Skip to content
This repository has been archived by the owner on Apr 12, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs-channels
base: f05c380a51da
Choose a base ref
...
head repository: NixOS/nixpkgs-channels
compare: 8f9022789211
Choose a head ref
  • 16 commits
  • 13 files changed
  • 11 contributors

Commits on Nov 1, 2020

  1. openldap: add patch to fix unauthenticated nullptr dereference in slapd 

    This vulnerability does not have a CVE yet.

https://security-tracker.debian.org/tracker/TEMP-0000000-DD4835
https://bugs.openldap.org/show_bug.cgi?id=9370
(cherry picked from commit 307abd9)
    @mweinelt
    mweinelt committed Nov 1, 2020
    Copy the full SHA
    3b3b0d5 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #102371 from mweinelt/20.03/openldap 

    [staging-20.03] openldap: add patch to fix unauthenticated nullptr dereference in slapd
    @Mic92
    Mic92 committed Nov 1, 2020
    Copy the full SHA
    c3d544e View commit details
    Browse the repository at this point in the history

Commits on Nov 5, 2020

  1. balsa: 2.5.9 -> 2.5.11

    @redvers
    redvers committed Nov 5, 2020
    Copy the full SHA
    32d313f View commit details
    Browse the repository at this point in the history

Commits on Nov 19, 2020

  1. linux: 4.14.206 -> 4.14.207

    @NeQuissimus
    NeQuissimus committed Nov 19, 2020
    Copy the full SHA
    b88fbf2 View commit details
    Browse the repository at this point in the history

  2. linux: 4.19.157 -> 4.19.158

    @NeQuissimus
    NeQuissimus committed Nov 19, 2020
    Copy the full SHA
    31cf3b3 View commit details
    Browse the repository at this point in the history

  3. linux: 4.4.243 -> 4.4.244

    @NeQuissimus
    NeQuissimus committed Nov 19, 2020
    Copy the full SHA
    60003aa View commit details
    Browse the repository at this point in the history

  4. linux: 4.9.243 -> 4.9.244

    @NeQuissimus
    NeQuissimus committed Nov 19, 2020
    Copy the full SHA
    7fc57f2 View commit details
    Browse the repository at this point in the history

  5. linux: 5.4.77 -> 5.4.78

    @NeQuissimus
    NeQuissimus committed Nov 19, 2020
    Copy the full SHA
    d488daf View commit details
    Browse the repository at this point in the history

  6. Merge release-20.03 into staging-20.03

    @FRidh
    FRidh committed Nov 19, 2020
    Copy the full SHA
    d9d65c6 View commit details
    Browse the repository at this point in the history

  7. openldap: apply security patches 

    Fixes: CVE-2020-25692, CVE-2020-25709, CVE-2020-25710
    @mweinelt @FRidh
    mweinelt authored and FRidh committed Nov 19, 2020
    Copy the full SHA
    864a73b View commit details
    Browse the repository at this point in the history

Commits on Nov 20, 2020

  1. chromium: 86.0.4240.198 -> 87.0.4280.66 

    https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_17.html

This update includes 33 security fixes.

CVEs:
CVE-2020-16018 CVE-2020-16019 CVE-2020-16020 CVE-2020-16021
CVE-2020-16022 CVE-2020-16015 CVE-2020-16014 CVE-2020-16023
CVE-2020-16024 CVE-2020-16025 CVE-2020-16026 CVE-2020-16027
CVE-2020-16028 CVE-2020-16029 CVE-2020-16030 CVE-2019-8075
CVE-2020-16031 CVE-2020-16032 CVE-2020-16033 CVE-2020-16034
CVE-2020-16035 CVE-2020-16012 CVE-2020-16036

Note: We'll finally build with use_ozone=true on Hydra now :) \o/
(cherry picked from commit 54673b1)
Backport of #104100.
    @primeos
    primeos committed Nov 20, 2020
    Copy the full SHA
    7deaa01 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #102866 from redvers/update_balsa_2.5.9_to_balsa_2… 

    ….5.11

balsa: 2.5.9 -> 2.5.11 [20.03]
    Christian Kauhaus committed Nov 20, 2020
    Copy the full SHA
    6d27bb8 View commit details
    Browse the repository at this point in the history

  3. neomutt: apply patch to mitigate CVE-2020-28896 

    See https://github.com/neomutt/neomutt/releases/tag/20201120 &
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28896 for
further information.

It seems as `neomutt` (and also `mutt`) had an improper handling of
broken IMAP connections and thus a risk of leaking sensitive
information. The relevant patch can be found at
neomutt/neomutt@9c36717
    @Ma27
    Ma27 committed Nov 20, 2020
    Copy the full SHA
    c2967ae View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2020

  1. Merge pull request #104362 from NixOS/staging-20.03 

    Merge staging-20.03 into release-20.03
    @FRidh
    FRidh committed Nov 21, 2020
    Copy the full SHA
    fdcd102 View commit details
    Browse the repository at this point in the history

  2. opencv3, opencv4: use openblasCompat 

    without master's fix in #83888, opencv3 & opencv4 end up with an 8-byte
openblas, which it does work with. however this causes the python
bindings to also end up with an 8-byte openblas, which numpy doesn't work
with. force 4-byte openblas for opencv.
    @risicle @FRidh
    risicle authored and FRidh committed Nov 21, 2020
    Copy the full SHA
    8fdb672 View commit details
    Browse the repository at this point in the history

  3. glfw: 3.3.1 -> 3.3.2 

    (cherry picked from commit ebb3d1a)
    @mmilata @FRidh
    mmilata authored and FRidh committed Nov 21, 2020
    Copy the full SHA
    8f90227 View commit details
    Browse the repository at this point in the history