Skip to content

golden-cheetah-bin: mark insecure due to CVE-2023-4863#255339

Merged
fabianhjr merged 1 commit intoNixOS:masterfrom
adamcstephens:gc/insecure
Sep 17, 2023
Merged

golden-cheetah-bin: mark insecure due to CVE-2023-4863#255339
fabianhjr merged 1 commit intoNixOS:masterfrom
adamcstephens:gc/insecure

Conversation

@adamcstephens
Copy link
Contributor

Description of changes

Marking as insecure until upstream releases a new version.

nixpkgs tracking issue: #254798

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.11 Release Notes (or backporting 23.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@ofborg ofborg bot added 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 0 This PR does not cause any packages to rebuild on Linux. labels Sep 15, 2023
@delroth delroth added the 12.approvals: 1 This PR was reviewed and approved by one person. label Sep 15, 2023
@fabianhjr fabianhjr added the 11.by: package-maintainer This PR was created by a maintainer of all the package it changes. label Sep 17, 2023
@fabianhjr fabianhjr merged commit 22910e8 into NixOS:master Sep 17, 2023
@github-actions
Copy link
Contributor

Backport failed for release-23.05, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-23.05
git worktree add -d .worktree/backport-255339-to-release-23.05 origin/release-23.05
cd .worktree/backport-255339-to-release-23.05
git checkout -b backport-255339-to-release-23.05
ancref=$(git merge-base dc1668abd00fd03f9399f1e65d9a485b010405dc c0e3985db89e2a7c0ee1c61d64e7223bb0375f46)
git cherry-pick -x $ancref..c0e3985db89e2a7c0ee1c61d64e7223bb0375f46

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 0 This PR does not cause any packages to rebuild on Linux. 11.by: package-maintainer This PR was created by a maintainer of all the package it changes. 12.approvals: 1 This PR was reviewed and approved by one person.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants