Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: e970627a7126
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: de83c2da167d
Choose a head ref
  • 2 commits
  • 1 file changed
  • 2 contributors

Commits on Apr 29, 2020

  1. coturn: apply patch for CVE-2020-6061/6062 

    Fixes: CVE-2020-6061, CVE-2020-6062

An exploitable heap overflow vulnerability exists in the way CoTURN
4.5.1.1 web server parses POST requests. A specially crafted HTTP
POST request can lead to information leaks and other misbehavior.
An attacker needs to send an HTTPS request to trigger this vulnerability.

An exploitable denial-of-service vulnerability exists in the way
CoTURN 4.5.1.1 web server parses POST requests. A specially crafted
HTTP POST request can lead to server crash and denial of service.
An attacker needs to send an HTTP request to trigger this vulnerability.
    @mweinelt
    mweinelt committed Apr 29, 2020
    Copy the full SHA
    704a018 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #86268 from mweinelt/coturn/CVE-2020-6061+6062 

    coturn: apply patch for CVE-2020-6061/6062
    @rasendubi
    rasendubi committed Apr 29, 2020
    Copy the full SHA
    de83c2d View commit details
    Browse the repository at this point in the history