-
-
Notifications
You must be signed in to change notification settings - Fork 15.5k
[staging-20.09] shadow: 4.8 -> 4.8.1 #102992
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[staging-20.09] shadow: 4.8 -> 4.8.1 #102992
Conversation
this is a mass rebuild, please target
then change target branch |
Sorry - I'm git impaired :/ |
please do |
|
ah, you cloned from your fork:
should work |
https://nvd.nist.gov/vuln/detail/CVE-2019-19882 (cherry picked from commit 17d4902)
6055c39
to
ad28728
Compare
Okay - I think we're good now? Thanks for your due diligence. |
git history looks good now |
This likely wont get merged until the current staging-20.09 gets merged |
@GrahamcOfBorg eval shouldn't have "package new" |
@jonringer Hydra is not picking up on the new build timeout for GHC, blocking staging-20.09. A mass rebuild may be exactly what we need, so we get a new hash, therefore a new "Build" and possibly an increased timeout. See also NixOS/hydra#830 |
https://nvd.nist.gov/vuln/detail/CVE-2019-19882
(cherry picked from commit 17d4902)
Motivation for this change
Addresses: #88398 - CVE-2019-19882
Things done
sandbox
innix.conf
on non-NixOS linux)nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
./result/bin/
)nix path-info -S
before and after)