Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[23.11] mate.engrampa: apply patch for CVE-2023-52138 #308229

Closed

Conversation

LeSuisse
Copy link
Contributor

@LeSuisse LeSuisse commented May 1, 2024

Description of changes

GHSA-c98h-v39w-3r7v

Fixed on unstable with #289062

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Add a 👍 reaction to pull requests you find important.

@github-actions github-actions bot added the 6.topic: mate The MATE Desktop Environment label May 1, 2024
@bobby285271
Copy link
Member

Thanks, I wasn't aware of that

Fixed on unstable with #289062

Nit: It probably should be #286994 😂 , but just fetching the patch is also fine for me

@LeSuisse
Copy link
Contributor Author

LeSuisse commented May 1, 2024

Oh yeah you are right let's upgrade to 1.26.2 instead. Since I saw it mentioned in the 1.28.0 changes I missed it was also included in 1.26.2 👍

@LeSuisse LeSuisse closed this May 1, 2024
@LeSuisse LeSuisse deleted the emgrampa-CVE-2023-52138-23.11 branch May 1, 2024 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants