Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 399c6ca77af1
Choose a base ref
...
head repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 5e97c6f6f7b5
Choose a head ref
  • 2 commits
  • 1 file changed
  • 2 contributors

Commits on Jan 26, 2020

  1. file: fix download url for CVE-2019-18218

    @veprbl
    veprbl committed Jan 26, 2020
    Copy the full SHA
    5c39e8c View commit details

  2. Merge pull request #78479 from veprbl/pr/CVE-2019-18218_url_fix 

    [19.09] file: fix download url for CVE-2019-18218
    @nh2
    nh2 authored Jan 26, 2020

    Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
    GPG key ID: 4AEE18F83AFDEB23
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    5e97c6f View commit details
Showing with 5 additions and 1 deletion.
  1. +5 −1 pkgs/tools/misc/file/default.nix
6 changes: 5 additions & 1 deletion pkgs/tools/misc/file/default.nix
View file
Original file line number Diff line number Diff line change
@@ -15,7 +15,11 @@ stdenv.mkDerivation rec {
patches = [
(fetchpatch {
name = "CVE-2019-18218.patch";
url = "https://sources.debian.org/data/main/f/file/1:5.37-6/debian/patches/cherry-pick.FILE5_37-67-g46a8443f.limit-the-number-of-elements-in-a-vector-found-by-oss-fuzz.patch";
urls = [
"https://src.fedoraproject.org/rpms/file/raw/f6dd8461/f/file-5.37-CVE-2019-18218.patch"
"https://git.in-ulm.de/cbiedl/file/raw/054940e842528dca434a92820f9abb89adce0574/debian/patches/cherry-pick.FILE5_37-67-g46a8443f.limit-the-number-of-elements-in-a-vector-found-by-oss-fuzz.patch"
"https://sources.debian.org/data/main/f/file/1:5.35-4+deb10u1/debian/patches/cherry-pick.FILE5_37-67-g46a8443f.limit-the-number-of-elements-in-a-vector-found-by-oss-fuzz.patch"
];
sha256 = "1i22y91yndc3n2p2ngczp1lwil8l05sp8ciicil74xrc5f91y6mj";
})
];