ciscoPacketTracer{7,8}: mark as vulnerable#456622
Merged
vcunat merged 2 commits intoNixOS:masterfrom Nov 14, 2025
Merged
Conversation
nixpkgs-ci
bot
added
10.rebuild-darwin: 0
gepbird
added
the
1.severity: security
nixpkgs-ci
bot
added
the
9.needs: reviewer
dotlambda
reviewed
Oct 29, 2025
dotlambda
reviewed
Oct 29, 2025
|
|
||
| ${lib.elemAt libsForQt5.qtwebengine.meta.knownVulnerabilities 0} | ||
| '' | ||
| ]; |
Member
There was a problem hiding this comment.
Actually why not
Suggested change
| ]; | |
| ] | |
| ++ libsForQt5.qtwebengine.meta.knownVulnerabilities; |
?
Contributor
Author
There was a problem hiding this comment.
Because it would list those vulnerabilities as separate entries, when they are just one:
Known issues:
- Cisco Packet Tracer 8 ships with qt5 qtwebengine.
- qt5 qtwebengine is unmaintained upstream since april 2025.
It is based on chromium 87.0.4280.144, and supposedly patched up to 135.0.7049.95 which is outdated.
Security issues are frequently discovered in chromium.
The following list of CVEs was fixed in the life cycle of chromium 138 and likely also affects qtwebengine:
- CVE-2025-8879
- CVE-2025-8880
...
It seems more logical to put them in one, but if this is preferred I'm happy to change it.
nixpkgs-ci
bot
removed
the
9.needs: reviewer
gepbird
force-pushed
the
feat/ciscoPacketTracer78/mark-as-vulnerable
branch
from
0891662 to
4f2ae8e
Compare
gepbird
force-pushed
the
feat/ciscoPacketTracer78/mark-as-vulnerable
branch
from
4f2ae8e to
ae20dc6
Compare
Contributor
|
Backport failed for Please cherry-pick the changes locally and resolve any conflicts. git fetch origin release-25.05
git worktree add -d .worktree/backport-456622-to-release-25.05 origin/release-25.05
cd .worktree/backport-456622-to-release-25.05
git switch --create backport-456622-to-release-25.05
git cherry-pick -x 6cfa812ea117c6dafd2fbf9926c745d8831cdd4f ae20dc63cd7cf23890cb16d3d39deaf1e1a55c4b |
13 tasks
mdaniels5757
added
8.has: port to stable
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes #452755 (comment).
This library can be seen in the fixup phase, it's coming from the .deb src:
Things done
passthru.tests.nixpkgs-reviewon this PR. See nixpkgs-review usage../result/bin/.Add a 👍 reaction to pull requests you find important.