Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chromium: 98.0.4758.80 -> 98.0.4758.102 #160354

Merged
merged 1 commit into from Feb 16, 2022
Merged

chromium: 98.0.4758.80 -> 98.0.4758.102 #160354

merged 1 commit into from Feb 16, 2022

Conversation

primeos
Copy link
Member

@primeos primeos commented Feb 16, 2022

https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html

This update includes 11 security fixes. Google is aware of reports that
an exploit for CVE-2022-0609 exists in the wild.

CVEs:
CVE-2022-0603 CVE-2022-0604 CVE-2022-0605 CVE-2022-0606 CVE-2022-0607
CVE-2022-0608 CVE-2022-0609 CVE-2022-0610

Motivation for this change
Things done
  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 22.05 Release Notes (or backporting 21.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
    • (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes
  • Fits CONTRIBUTING.md.

@primeos primeos mentioned this pull request Feb 16, 2022
Closed
13 tasks
@primeos primeos linked an issue Feb 16, 2022 that may be closed by this pull request
Chrome <98.0.4758.102 being exploited in the wild (CVE-2022-0609) #160338
Closed
@primeos primeos merged commit 5d7a973 into NixOS:master Feb 16, 2022
@github-actions github-actions bot mentioned this pull request Feb 16, 2022
Merged
1 task
@github-actions
Copy link
Contributor

Successfully created backport PR #160362 for release-21.11.

@bobvanderlinden
Copy link
Member

bobvanderlinden commented Feb 18, 2022 •
edited

This still hasn't landed in nixos-unstable nor nixpkgs-unstable. Hydra seems to be stuck on iso_gnome.x86_64-linux. What can be done about this?

Rollout status of this PR: https://nixpk.gs/pr-tracker.html?pr=160354

This is being worked on here: #159612

@nixos-discourse
Copy link

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/what-should-the-hydra-output-size-limit-be/17761/4

@bobvanderlinden bobvanderlinden mentioned this pull request Feb 18, 2022
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
1.severity: security 10.rebuild-darwin: 1-10 10.rebuild-linux: 1-10
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Chrome <98.0.4758.102 being exploited in the wild (CVE-2022-0609)
3 participants
@primeos @bobvanderlinden @nixos-discourse