Skip to content
This repository was archived by the owner on Apr 12, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs-channels
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: a5b5fb918eb4
Choose a base ref
...
head repository: NixOS/nixpkgs-channels
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 12d7fb573bca
Choose a head ref
  • 1 commit
  • 1 file changed
  • 1 contributor

Commits on Jul 16, 2019

  1. Merge #64917: wavpack: CVE-2018-19840 CVE-2018-19841 

    (cherry picked from commit 5777f52)
    @vcunat
    vcunat committed Jul 16, 2019

    Verified

    This commit was signed with the committer’s verified signature.
    bagder Daniel Stenberg
    GPG key ID: 5CC908FDB71E12C2
    Verified
    Learn about vigilant mode
    Copy the full SHA
    12d7fb5 View commit details
Showing with 10 additions and 0 deletions.
  1. +10 −0 pkgs/development/libraries/wavpack/default.nix
10 changes: 10 additions & 0 deletions pkgs/development/libraries/wavpack/default.nix
View file
Original file line number Diff line number Diff line change
@@ -49,6 +49,16 @@ stdenv.mkDerivation rec {
name = "CVE-2019-11498-4.patch";
sha256 = "0qdw071b14hmxkjw6kn83d8hzq89l3hqh64pl1f1wb8m51w5xfg7";
})
(fetchpatch {
url = "https://github.com/dbry/WavPack/commit/070ef6f138956d9ea9612e69586152339dbefe51.patch";
name = "CVE-2018-19840.patch";
sha256 = "08y27py8hnki74ad8wbknnd36vj5pzzcm2vk3ngcbsjnj7x5mffz";
})
(fetchpatch {
url = "https://github.com/dbry/WavPack/commit/bba5389dc598a92bdf2b297c3ea34620b6679b5b.patch";
name = "CVE-2018-19841.patch";
sha256 = "08gx5xx51bi86cqqy7cv1d25k669a7wnkksasjspphwkpwkcxymy";
})
];

meta = with stdenv.lib; {