Skip to content
This repository has been archived by the owner on Apr 12, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs-channels
base: fe4a40a782ac
Choose a base ref
...
head repository: NixOS/nixpkgs-channels
compare: f00d6dfbc685
Choose a head ref
  • 3 commits
  • 2 files changed
  • 3 contributors

Commits on Apr 29, 2020

  1. coturn: apply patch for CVE-2020-6061/6062 

    Fixes: CVE-2020-6061, CVE-2020-6062

An exploitable heap overflow vulnerability exists in the way CoTURN
4.5.1.1 web server parses POST requests. A specially crafted HTTP
POST request can lead to information leaks and other misbehavior.
An attacker needs to send an HTTPS request to trigger this vulnerability.

An exploitable denial-of-service vulnerability exists in the way
CoTURN 4.5.1.1 web server parses POST requests. A specially crafted
HTTP POST request can lead to server crash and denial of service.
An attacker needs to send an HTTP request to trigger this vulnerability.

(cherry picked from commit 704a018)
    @mweinelt
    mweinelt committed Apr 29, 2020
    Copy the full SHA
    142060c View commit details
    Browse the repository at this point in the history

  2. Merge pull request #86270 from mweinelt/20.03/coturn/CVE-2020-6061+6062 

    [20.03] coturn: apply patch for CVE-2020-6061/6062
    @rasendubi
    rasendubi committed Apr 29, 2020
    Copy the full SHA
    2a7c7cb View commit details
    Browse the repository at this point in the history

  3. Revert "st: copy config file in 'prePatch' instead of 'preBuild'" 

    Also change the custom config generation to the postPatch phase.

(cherry picked from commit 50b213a)
    @geistesk @Mic92
    geistesk authored and Mic92 committed Apr 29, 2020
    Copy the full SHA
    f00d6df View commit details
    Browse the repository at this point in the history