munin: 2.0.30 -> 2.0.33; for CVE-2017-6188 #24182
Conversation
vcunat
added
1.severity: security
8.has: package (update)
9.needs: community feedback
9.needs: port to stable
|
@domenkozar I think |
|
I tested the service manually on unstable, somebody who can test it in 16.09? |
|
ping maintainers: @domenkozar or @bjornfor do you have a chance to tests this on 16.09? |
|
@Mic92: This doesn't apply cleanly on release-16.09: we need to cherry-pick a couple of other munin commits before this one. I can test / backport to release-16.09 after this gets merged to master. |
|
@bjornfor here we go. |
|
@Mic92: Building my system on release-17.03 now. (First backporting to release-17.03, then 16.09) |
|
Applied to release-17.03 and release-16.09. I ran the NixOS test for munin (nixos/tests/munin.nix) and also tested both branches manually by looking at the log (nothing suspicious) and that it produces graphs (in my browser). |
|
@bjornfor thanks |
samueldr
removed
the
9.needs: port to stable
Motivation for this change
Update;
Also to fix CVE: NixOS/security#36
Upstream Bug:
munin-monitoring/munin#721
Please test, as I am unsure how this app/program works
Things done
(nix.useSandbox on NixOS,
or option
build-use-sandboxinnix.confon non-NixOS)
nix-shell -p nox --run "nox-review wip"./result/bin/)