwebp: fix MFSA-TMP-2023-0001#225814
mweinelt merged 1 commit intoNixOS:stagingfrom
helsinki-systems:fix/libwebp-sec

Conversation

@ajs124
Copy link
Member

@ajs124 ajs124 commented Apr 11, 2023

Description of changes

see https://www.mozilla.org/en-US/security/advisories/mfsa2023-13/#MFSA-TMP-2023-0001

no CVE id or other identifier has been assigned

Things done
  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.05 Release Notes (or backporting 22.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@ajs124 ajs124 added 1.severity: security Issues which raise a security issue, or PRs that fix one backport release-22.11 labels Apr 11, 2023
@ajs124 ajs124 changed the base branch from master to staging April 11, 2023 21:57
@mweinelt
Copy link
Member

mweinelt commented Apr 11, 2023

no CVE identifier has been published yet

@ajs124 ajs124 marked this pull request as ready for review April 11, 2023 22:18
@mweinelt mweinelt merged commit f47ee75 into NixOS:staging Apr 11, 2023
@github-actions
Copy link
Contributor

Successfully created backport PR for staging-22.11:

@ajs124 ajs124 deleted the fix/libwebp-sec branch April 11, 2023 22:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants