staging-next-23.11 iteration 2 - 2024-01-06#279139
Merged
vcunat merged 267 commits intorelease-23.11from Jan 18, 2024
Merged
Conversation
[Backport staging-23.11] python3Packages.numpy: fix cross compilation
[Backport staging-23.11] libgit2, http-parser: Fix Windows Build
Co-Authored-By: John Ericson <[email protected]> (cherry picked from commit 33f464b)
(cherry picked from commit a18b35a)
(cherry picked from commit 8aac6da)
(cherry picked from commit 9625705)
[Backport staging-23.11] http-parser: fix copying outputs for static build
See also: https://www.openwall.com/lists/oss-security/2023/11/16/1 (cherry picked from commit 796079b)
[Backport staging-23.11] python311Packages.werkzeug: 2.3.7 -> 2.3.8
I was using a 23.11 package on a NixOS 23.05 system and this caused the python that was used in gunicorn to differ from the python the postgres lib was linked against. (cherry picked from commit 018175e)
Fixes CVE-2023-43887 and other security issues. (cherry picked from commit 87ebba1)
(cherry picked from commit 07226ee)
….tests (cherry picked from commit 96cb82f)
[23.11] libde265: 1.0.12 -> 1.0.14
[Backport staging-23.11] gtk4: 4.12.3 → 4.12.4
github-actions
bot
added
6.topic: stdenv
ofborg
bot
added
10.rebuild-darwin-stdenv
Changes: ``` * Noteworthy changes in release 2.4 (2022-10-25) [stable] ** ifconfig *** Support specifying prefix netmask lengths in -A. Patch by Samuel Thibault <[email protected]>. ** Hurd: tell pfinet translator interfaces to configure Patch by Samuel Thibault <[email protected]>. ** ftp *** Avoid crash caused by signed integer overflow resulting in out-of-bounds buffer access. Reported by AiDai in <https://lists.gnu.org/archive/html/bug-inetutils/2021-12/msg00003.html>. *** Avoid crash caused by heap buffer overflow. Reported by ZFeiXQ in <https://lists.gnu.org/archive/html/bug-inetutils/2021-12/msg00016.html>. *** Avoid crash caused by NULL pointer dereference. Reported by AiDai in <https://lists.gnu.org/archive/html/bug-inetutils/2021-12/msg00004.html>. *** Avoid crash caused by infinite macro recursion. Reported by AiDai in <https://lists.gnu.org/archive/html/bug-inetutils/2021-12/msg00005.html>. ** telnetd *** Avoid crash on 0xff 0xf7 (IAC EC) or 0xff 0xf8 (IAC EL). CVE-2022-39028 https://pierrekim.github.io/blog/2022-08-24-2-byte-dos-freebsd-netbsd-telnetd-netkit-telnetd-inetutils-telnetd-kerberos-telnetd.html ** telnet *** Fix a buffer overflow problem. CVE-2019-0053 https://cgit.freebsd.org/src/commit/?id=14aab889f4e50072a6b914eb95ebbfa939539dad ** tftp *** Avoid crashing when given unexpected or invalid commands from tty. Reported by AiDai in <https://lists.gnu.org/archive/html/bug-inetutils/2021-12/msg00018.html>. ** Various bugs fixes, internal improvements and clean ups. Update of gnulib and build fixes for C23. ``` (cherry picked from commit 448dd9f)
13 tasks
13 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
https://hydra.nixos.org/jobset/nixpkgs/staging-next-23.11
https://hydra.nixos.org/jobset/nixos/staging-next-23.11-small
Significant breakages
(will be edited based on progress)