Skip to content
This repository was archived by the owner on Apr 12, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs-channels
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 267759348768
Choose a base ref
...
head repository: NixOS/nixpkgs-channels
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 862fb5215f07
Choose a head ref
  • 3 commits
  • 1 file changed
  • 1 contributor

Commits on Oct 4, 2018

  1. fscrypt: 0.2.3 -> 0.2.4 (security, CVE-2018-6558) 

    (cherry picked from commit 4f519e5)
Reason: Security update: "The pam_fscrypt module in fscrypt before 0.2.4
may incorrectly restore primary and supplementary group IDs to the
values associated with the root user, which allows attackers to gain
privileges via a successful login through certain applications that use
Linux-PAM (aka pam)."
    @primeos
    primeos committed Oct 4, 2018

    Verified

    This commit was signed with the committer’s verified signature. The key has expired.
    NeQuissimus Tim Steinbach
    GPG key ID: 6C654787275A64F1
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    02af3cd View commit details

  2. fscrypt: Fix the build (requires Go 1.10)

    @primeos
    primeos committed Oct 4, 2018

    Verified

    This commit was signed with the committer’s verified signature. The key has expired.
    NeQuissimus Tim Steinbach
    GPG key ID: 6C654787275A64F1
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    27018df View commit details

  3. Merge pull request #47881 from primeos/security-backports-for-18.03 

    [18.03] fscrypt: 0.2.3 -> 0.2.4 (security, CVE-2018-6558)
    @primeos
    primeos authored Oct 4, 2018

    Verified

    This commit was signed with the committer’s verified signature. The key has expired.
    NeQuissimus Tim Steinbach
    GPG key ID: 6C654787275A64F1
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    862fb52 View commit details
Showing with 4 additions and 4 deletions.
  1. +4 −4 pkgs/os-specific/linux/fscrypt/default.nix
8 changes: 4 additions & 4 deletions pkgs/os-specific/linux/fscrypt/default.nix
View file
Original file line number Diff line number Diff line change
@@ -1,18 +1,18 @@
{ stdenv, buildGoPackage, fetchFromGitHub, pam }:
{ stdenv, buildGo110Package, fetchFromGitHub, pam }:

# Don't use this for anything important yet!

buildGoPackage rec {
buildGo110Package rec {
name = "fscrypt-${version}";
version = "0.2.3";
version = "0.2.4";

goPackagePath = "github.com/google/fscrypt";

src = fetchFromGitHub {
owner = "google";
repo = "fscrypt";
rev = "v${version}";
sha256 = "126bbxim4nj56kplvyv528i88mfray50r2rc6ysblkmaw6x0fd9c";
sha256 = "10gbyqzgi30as1crvqbb4rc5p8zzbzk1q5j080h1gnz56qzwivr8";
};

buildInputs = [ pam ];