Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: 1be338cd48f9
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: 8b5aa550846b
Choose a head ref
  • 12 commits
  • 11 files changed
  • 8 contributors

Commits on Oct 26, 2019

  1. libpcap: 1.9.0 -> 1.9.1 (security!) 

    http://www.tcpdump.org/libpcap-changes.txt

> Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
> Fixes for CVE-2018-16301,

Drop the included patch as well.

(cherry picked from commit 4db088d)
    @dtzWill @risicle
    dtzWill authored and risicle committed Oct 26, 2019
    Copy the full SHA
    ae7bd2b View commit details
    Browse the repository at this point in the history

  2. tcpdump: 4.9.2 -> 4.9.3 (security!) 

    So many CVE's, see:

http://www.tcpdump.org/tcpdump-changes.txt
(cherry picked from commit dd42253)
    @dtzWill @risicle
    dtzWill authored and risicle committed Oct 26, 2019
    Copy the full SHA
    6e02204 View commit details
    Browse the repository at this point in the history

Commits on Nov 11, 2019

  1. libxslt: add patch for CVE-2019-18197

    @risicle
    risicle committed Nov 11, 2019
    Copy the full SHA
    87acfb3 View commit details
    Browse the repository at this point in the history

Commits on Nov 13, 2019

  1. Merge pull request #73245 from risicle/ris-libxslt-CVE-2019-18197-r19.09 

    [r19.09] libxslt: add patch for CVE-2019-18197
    @flokli
    flokli committed Nov 13, 2019
    Copy the full SHA
    bf802b9 View commit details
    Browse the repository at this point in the history

Commits on Nov 14, 2019

  1. Merge branch 'release-19.09' into staging-19.09

    @vcunat
    vcunat committed Nov 14, 2019
    Copy the full SHA
    d5e9573 View commit details
    Browse the repository at this point in the history

Commits on Nov 15, 2019

  1. Merge pull request #72028 from risicle/ris-tcpdump-4.9.3-r19.09 

    [19.09] libpcap: 1.9.0 -> 1.9.1, tcpdump: 4.9.2 -> 4.9.3 for many security fixes
    Christian Kauhaus committed Nov 15, 2019
    Copy the full SHA
    e1cc8ff View commit details
    Browse the repository at this point in the history

Commits on Nov 19, 2019

  1. ilmbase-2.3.0: CVE-2018-18443, openexr: CVE-2018-18444 

    (cherry picked from commit 448d8e0)
(cherry picked from commit f58ba3c)
    Christian Kauhaus committed Nov 19, 2019
    Copy the full SHA
    725a454 View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2019

  1. darwin.CF: workaround intermittent CFRuntime.c failures 

    Based on testing this issue seems to only occur with clang_7, so
we should be able to revert this when the default llvm versions are
updated.

Fixes #66811

(cherry picked from commit 41ca861)
    @LnL7 @FRidh
    LnL7 authored and FRidh committed Nov 21, 2019
    Copy the full SHA
    6783219 View commit details
    Browse the repository at this point in the history

  2. Merge release-19.09 into staging-19.09

    @FRidh
    FRidh committed Nov 21, 2019
    Copy the full SHA
    d58f553 View commit details
    Browse the repository at this point in the history

  3. libmad: fix three CVE from 2017 

    * add patch for CVE-2017-8372 and CVE-2017-8373
* add patch for CVE-2017-8374
* add patch for x86_64 platforms
* fetch existing patches from remote sources

Backport of #73234
(cherry picked from commit 92edb06)
    @c0bw3b
    c0bw3b committed Nov 21, 2019
    Copy the full SHA
    b51f069 View commit details
    Browse the repository at this point in the history

  4. mpg321: fix CVE-2018-7263 

    Close #57154
Close #70105

Backport of #73234
(cherry picked from commit 1289606)
    @c0bw3b
    c0bw3b committed Nov 21, 2019
    Copy the full SHA
    c5c326e View commit details
    Browse the repository at this point in the history

Commits on Nov 22, 2019

  1. Merge staging-19.09 into release-19.09

    @FRidh
    FRidh committed Nov 22, 2019
    Copy the full SHA
    8b5aa55 View commit details
    Browse the repository at this point in the history