Skip to content
This repository has been archived by the owner on Apr 12, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs-channels
base: dce33f1a2d49
Choose a base ref
...
head repository: NixOS/nixpkgs-channels
compare: 8d7fd7e3f40b
Choose a head ref
  • 10 commits
  • 6 files changed
  • 4 contributors

Commits on Jan 30, 2020

  1. cpio: 2.12 -> 2.13 

    See https://lists.gnu.org/archive/html/info-gnu/2019-11/msg00002.html
for release information.

Fixes CVE-2019-14866
    @lsix @wamserma
    lsix authored and wamserma committed Jan 30, 2020
    Copy the full SHA
    16ff9f6 View commit details
    Browse the repository at this point in the history

Commits on Mar 15, 2020

  1. Merge #78736: cpio: 2.12 -> 2.13 (into staging-19.09) 

    fix CVE-2019-14866, backport
    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    c26a26d View commit details
    Browse the repository at this point in the history

  2. Merge branch 'staging-19.09' into release-19.09 

    (Older version finished on Hydra.)
    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    686362c View commit details
    Browse the repository at this point in the history

  3. Merge branch 'release-19.09' into staging-19.09

    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    0c2b734 View commit details
    Browse the repository at this point in the history

  4. libssh: 0.8.7 -> 0.8.8 

    Fixes CVE-2019-14889, issue #77264.
Release notes: https://www.libssh.org/2019/12/10/libssh-0-9-3-and-libssh-0-8-8-security-release/

(cherry picked from commit 7ef8a42)
    @mmilata @vcunat
    mmilata authored and vcunat committed Mar 15, 2020
    Copy the full SHA
    45f415a View commit details
    Browse the repository at this point in the history

  5. lz4: 1.9.1 -> 1.9.2 (PR #82437) 

    Fixes: https://nvd.nist.gov/vuln/detail/CVE-2019-17543
Release notes: https://github.com/lz4/lz4/releases/tag/v1.9.2

(cherry picked from commit 18ac6ba)
    @mmilata @vcunat
    mmilata authored and vcunat committed Mar 15, 2020
    Copy the full SHA
    cdd33cb View commit details
    Browse the repository at this point in the history

  6. samba4: patch all remaining security issues 

    https://www.samba.org/samba/history/security.html
Tested: $ nix build -f nixos/release.nix tests.samba.x86_64-linux
    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    7d27cc8 View commit details
    Browse the repository at this point in the history

Commits on Mar 16, 2020

  1. Merge branch 'staging-19.09' into release-19.09 

    x86_64-linux rebuilds have finished, so let's merge
to get the security fixes early.
    @vcunat
    vcunat committed Mar 16, 2020
    Copy the full SHA
    107ffbb View commit details
    Browse the repository at this point in the history

  2. nextcloud: 16.0.8 -> 16.0.9 

    includes fix for nC-SA-2020-015.

See nextcloud/server#19976, the SA currently
has a typo - adressed in
nextcloud/security-advisories#21.
    @flokli
    flokli committed Mar 16, 2020
    Copy the full SHA
    311c3fd View commit details
    Browse the repository at this point in the history

  3. Merge pull request #82697 from flokli/19.09-nextcloud-16.0.9 

    [19.09] nextcloud: 16.0.8 -> 16.0.9
    @flokli
    flokli committed Mar 16, 2020
    Copy the full SHA
    8d7fd7e View commit details
    Browse the repository at this point in the history