Skip to content

[23.11] libde265: 1.0.12 -> 1.0.14#271642

Merged
risicle merged 1 commit intoNixOS:staging-23.11from
LeSuisse:libde265-23.11
Dec 2, 2023
Merged

[23.11] libde265: 1.0.12 -> 1.0.14#271642
risicle merged 1 commit intoNixOS:staging-23.11from
LeSuisse:libde265-23.11

Conversation

@LeSuisse
Copy link
Member

@LeSuisse LeSuisse commented Dec 2, 2023

Description of changes

Fixes CVE-2023-43887 (and other security related issues).

https://github.com/strukturag/libde265/releases/tag/v1.0.13
https://github.com/strukturag/libde265/releases/tag/v1.0.14

staging PR: #268884

(cherry picked from commit 87ebba1)

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Priorities

Add a 👍 reaction to pull requests you find important.

@r-ryantm @LeSuisse
libde265: 1.0.12 -> 1.0.14
484ab6c 
Fixes CVE-2023-43887 and other security issues.

(cherry picked from commit 87ebba1)
@LeSuisse LeSuisse added the 1.severity: security Issues which raise a security issue, or PRs that fix one label Dec 2, 2023
risicle
risicle approved these changes Dec 2, 2023
View reviewed changes
Copy link
Contributor

@risicle risicle left a comment •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cherry-picked to release-23.11 for testing, built passthru.tests on macos 12 x86_64, nixos x86_64 + pkgsi686Linux. Built passthru.tests.test-corpus-decode on pkgsStatic, pkgsMusl, pkgsLLVM variants. Built pkgsCross.aarch64-multiplatform variant.

@risicle risicle merged commit 650bd81 into NixOS:staging-23.11 Dec 2, 2023
@LeSuisse LeSuisse deleted the libde265-23.11 branch December 2, 2023 13:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@risicle risicle risicle approved these changes

Assignees

No one assigned

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@LeSuisse @risicle @r-ryantm