Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[r19.09] python: ecdsa: 0.13.2 -> 0.13.3, addressing CVE-2019-14853 & CVE-2019-14859 #76655

Merged
merged 1 commit into from Dec 30, 2019
Merged

[r19.09] python: ecdsa: 0.13.2 -> 0.13.3, addressing CVE-2019-14853 & CVE-2019-14859 #76655

merged 1 commit into from Dec 30, 2019

Conversation

risicle
Copy link
Contributor

@risicle risicle commented Dec 29, 2019

Motivation for this change

https://nvd.nist.gov/vuln/detail/CVE-2019-14853
https://security-tracker.debian.org/tracker/CVE-2019-14859 (missing from NVD)

Rebuild is large - not attempting.

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
  • Built on platform(s)
    • NixOS
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Ensured that relevant documentation is up to date
  • Fits CONTRIBUTING.md.
Notify maintainers

cc @

@risicle risicle requested a review from FRidh as a code owner December 29, 2019 18:52
@ofborg ofborg bot requested a review from aszlig December 29, 2019 19:48
@risicle
Copy link
Contributor Author

risicle commented Dec 29, 2019

@GrahamcOfBorg build python27Packages.celery python37Packages.celery python27Packages.scapy python37Packages.scapy python27Packages.moto python37Packages.moto

@FRidh FRidh merged commit 5ff4ee5 into NixOS:release-19.09 Dec 30, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@aszlig aszlig aszlig approved these changes

@FRidh FRidh Awaiting requested review from FRidh FRidh is a code owner

Assignees
No one assigned
Labels
1.severity: security 6.topic: python 10.rebuild-darwin: 101-500 10.rebuild-linux: 101-500
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
4 participants
@risicle @aszlig @veprbl @FRidh