Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

iptables: CVE-2019-11360 (release-19.03) #65662

Closed
wants to merge 1 commit into from
Closed

iptables: CVE-2019-11360 (release-19.03) #65662

wants to merge 1 commit into from

Conversation

mmahut
Copy link
Member

@mmahut mmahut commented Jul 31, 2019 •
edited

Motivation for this change

Fixes #65647.

We need to discuss whatever back-porting this makes sense at this severity.

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
  • Built on platform(s)
    • NixOS
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Ensured that relevant documentation is up to date
  • Fits CONTRIBUTING.md.
Notify maintainers

cc @fpletz

@ofborg ofborg bot requested a review from fpletz July 31, 2019 14:52
@FRidh FRidh changed the base branch from release-19.03 to staging-19.03 August 3, 2019 05:55
@FRidh FRidh changed the base branch from staging-19.03 to release-19.03 August 3, 2019 05:56
@FRidh
Copy link
Member

FRidh commented Aug 3, 2019

Pushed bf9684327735cb6841623849806fcdb91ae9b9a3 to staging-19.03.

@FRidh FRidh closed this Aug 3, 2019
@vcunat
Copy link
Member

vcunat commented Aug 3, 2019

@FRidh: I can't see anything like this pushed.

vcunat pushed a commit that referenced this pull request Aug 3, 2019
@mmahut @vcunat
iptables: CVE-2019-11360 (release-19.03, PR #65662)
fe419b6 
Fixes #65647
@vcunat
Copy link
Member

vcunat commented Aug 3, 2019

Anyway, let me push it before forgetting again: fe419b6

@FRidh
Copy link
Member

FRidh commented Aug 3, 2019

Good you've noticed this, thanks!

@vcunat
Copy link
Member

vcunat commented Aug 3, 2019 •
edited

:-) It tipped me off that GitHub didn't linkify the hash (in my e-mail, too).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@fpletz fpletz Awaiting requested review from fpletz

@Phreedom Phreedom Awaiting requested review from Phreedom

@Fuuzetsu Fuuzetsu Awaiting requested review from Fuuzetsu

@AndersonTorres AndersonTorres Awaiting requested review from AndersonTorres

@bluescreen303 bluescreen303 Awaiting requested review from bluescreen303

Assignees
No one assigned
Labels
1.severity: security 10.rebuild-darwin: 101-500 10.rebuild-linux: 501+ 10.rebuild-linux: 5001+
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
4 participants
@mmahut @FRidh @vcunat @lheckemann