Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

grafana: 6.1.4 -> 6.1.6 (security update) #60426

Merged
merged 1 commit into from Apr 29, 2019

Conversation

WilliButz
Copy link
Member

Motivation for this change

Recent patch release which includes a fix for CVE-2018-19039 as described here.

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
  • Built on platform(s)
    • NixOS (x86_64-linux & aarch64-linux)
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Assured whether relevant documentation is up to date
  • Fits CONTRIBUTING.md.

Needs to be backported to 19.03

/cc @samueldr @lheckemann

Includes security fix for CVE-2018-19039.
@WilliButz
Copy link
Member Author

@GrahamcOfBorg test grafana

@fpletz fpletz merged commit 51af103 into NixOS:master Apr 29, 2019
@WilliButz WilliButz deleted the grafana-security-update branch April 29, 2019 15:42
lheckemann pushed a commit that referenced this pull request Apr 29, 2019
Includes security fix for CVE-2018-19039.

(cherry picked from commit 5be7fd4)
@lheckemann
Copy link
Member

Backported: 61a9c2d

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants