Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

backport: tor-browser-bundle-bin: 8.5.5 -> 9.0.1 #73147

Closed
wants to merge 7 commits into from
Closed

backport: tor-browser-bundle-bin: 8.5.5 -> 9.0.1 #73147

wants to merge 7 commits into from

Conversation

hax404
Copy link
Contributor

@hax404 hax404 commented Nov 9, 2019

Motivation for this change

Version Update. This pull request cherry-picks 773fc55 and backports #73146 to release-19.09

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
  • Built on platform(s)
    • NixOS (32 and 64bit)
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Ensured that relevant documentation is up to date
  • Fits CONTRIBUTING.md.
Notify maintainers

cc @offline @matejc @doublec @thoughtpolice @joachifm

@hax404 hax404 changed the title backport: tor-browser-bundle-bin: 9.0 -> 9.0.1 backport: tor-browser-bundle-bin: 8.5.5 -> 9.0.1 Nov 9, 2019
@joachifm
Copy link
Contributor

9.0 has already been backported.

delroth and others added 7 commits November 13, 2019 14:30
@delroth @hax404
libtiff: patch for CVE-2019-6128, CVE-2019-14973
952aafc 
CVE-2019-14973.patch is a manually backported of the upstream patch to
work around some minor merge conflicts.

(cherry picked from commit a2e1da7)
@d-goldin @hax404
sqlite: fixing cve patch name
ce6136f 
To make vulnix and similar tooling recognize the patch
correctly.
@delroth @hax404
gst-plugins-base: apply patch for CVE-2019-9928
2d56259 
(cherry-picked from a92c42d and 832f46a)
Fixes NixOS#70097, closes PR NixOS#70284.
@vcunat @hax404
Merge NixOS#72054: gdal: add patch for CVE-2019-17545
e6fdae9 
(cherry picked from commit 019fcab)
@JohnAZoidberg @hax404
libtiff: Patch CVE-2019-7663 (PR NixOS#72092)
92ffb5e 
(cherry picked from commit 5270c3a)
@hax404
tor-browser-bundle-bin: 9.0 -> 9.0.1
0166452
@hax404
tor-browser-bundle-bin: add hax404 to contributors
10011a8
@hax404
Copy link
Contributor Author

hax404 commented Nov 13, 2019 •
edited

I close this and recreate a new clean pull request. Sorry for the noise.

@hax404 hax404 closed this Nov 13, 2019
@hax404 hax404 deleted the release-19.09 branch November 13, 2019 13:34
@hax404 hax404 mentioned this pull request Nov 13, 2019
Closed
10 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
10.rebuild-darwin: 0 10.rebuild-linux: 0
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
6 participants
@hax404 @joachifm @delroth @d-goldin @vcunat @JohnAZoidberg