Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

openjpeg: fix for CVE-2018-18088 #51104

Closed
wants to merge 1 commit into from
Closed

openjpeg: fix for CVE-2018-18088 #51104

wants to merge 1 commit into from

Conversation

periklis
Copy link
Contributor

Motivation for this change

Addresses advisory #51100

cc @codyopel

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
  • Built on platform(s)
    • NixOS
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Assured whether relevant documentation is up to date
  • Fits CONTRIBUTING.md.

@c0bw3b c0bw3b added the 9.needs: port to stable A PR needs a backport to the stable release. label Nov 27, 2018
@markuskowa
Copy link
Member

@GrahamcOfBorg build openjpeg

@c0bw3b
Copy link
Contributor

c0bw3b commented Dec 5, 2018

The same commit also addresses CVE-2017-17480

@Ekleog
Copy link
Member

Ekleog commented Dec 8, 2018

@periklis Thank you! I've cherry-picked in a4700aa (and renamed the patch so that the other CVE addressed by it will be handled properly by vulnix), and backported in b3aff3a.

@Ekleog Ekleog closed this Dec 8, 2018
@Ekleog Ekleog mentioned this pull request Dec 8, 2018
Closed
1 task
@TredwellGit TredwellGit added 8.has: port to stable A PR already has a backport to the stable release. and removed 9.needs: port to stable A PR needs a backport to the stable release. labels Aug 20, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@c0bw3b c0bw3b c0bw3b left review comments

@markuskowa markuskowa markuskowa approved these changes

Assignees
No one assigned
Labels
1.severity: security 8.has: port to stable A PR already has a backport to the stable release. 10.rebuild-darwin: 101-500 10.rebuild-linux: 501+
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
6 participants
@periklis @markuskowa @c0bw3b @Ekleog @GrahamcOfBorg @TredwellGit