Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: dce33f1a2d49
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: 107ffbb22ad7
Choose a head ref
  • 8 commits
  • 5 files changed
  • 3 contributors

Commits on Jan 30, 2020

  1. cpio: 2.12 -> 2.13 

    See https://lists.gnu.org/archive/html/info-gnu/2019-11/msg00002.html
for release information.

Fixes CVE-2019-14866
    @lsix @wamserma
    lsix authored and wamserma committed Jan 30, 2020
    Copy the full SHA
    16ff9f6 View commit details
    Browse the repository at this point in the history

Commits on Mar 15, 2020

  1. Merge #78736: cpio: 2.12 -> 2.13 (into staging-19.09) 

    fix CVE-2019-14866, backport
    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    c26a26d View commit details
    Browse the repository at this point in the history

  2. Merge branch 'staging-19.09' into release-19.09 

    (Older version finished on Hydra.)
    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    686362c View commit details
    Browse the repository at this point in the history

  3. Merge branch 'release-19.09' into staging-19.09

    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    0c2b734 View commit details
    Browse the repository at this point in the history

  4. libssh: 0.8.7 -> 0.8.8 

    Fixes CVE-2019-14889, issue #77264.
Release notes: https://www.libssh.org/2019/12/10/libssh-0-9-3-and-libssh-0-8-8-security-release/

(cherry picked from commit 7ef8a42)
    @mmilata @vcunat
    mmilata authored and vcunat committed Mar 15, 2020
    Copy the full SHA
    45f415a View commit details
    Browse the repository at this point in the history

  5. lz4: 1.9.1 -> 1.9.2 (PR #82437) 

    Fixes: https://nvd.nist.gov/vuln/detail/CVE-2019-17543
Release notes: https://github.com/lz4/lz4/releases/tag/v1.9.2

(cherry picked from commit 18ac6ba)
    @mmilata @vcunat
    mmilata authored and vcunat committed Mar 15, 2020
    Copy the full SHA
    cdd33cb View commit details
    Browse the repository at this point in the history

  6. samba4: patch all remaining security issues 

    https://www.samba.org/samba/history/security.html
Tested: $ nix build -f nixos/release.nix tests.samba.x86_64-linux
    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    7d27cc8 View commit details
    Browse the repository at this point in the history

Commits on Mar 16, 2020

  1. Merge branch 'staging-19.09' into release-19.09 

    x86_64-linux rebuilds have finished, so let's merge
to get the security fixes early.
    @vcunat
    vcunat committed Mar 16, 2020
    Copy the full SHA
    107ffbb View commit details
    Browse the repository at this point in the history