Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: ad135f051837
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: a41873dbc989
Choose a head ref
  • 5 commits
  • 2 files changed
  • 2 contributors

Commits on Aug 10, 2019

  1. icedtea_web: 1.7.1 -> 1.8.3 

    Use the new official repository on GitHub and build the new launcher written in
Rust.

Also fixes the following security vulnerabilities:

- CVE-2019-10185: zip-slip attack during auto-extraction of a JAR file.

- CVE-2019-10181: executable code could be injected in a JAR file without
  compromising the signature verification.

- CVE-2019-10182: improper path sanitization from <jar/> elements in JNLP
  files.

References:
AdoptOpenJDK/IcedTea-Web#327
    @stefano-m
    stefano-m committed Aug 10, 2019
    Copy the full SHA
    e26a52a View commit details
    Browse the repository at this point in the history

  2. icedtea_web: update homepage

    @stefano-m
    stefano-m committed Aug 10, 2019
    Copy the full SHA
    de14e5b View commit details
    Browse the repository at this point in the history

  3. icedtea_web: install .destkop entries

    @stefano-m
    stefano-m committed Aug 10, 2019
    Copy the full SHA
    ebde1dd View commit details
    Browse the repository at this point in the history

Commits on Aug 13, 2019

  1. icedtea_web: use glib rather than gtk2 in buildInputs 

    The dependency on GTK was removed in
AdoptOpenJDK/IcedTea-Web@c7aae0e

Also, remove that pesky commented-out line from `preConfigure` too!
    @stefano-m
    stefano-m committed Aug 13, 2019
    Copy the full SHA
    2d4bdb8 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #66422 from stefano-m/icedtea_web-1.8.3 

    icedtea_web: 1.7.1 -> 1.8.3 (fixes CVE-2019-10185, CVE-2019-10181, CVE-2019-10182)
    @worldofpeace
    worldofpeace committed Aug 13, 2019
    Copy the full SHA
    a41873d View commit details
    Browse the repository at this point in the history