Branch: refs/heads/release-13.10
  Home:   https://github.com/NixOS/nixpkgs
  Commit: 40e84741e0c54525a4faba84e37fa9a6d91b3c5a
      
https://github.com/NixOS/nixpkgs/commit/40e84741e0c54525a4faba84e37fa9a6d91b3c5a
  Author: Vladimír Čunát <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/development/libraries/ffmpeg/1.x.nix

  Log Message:
  -----------
  ffmpeg_1: update, probably fixing some security issues


  Commit: 769dd688c6f26124682c76c4ea5eb85398b10833
      
https://github.com/NixOS/nixpkgs/commit/769dd688c6f26124682c76c4ea5eb85398b10833
  Author: Vladimír Čunát <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/development/libraries/libssh/default.nix

  Log Message:
  -----------
  libssh: update, incl. features and CVE-2014-0017 fix

Also add pkgconfig to inputs, as it was looked for by cmake.
Dependent packages seem to build fine.

(cherry picked from commit a13200352a15fd35db4cebf90d724230d310809b)


  Commit: 734fbcaf1a3fb3b2f481deecbb1eb257de2b7d42
      
https://github.com/NixOS/nixpkgs/commit/734fbcaf1a3fb3b2f481deecbb1eb257de2b7d42
  Author: Eelco Dolstra <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/development/libraries/gnutls/2.12.nix
    M pkgs/development/libraries/gnutls/3.2.nix
    M pkgs/development/libraries/gnutls/default.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  gnutls: Update to 3.2.12, 3.1.22

CVE-2014-0092

Unfortunately, 3.2.12 doesn't pass the tests with Guile bindings
enabled, so I've turned them off in the default build.

(cherry picked from commit 738a5321bcd89452f65df19057367ce004402693)

Conflicts:
        pkgs/development/libraries/gnutls/3.2.nix
        pkgs/top-level/all-packages.nix


  Commit: 51b33065e8912106e4d94ee63b755ad3c7569398
      
https://github.com/NixOS/nixpkgs/commit/51b33065e8912106e4d94ee63b755ad3c7569398
  Author: Vladimír Čunát <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/development/libraries/gnutls/3.2.nix

  Log Message:
  -----------
  gnutls on darwin: drop patch that is integrated now

(cherry picked from commit c2cd9852acdea18f5ed425b17e2db4307cbb0319)


  Commit: bc4fcd41f0ab92c5a7f6d4772a51aa1c4f0e8d95
      
https://github.com/NixOS/nixpkgs/commit/bc4fcd41f0ab92c5a7f6d4772a51aa1c4f0e8d95
  Author: Vladimír Čunát <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/development/libraries/gnutls/default.nix

  Log Message:
  -----------
  gnutls: disable tests (stopped working after last CVE)

I suppose it's better to have patched untested version than the other way.


  Commit: dc07ccb3042058ca30f0630e57ced057df54709b
      
https://github.com/NixOS/nixpkgs/commit/dc07ccb3042058ca30f0630e57ced057df54709b
  Author: Vladimír Čunát <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/development/libraries/libav/default.nix

  Log Message:
  -----------
  libav: minor updates of both branches

(cherry picked from commit 76822ea4d5982e4d247f1c90f00577c5b47854f0)


  Commit: 919d6e7d91d038be580b79daede6e5835f95680f
      
https://github.com/NixOS/nixpkgs/commit/919d6e7d91d038be580b79daede6e5835f95680f
  Author: Vladimír Čunát <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/applications/misc/mupdf/default.nix

  Log Message:
  -----------
  mupdf: fix CVE-2014-2013 by upstream patch

(cherry picked from commit be58c4f9e484d054311ac062727c95690d24874b)


  Commit: 140a7f63963720cccbc074681c20a533e439c615
      
https://github.com/NixOS/nixpkgs/commit/140a7f63963720cccbc074681c20a533e439c615
  Author: Peter Simons <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/servers/dns/bind/default.nix

  Log Message:
  -----------
  bind: update to version 9.9.5-W1 (fixes CVE-2013-6230 and CVE 2014-0591)

(cherry picked from commit b0c23548095f464fbb4bae866300c1446e9720e2)

Conflicts (more updates instead of just one):
        pkgs/servers/dns/bind/default.nix


  Commit: 43757c2b35619b66c65783e680a929a870add65f
      
https://github.com/NixOS/nixpkgs/commit/43757c2b35619b66c65783e680a929a870add65f
  Author: Eelco Dolstra <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/servers/monitoring/zabbix/2.2.nix

  Log Message:
  -----------
  zabbix: Update from 2.2.1 to 2.2.2

Potentially fixes CVE-2012-0031, CVE-2012-0053, CVE-2012-0883,
CVE-2012-2687, CVE-2012-3499, CVE-2012-4558, CVE-2013-1862,
CVE-2013-1896, CVE-2013-2249, CVE-2013-1034, CVE-2013-5143.

(cherry picked from commit 2ea4ec798bd289328aeb164024fb8edf9a9593a4)

Conflicts (auto-solved):
        pkgs/servers/monitoring/zabbix/2.2.nix


  Commit: 9951478c40330b7cf7918ce93c7d242d99ffcd05
      
https://github.com/NixOS/nixpkgs/commit/9951478c40330b7cf7918ce93c7d242d99ffcd05
  Author: Vladimír Čunát <[email protected]>
  Date:   2014-03-17 (Mon, 17 Mar 2014)

  Changed paths:
    M pkgs/development/libraries/ffmpeg/default.nix

  Log Message:
  -----------
  ffmpeg (0.10): update, probably fixing some CVEs


Compare: https://github.com/NixOS/nixpkgs/compare/b94bca8ee364...9951478c4033
_______________________________________________
nix-commits mailing list
[email protected]
http://lists.science.uu.nl/mailman/listinfo/nix-commits

Reply via email to