Branch: refs/heads/release-16.09
Home: https://github.com/NixOS/nixpkgs
Commit: 3c10c74246d9455ff33cb6b3d18424cb2507a5af
https://github.com/NixOS/nixpkgs/commit/3c10c74246d9455ff33cb6b3d18424cb2507a5af
Author: Herwig Hochleitner <[email protected]>
Date: 2017-02-17 (Fri, 17 Feb 2017)
Changed paths:
M pkgs/development/libraries/webkitgtk/2.14.nix
Log Message:
-----------
webkitgtk: 2.14.4 -> 2.14.5
(cherry picked from commit 2640c87fb9da376dd1a8a1fc44e99fd20188f327)
Commit: 1cc9887801841a5cad7d15e8d7d0d30d4c240ddc
https://github.com/NixOS/nixpkgs/commit/1cc9887801841a5cad7d15e8d7d0d30d4c240ddc
Author: Vladimír Čunát <[email protected]>
Date: 2017-02-17 (Fri, 17 Feb 2017)
Changed paths:
M pkgs/development/libraries/libxml2/default.nix
Log Message:
-----------
libxml2: bugfix updates from git upstream
This should solve CVE-2016-5131 and some other bugs, but not what Suse
calls CVE-2016-9597: https://bugzilla.suse.com/show_bug.cgi?id=1017497
The bugzilla discussion seems to indicate that the CVE is referenced
incorrectly and only shows reproducing when using command-line flags
that are considered "unsafe".
CVE-2016-9318 also remains unfixed, as I consider their reasoning OK:
https://lwn.net/Alerts/714411/
/cc #22826.
(cherry picked from commit 5ad81ab09c86a7acc99b31224a6aeb8fca4c152e)
Commit: ce3ffe7aee1a6e68c7104bebe5095b1794e4b21c
https://github.com/NixOS/nixpkgs/commit/ce3ffe7aee1a6e68c7104bebe5095b1794e4b21c
Author: Joachim Fasting <[email protected]>
Date: 2017-02-17 (Fri, 17 Feb 2017)
Changed paths:
M pkgs/os-specific/linux/kernel/patches.nix
M pkgs/top-level/all-packages.nix
Log Message:
-----------
linux_4_9: patch for CVE-2017-5986
Seems fairly low impact[1] but we might as well patch it until a new 4.9
version is released
[1]: https://bugzilla.redhat.com/show_bug.cgi?id=1420276
(cherry picked from commit e8007c0e8911fbcd99268b0b30d3e9f069f22c20)
Commit: 134772e7d6d401f2f234cbd1454588feabc9f180
https://github.com/NixOS/nixpkgs/commit/134772e7d6d401f2f234cbd1454588feabc9f180
Author: Joachim Fasting <[email protected]>
Date: 2017-02-17 (Fri, 17 Feb 2017)
Changed paths:
M pkgs/os-specific/linux/kernel/linux-4.9.nix
Log Message:
-----------
linux_4_9: 4.9.9 -> 4.9.10
(cherry picked from commit 73577a2b05c2fe89c7ecaf030caf76f5148301da)
Compare: https://github.com/NixOS/nixpkgs/compare/381c2bd0d6a3...134772e7d6d4_______________________________________________
nix-commits mailing list
[email protected]
http://lists.science.uu.nl/mailman/listinfo/nix-commits
