Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[23.11] octoprint: apply patch for CVE-2024-28237 #307206

Merged
merged 1 commit into from
Apr 28, 2024
Merged

[23.11] octoprint: apply patch for CVE-2024-28237 #307206

merged 1 commit into from
Apr 28, 2024

Commits on Apr 27, 2024

  1. octoprint: apply patch for CVE-2024-28237 

    The 1.10.0 upgrade from NixOS#306861 seems to be too big to
be safely backported.

I also did not backport CVE-2024-23637: it is split across
a series of patches and impacts quite sensitive parts of OctoPrint.
I am not feeling confident enough to backport it and exploiting the issue
requires an admin level access.
    @LeSuisse
    LeSuisse committed Apr 27, 2024
    Configuration menu
    Copy the full SHA
    887d63e View commit details
    Browse the repository at this point in the history