Skip to content

Conversation

@emilylange
Copy link
Member

https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html

This update includes 16 security fixes.

CVEs:
CVE-2025-0434 CVE-2025-0435 CVE-2025-0436 CVE-2025-0437 CVE-2025-0438 CVE-2025-0439 CVE-2025-0440 CVE-2025-0441 CVE-2025-0442 CVE-2025-0443 CVE-2025-0446 CVE-2025-0447 CVE-2025-0448

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

@emilylange emilylange added 1.severity: security Issues which raise a security issue, or PRs that fix one backport release-24.11 labels Jan 15, 2025
@emilylange emilylange closed this Jan 15, 2025
@emilylange emilylange reopened this Jan 15, 2025
@nix-owners nix-owners bot requested a review from networkException January 15, 2025 16:15
@github-actions github-actions bot added 10.rebuild-darwin: 1-10 This PR causes between 1 and 10 packages to rebuild on Darwin. 10.rebuild-linux: 11-100 This PR causes between 11 and 100 packages to rebuild on Linux. labels Jan 15, 2025
@emilylange
Copy link
Member Author

emilylange commented Jan 15, 2025

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review pr 374093


x86_64-linux

⏩ 7 packages marked as broken and skipped:
  • archivebox
  • archivebox.dist
  • flaresolverr
  • froide
  • froide.dist
  • python312Packages.froide
  • python312Packages.froide.dist
❌ 4 packages failed to build:
  • python312Packages.django-filingcabinet
  • python312Packages.django-filingcabinet.dist
  • python313Packages.django-filingcabinet
  • python313Packages.django-filingcabinet.dist
✅ 37 packages built:
  • authentik
  • aws-azure-login
  • chromedriver
  • chromium
  • chromium.sandbox
  • decktape
  • fast-cli
  • google-lighthouse
  • gotenberg
  • grafana-kiosk
  • mermaid-cli
  • mermaid-filter
  • percollate
  • pinnwand
  • pinnwand.dist
  • playwright-test
  • puppeteer-cli
  • python312Packages.great-tables
  • python312Packages.great-tables.dist
  • python312Packages.pytest-playwright
  • python312Packages.pytest-playwright.dist
  • python312Packages.shiny
  • python312Packages.shiny.dist
  • python313Packages.great-tables
  • python313Packages.great-tables.dist
  • python313Packages.pytest-playwright
  • python313Packages.pytest-playwright.dist
  • python313Packages.shiny
  • python313Packages.shiny.dist
  • selendroid
  • selenium-server-standalone
  • sharedown
  • single-file-cli
  • sitespeed-io
  • undetected-chromedriver
  • vhs
  • wayback

cc @onny, django-filingcabinet's checkPhasefails with:

[err] Old Headless mode has been removed from the Chrome binary. Please use the new Headless mode (https://developer.chrome.com/docs/chromium/new-headless) or the chrome-headless-shell which is a standalone implementation of the old Headless mode (https://developer.chrome.com/blog/chrome-headless-shell).

@emilylange emilylange merged commit d33cdef into NixOS:master Jan 15, 2025
27 of 31 checks passed
@emilylange emilylange deleted the chromium branch January 15, 2025 16:45
@nixpkgs-ci
Copy link
Contributor

nixpkgs-ci bot commented Jan 15, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 10.rebuild-darwin: 1-10 This PR causes between 1 and 10 packages to rebuild on Darwin. 10.rebuild-linux: 11-100 This PR causes between 11 and 100 packages to rebuild on Linux.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant