Skip to content
This repository was archived by the owner on Apr 12, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs-channels
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: dce33f1a2d49
Choose a base ref
...
head repository: NixOS/nixpkgs-channels
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 8d7fd7e3f40b
Choose a head ref
  • 10 commits
  • 6 files changed
  • 4 contributors

Commits on Jan 30, 2020

  1. cpio: 2.12 -> 2.13 

    See https://lists.gnu.org/archive/html/info-gnu/2019-11/msg00002.html
for release information.

Fixes CVE-2019-14866
    @lsix @wamserma
    lsix authored and wamserma committed Jan 30, 2020
    Copy the full SHA
    16ff9f6 View commit details

Commits on Mar 15, 2020

  1. Merge #78736: cpio: 2.12 -> 2.13 (into staging-19.09) 

    fix CVE-2019-14866, backport
    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    c26a26d View commit details

  2. Merge branch 'staging-19.09' into release-19.09 

    (Older version finished on Hydra.)
    @vcunat
    vcunat committed Mar 15, 2020

    Verified

    This commit was signed with the committer’s verified signature.
    lovesegfault Bernardo Meurer
    GPG key ID: E421C74191EA186C
    Verified
    Learn about vigilant mode
    Copy the full SHA
    686362c View commit details

  3. Merge branch 'release-19.09' into staging-19.09

    @vcunat
    vcunat committed Mar 15, 2020

    Verified

    This commit was signed with the committer’s verified signature. The key has expired.
    Moredread André-Patrick Bubel
    GPG key ID: 28925CBA8869FF29
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    0c2b734 View commit details

  4. libssh: 0.8.7 -> 0.8.8 

    Fixes CVE-2019-14889, issue #77264.
Release notes: https://www.libssh.org/2019/12/10/libssh-0-9-3-and-libssh-0-8-8-security-release/

(cherry picked from commit 7ef8a42)
    @mmilata @vcunat
    mmilata authored and vcunat committed Mar 15, 2020

    Verified

    This commit was signed with the committer’s verified signature. The key has expired.
    cole-h Cole Helbling
    GPG key ID: B37E0F2371016A4C
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    45f415a View commit details

  5. lz4: 1.9.1 -> 1.9.2 (PR #82437) 

    Fixes: https://nvd.nist.gov/vuln/detail/CVE-2019-17543
Release notes: https://github.com/lz4/lz4/releases/tag/v1.9.2

(cherry picked from commit 18ac6ba)
    @mmilata @vcunat
    mmilata authored and vcunat committed Mar 15, 2020
    Copy the full SHA
    cdd33cb View commit details

  6. samba4: patch all remaining security issues 

    https://www.samba.org/samba/history/security.html
Tested: $ nix build -f nixos/release.nix tests.samba.x86_64-linux
    @vcunat
    vcunat committed Mar 15, 2020
    Copy the full SHA
    7d27cc8 View commit details

Commits on Mar 16, 2020

  1. Merge branch 'staging-19.09' into release-19.09 

    x86_64-linux rebuilds have finished, so let's merge
to get the security fixes early.
    @vcunat
    vcunat committed Mar 16, 2020
    Copy the full SHA
    107ffbb View commit details

  2. nextcloud: 16.0.8 -> 16.0.9 

    includes fix for nC-SA-2020-015.

See nextcloud/server#19976, the SA currently
has a typo - adressed in
nextcloud/security-advisories#21.
    @flokli
    flokli committed Mar 16, 2020
    Copy the full SHA
    311c3fd View commit details

  3. Merge pull request #82697 from flokli/19.09-nextcloud-16.0.9 

    [19.09] nextcloud: 16.0.8 -> 16.0.9
    @flokli
    flokli authored Mar 16, 2020

    Verified

    This commit was signed with the committer’s verified signature. The key has expired.
    marsam Mario Rodas
    GPG key ID: 325649BCA6D53027
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    8d7fd7e View commit details
Loading