Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

libraw: 0.20.0 -> 0.20.2 (CVE-2020-15365 CVE-2020-15503 CVE-2020-24890) #101508

Merged
merged 1 commit into from Oct 25, 2020
Merged

libraw: 0.20.0 -> 0.20.2 (CVE-2020-15365 CVE-2020-15503 CVE-2020-24890) #101508

merged 1 commit into from Oct 25, 2020

Conversation

TredwellGit
Copy link
Member

@jtojnar
Copy link
Contributor

jtojnar commented Oct 24, 2020

This does not seem to cause many rebuilds so it might as well go to master to propagate security fixes faster.

@jtojnar jtojnar added the 8.has: upstream changes reviewed Reviewer checked the changelogs/commit logs associated with the release and did not find any issues. label Oct 24, 2020
vcunat
vcunat approved these changes Oct 25, 2020
View reviewed changes
Copy link
Member

@vcunat vcunat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK, but I see no security fixes, really. The first two NVD entries link to versions before 0.20.0 release. The third is claimed not to be a bug in code.

vcunat added a commit that referenced this pull request Oct 25, 2020
@vcunat
Revert "Merge #101508: libraw: 0.20.0 -> 0.20.2"
c778945 
I'm sorry; I didn't notice it contained staging commits.

This reverts commit 17f5305, reversing
changes made to a8a018d.
vcunat pushed a commit that referenced this pull request Oct 25, 2020
@TredwellGit @vcunat
libraw: 0.20.0 -> 0.20.2
4effe76 
Reapplying the commit from PR #101508 merge, without staging changes.
(cherry picked from commit 0594e27)
@vcunat vcunat merged commit 17f5305 into NixOS:staging Oct 25, 2020
@TredwellGit TredwellGit deleted the libraw branch October 25, 2020 16:18
vcunat added a commit that referenced this pull request Oct 26, 2020
@vcunat
Re-Revert "Merge #101508: libraw: 0.20.0 -> 0.20.2"
336bc82 
This reverts commit c778945.

I believe this is exactly what brings the staging branch into
the right shape after the last merge from master (through staging-next);
otherwise part of staging changes would be lost
(due to being already reachable from master but reverted).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@SuperSandro2000 SuperSandro2000 SuperSandro2000 left review comments

@jtojnar jtojnar jtojnar approved these changes

@vcunat vcunat vcunat approved these changes

Assignees
No one assigned
Labels
8.has: upstream changes reviewed Reviewer checked the changelogs/commit logs associated with the release and did not find any issues. 10.rebuild-darwin: 11-100 10.rebuild-linux: 11-100
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
5 participants
@TredwellGit @jtojnar @vcunat @SuperSandro2000 @mweinelt