Skip to content
This repository has been archived by the owner on Apr 12, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs-channels
base: 6a3f5bcb061e
Choose a base ref
...
head repository: NixOS/nixpkgs-channels
compare: c7dc01c28734
Choose a head ref
  • 3 commits
  • 2 files changed
  • 3 contributors

Commits on Oct 6, 2018

  1. dbeaver: 5.2.0 -> 5.2.1 

    (cherry picked from commit 2012860)
    @samueldr
    samueldr committed Oct 6, 2018
    Configuration menu
    Copy the full SHA
    8810238 View commit details
    Browse the repository at this point in the history

  2. ghostscript: 9.24 -> 9.25 (#47948) 

    Highlights in this release include:

This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional security issues over the recent 9.24 release.

CVE-2018-16802
CVE-2018-17183

Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources.

Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits.
PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid these issues.

As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files.

IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available as its own package separately from Ghostscript (and MuPDF).

The usual round of bug fixes, compatibility changes, and incremental improvements.

(cherry picked from commit 5b77b0d2f1eda9a42fe188eafb499230741e7925)
    @flokli @xeji
    flokli authored and xeji committed Oct 6, 2018
    Configuration menu
    Copy the full SHA
    dbcbf7c View commit details
    Browse the repository at this point in the history

  3. Merge pull request #47952 from samueldr/auto/dbeaver/nixos-18.09/5.2.1 

    dbeaver: 5.2.0 -> 5.2.1 (18.09)
    @Mic92
    Mic92 committed Oct 6, 2018
    Configuration menu
    Copy the full SHA
    c7dc01c View commit details
    Browse the repository at this point in the history