Branch: refs/heads/release-16.03
Home: https://github.com/NixOS/nixpkgs
Commit: 425c5124b5b6aff2068565fe372d537c60ddd3aa
https://github.com/NixOS/nixpkgs/commit/425c5124b5b6aff2068565fe372d537c60ddd3aa
Author: Tobias Geerinckx-Rice <[email protected]>
Date: 2016-07-23 (Sat, 23 Jul 2016)
Changed paths:
M pkgs/tools/networking/dropbear/default.nix
Log Message:
-----------
dropbear: 2015.71 -> 2016.72
Bugfix release:
- Validate X11 forwarding input. Could allow bypass of
authorized_keys command= restrictions.
(cherry picked from commit e834a7c05be00400aa1efd5c47820bb1d357eaed)
Commit: c326a1975a03801ca738fabe5e946972b6638186
https://github.com/NixOS/nixpkgs/commit/c326a1975a03801ca738fabe5e946972b6638186
Author: Tobias Geerinckx-Rice <[email protected]>
Date: 2016-07-23 (Sat, 23 Jul 2016)
Changed paths:
M pkgs/tools/networking/dropbear/default.nix
Log Message:
-----------
dropbear: 2016.72 -> 2016.73
Changes: https://matt.ucc.asn.au/dropbear/CHANGES.
(cherry picked from commit a68545621315c96c6b9197d03ba177a3fe85cd62)
Commit: 502de3d6e3871c80c26347b8b8acac10f2330207
https://github.com/NixOS/nixpkgs/commit/502de3d6e3871c80c26347b8b8acac10f2330207
Author: Tobias Geerinckx-Rice <[email protected]>
Date: 2016-07-23 (Sat, 23 Jul 2016)
Changed paths:
M pkgs/tools/networking/dropbear/default.nix
Log Message:
-----------
dropbear: 2016.73 -> 2016.74
Security fixes:
- Message printout was vulnerable to format string injection
- dropbearconvert import of OpenSSH keys could run arbitrary code
as the local dropbearconvert user when parsing malicious key
files
- dbclient could run arbitrary code as the local dbclient user if
particular -m or -c arguments are provided
- dbclient or dropbear server could expose process memory to the
running user if compiled with DEBUG_TRACE and running with -v
Fixes:
- Fix port forwarding failure when connecting to domains that have
both IPv4 and IPv6 addresses. The bug was introduced in 2015.68
- Fix 100% CPU use while waiting for rekey to complete
(cherry picked from commit 7c84bd121a1b6c38092d4f98f29cdadba050b4db)
Compare: https://github.com/NixOS/nixpkgs/compare/7c435c925a9f...502de3d6e387_______________________________________________
nix-commits mailing list
[email protected]
http://lists.science.uu.nl/mailman/listinfo/nix-commits
