Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: 741046a4d6a8
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: 7a8563664411
Choose a head ref
  • 4 commits
  • 1 file changed
  • 2 contributors

Commits on Jul 25, 2019

  1. Revert "unzip: CVE-2019-13232"

    This reverts commit 0238946.
    
    This patch broke a number of legitimate zips in the wild, including but
    not limited to most luarocks and a number of gradle-produced JARs.
    adisbladis committed Jul 25, 2019
    Copy the full SHA
    eaafd84 View commit details
    Browse the repository at this point in the history
  2. Copy the full SHA
    773f034 View commit details
    Browse the repository at this point in the history
  3. Merge #65393: Revert "unzip: CVE-2019-13232"

    ...into staging-next
    vcunat committed Jul 25, 2019
    Copy the full SHA
    c9793b8 View commit details
    Browse the repository at this point in the history

Commits on Jul 26, 2019

  1. Merge branch 'staging-next'

    This reverts the *incomplete* unzip CVE fix that caused many
    false positives.
    vcunat committed Jul 26, 2019
    Copy the full SHA
    7a85636 View commit details
    Browse the repository at this point in the history