Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 04be5b891198
Choose a base ref
...
head repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 298db02d7338
Choose a head ref
  • 2 commits
  • 1 file changed
  • 2 contributors

Commits on Oct 22, 2019

  1. pango: 1.43.0, backport CVE-2019-1010238 fix 

    There was a previous fix for this in
#71571

But some things, most notably pygtk, still rely on deprecated pango
APIs that are not available past 1.43, this backports the CVE
fix to this version.
    @d-goldin
    d-goldin committed Oct 22, 2019

    Verified

    This commit was signed with the committer’s verified signature.
    boesing Maximilian Bösing
    GPG key ID: 9A8988C93CEC81A3
    Verified
    Learn about vigilant mode
    Copy the full SHA
    9524bf3 View commit details

Commits on Oct 29, 2019

  1. Merge pull request #71687 from d-goldin/backport_cve_2019_1010238 

    pango: 1.43.0, backport CVE-2019-1010238 fix
    @7c6f434c
    7c6f434c authored Oct 29, 2019

    Verified

    This commit was signed with the committer’s verified signature.
    boesing Maximilian Bösing
    GPG key ID: 9A8988C93CEC81A3
    Verified
    Learn about vigilant mode
    Copy the full SHA
    298db02 View commit details
Showing with 5 additions and 0 deletions.
  1. +5 −0 pkgs/development/libraries/pango/default.nix
5 changes: 5 additions & 0 deletions pkgs/development/libraries/pango/default.nix
View file
Original file line number Diff line number Diff line change
@@ -42,6 +42,11 @@ in stdenv.mkDerivation rec {
url = "https://gitlab.gnome.org/GNOME/pango/commit/546f4c242d6f4fe312de3b7c918a848e5172e18d.patch";
sha256 = "1cqhy4xbwx3ad7z5d1ks7smf038b9as8c6qy84rml44h0fgiq4m2";
})
(fetchpatch {
# Fixes CVE-2019-1010238
url = "https://gitlab.gnome.org/GNOME/pango/commit/490f8979a260c16b1df055eab386345da18a2d54.diff";
sha256 = "001g3anvwghdrn3yfgi8cp64j0n3l0zwgiphc1izqg7zr76s87fk";
})
];

mesonFlags = [