Skip to content
This repository has been archived by the owner on Apr 12, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs-channels
base: a7ceb2536ab1
Choose a base ref
...
head repository: NixOS/nixpkgs-channels
compare: 3f1f251422cf
Choose a head ref
  • 17 commits
  • 14 files changed
  • 9 contributors

Commits on Apr 29, 2020

  1. chromium: 81.0.4044.122 -> 81.0.4044.129 

    https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_27.html

This update includes 2 security fixes.

CVEs: CVE-2020-6462 CVE-2020-6461
(cherry picked from commit db4aece)
    @primeos
    primeos committed Apr 29, 2020
    Copy the full SHA
    4b39bb8 View commit details
    Browse the repository at this point in the history

  2. coturn: apply patch for CVE-2020-6061/6062 

    Fixes: CVE-2020-6061, CVE-2020-6062

An exploitable heap overflow vulnerability exists in the way CoTURN
4.5.1.1 web server parses POST requests. A specially crafted HTTP
POST request can lead to information leaks and other misbehavior.
An attacker needs to send an HTTPS request to trigger this vulnerability.

An exploitable denial-of-service vulnerability exists in the way
CoTURN 4.5.1.1 web server parses POST requests. A specially crafted
HTTP POST request can lead to server crash and denial of service.
An attacker needs to send an HTTP request to trigger this vulnerability.

(cherry picked from commit 704a018)
    @mweinelt
    mweinelt committed Apr 29, 2020
    Copy the full SHA
    ac3ed15 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #86271 from mweinelt/19.09/coturn/CVE-2020-6061+6062 

    [19.09] coturn: apply patch for CVE-2020-6061/6062
    @rasendubi
    rasendubi committed Apr 29, 2020
    Copy the full SHA
    1d06d40 View commit details
    Browse the repository at this point in the history

  4. monotone: openssl in botan is not needed, so drop to avoid old openssl 

    (cherry picked from commit 4644776)
    @7c6f434c
    7c6f434c committed Apr 29, 2020
    Copy the full SHA
    e27493e View commit details
    Browse the repository at this point in the history

  5. Merge pull request #86340 from 7c6f434c/monotone-no-botan-openssl-19.09 

    monotone: openssl in botan is not needed, so drop to avoid old openssl
    @7c6f434c
    7c6f434c committed Apr 29, 2020
    Copy the full SHA
    511766d View commit details
    Browse the repository at this point in the history

  6. roundcube: 1.3.10 -> 1.3.11 

    https://github.com/roundcube/roundcubemail/releases/tag/1.3.11

This contains some important security fixes, hence the package-bump.
    @Ma27
    Ma27 committed Apr 29, 2020
    Copy the full SHA
    87819f9 View commit details
    Browse the repository at this point in the history

Commits on Apr 30, 2020

  1. Merge pull request #86297 from primeos/chromium-backport 

    [19.09] chromium: 81.0.4044.122 -> 81.0.4044.129 (backport)
    @primeos
    primeos committed Apr 30, 2020
    Copy the full SHA
    322fd89 View commit details
    Browse the repository at this point in the history

Commits on May 1, 2020

  1. gitaly: 12.8.9 -> 12.8.10 

    (cherry picked from commit 9eb6dc7)
    @flokli @talyz
    flokli authored and talyz committed May 1, 2020
    Copy the full SHA
    24d07de View commit details
    Browse the repository at this point in the history

  2. gitlab: 12.8.9 -> 12.8.10 

    (cherry picked from commit fdd0d0d)
    @flokli @talyz
    flokli authored and talyz committed May 1, 2020
    Copy the full SHA
    a73c7cb View commit details
    Browse the repository at this point in the history

  3. Merge pull request #86461 from talyz/19.09-gitlab-12.8.10 

    [19.09] gitlab: 12.8.9 -> 12.8.10
    @flokli
    flokli committed May 1, 2020
    Copy the full SHA
    85f3b47 View commit details
    Browse the repository at this point in the history

Commits on May 3, 2020

  1. salt: 2019.2.0 -> 2019.2.4 

    Fixes CVE-2020-11651 and CVE-2020-11652
    @Flakebi
    Flakebi committed May 3, 2020
    Copy the full SHA
    7da8a5a View commit details
    Browse the repository at this point in the history

  2. Merge pull request #86651 from Flakebi/salt-19.09 

    [19.09] salt: 2019.2.0 -> 2019.2.4
    @bhipple
    bhipple committed May 3, 2020
    Copy the full SHA
    4f820be View commit details
    Browse the repository at this point in the history

Commits on May 4, 2020

  1. nss_3_52: 3.51 -> 3.52

    @andir
    andir committed May 4, 2020
    Copy the full SHA
    0fa8e3c View commit details
    Browse the repository at this point in the history

  2. firefox: 75.0 -> 76.0 

    (cherry picked from commit 324e40f)
    @andir
    andir committed May 4, 2020
    Copy the full SHA
    72212cb View commit details
    Browse the repository at this point in the history

  3. firefox-bin: 75.0 -> 76.0 

    (cherry picked from commit 3911336)
    @andir
    andir committed May 4, 2020
    Copy the full SHA
    26316a2 View commit details
    Browse the repository at this point in the history

  4. firefox-esr-68: 68.7.0esr -> 68.8.0esr 

    (cherry picked from commit f3cc8dc)
    @andir
    andir committed May 4, 2020
    Copy the full SHA
    8f570a3 View commit details
    Browse the repository at this point in the history

Commits on May 5, 2020

  1. Merge pull request #86811 from andir/19.09/firefox76 

    [19.09] firefox: 75.0 -> 76.0
    @andir
    andir committed May 5, 2020
    Copy the full SHA
    3f1f251 View commit details
    Browse the repository at this point in the history