Branch: refs/heads/master
  Home:   https://github.com/NixOS/nixpkgs
  Commit: 479a40182a523bece48bb9c280b311ba5bdaadc9
      
https://github.com/NixOS/nixpkgs/commit/479a40182a523bece48bb9c280b311ba5bdaadc9
  Author: Franz Pletz <fpl...@fnordicwalking.de>
  Date:   2016-05-13 (Fri, 13 May 2016)

  Changed paths:
    M pkgs/development/libraries/nghttp2/default.nix

  Log Message:
  -----------
  nghttp2: 1.9.2 -> 1.10.0


  Commit: 7a2accbf5a198a6dbae3cf5c5a619a93e121daef
      
https://github.com/NixOS/nixpkgs/commit/7a2accbf5a198a6dbae3cf5c5a619a93e121daef
  Author: Franz Pletz <fpl...@fnordicwalking.de>
  Date:   2016-05-13 (Fri, 13 May 2016)

  Changed paths:
    M pkgs/development/libraries/jemalloc/default.nix

  Log Message:
  -----------
  jemalloc: 4.0.3 -> 4.1.1


  Commit: 468d35fc8e2f397e1b94aa939d91780f031f86a2
      
https://github.com/NixOS/nixpkgs/commit/468d35fc8e2f397e1b94aa939d91780f031f86a2
  Author: Franz Pletz <fpl...@fnordicwalking.de>
  Date:   2016-05-13 (Fri, 13 May 2016)

  Changed paths:
    M pkgs/development/interpreters/perl/default.nix

  Log Message:
  -----------
  perl: 5.22.1 -> 5.22.2


  Commit: 64f5845418a618c510e64c5daac7b194b4d9658e
      
https://github.com/NixOS/nixpkgs/commit/64f5845418a618c510e64c5daac7b194b4d9658e
  Author: Scott R. Parish <srpar...@gmail.com>
  Date:   2016-05-13 (Fri, 13 May 2016)

  Changed paths:
    M pkgs/development/libraries/glibc/common.nix
    A pkgs/development/libraries/glibc/cve-2016-1234.patch
    A pkgs/development/libraries/glibc/cve-2016-3075.patch
    A pkgs/development/libraries/glibc/cve-2016-3706.patch
    A pkgs/development/libraries/glibc/glob-simplify-interface.patch

  Log Message:
  -----------
  glibc: patch 2.23 for CVE-2016-3075, CVE-2016-1234, CVE-2016-3706

This addresses the following security advisories:

+ CVE-2016-3075: Stack overflow in _nss_dns_getnetbyname_r
+ CVE-2016-1234: glob: buffer overflow with GLOB_ALTDIRFUNC due to incorrect
           NAME_MAX limit assumption
+ CVE-2016-3706: getaddrinfo: stack overflow in hostent conversion

Patches cherry-picked from glibc's release/2.23/master branch.

The "glob-simplify-interface.patch" was a dependency for
"cve-2016-1234.patch".


  Commit: c9750f538274a199a12102f02c72da0ce0713cd6
      
https://github.com/NixOS/nixpkgs/commit/c9750f538274a199a12102f02c72da0ce0713cd6
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2016-05-14 (Sat, 14 May 2016)

  Changed paths:
    A pkgs/os-specific/linux/kernel-headers/4.4.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  linuxHeaders_4_4: init at 4.4.10


  Commit: aa18837652a1163e83c4a93cb0a85185be17622a
      
https://github.com/NixOS/nixpkgs/commit/aa18837652a1163e83c4a93cb0a85185be17622a
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2016-05-14 (Sat, 14 May 2016)

  Changed paths:
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  linuxHeaders: linuxHeaders_3_18 -> linuxHeaders_4_4

This updates the Linux API headers to those of the default NixOS kernel.


  Commit: b1ac3404e0c83db0a7abf58c4ecc691c06aeffa1
      
https://github.com/NixOS/nixpkgs/commit/b1ac3404e0c83db0a7abf58c4ecc691c06aeffa1
  Author: Vladimír Čunát <vcu...@gmail.com>
  Date:   2016-05-14 (Sat, 14 May 2016)

  Changed paths:
    M lib/maintainers.nix
    M nixos/modules/config/shells-environment.nix
    M nixos/modules/services/backup/rsnapshot.nix
    M nixos/modules/services/continuous-integration/jenkins/default.nix
    M nixos/modules/services/hardware/udev.nix
    M nixos/modules/services/monitoring/grafana.nix
    M nixos/modules/services/networking/bind.nix
    M nixos/modules/services/networking/nat.nix
    M nixos/modules/services/networking/ssh/sshd.nix
    M nixos/modules/services/networking/teamspeak3.nix
    M nixos/modules/services/x11/desktop-managers/xfce.nix
    M pkgs/applications/audio/ncmpcpp/default.nix
    M pkgs/applications/backup/crashplan/default.nix
    A pkgs/applications/editors/emacs-modes/pcache/default.nix
    A pkgs/applications/editors/emacs-modes/s/default.nix
    A pkgs/applications/editors/emacs-modes/xml-rpc/default.nix
    M pkgs/applications/editors/idea/default.nix
    M pkgs/applications/editors/netbeans/default.nix
    M pkgs/applications/editors/sublime3/default.nix
    M pkgs/applications/misc/calibre/default.nix
    M pkgs/applications/misc/gnuradio/default.nix
    M 
pkgs/applications/networking/browsers/mozilla-plugins/flashplayer-11/default.nix
    M pkgs/applications/networking/ftp/filezilla/default.nix
    M 
pkgs/applications/networking/instant-messengers/pidgin-plugins/pidgin-opensteamworks/default.nix
    M pkgs/applications/networking/instant-messengers/pidgin/wrapper.nix
    M pkgs/applications/networking/instant-messengers/teamspeak/server.nix
    M pkgs/applications/networking/mailreaders/thunderbird-bin/default.nix
    M 
pkgs/applications/networking/mailreaders/thunderbird-bin/generate_sources.rb
    M pkgs/applications/networking/mailreaders/thunderbird-bin/sources.nix
    M pkgs/applications/networking/mailreaders/thunderbird/default.nix
    M pkgs/build-support/emacs/wrapper.nix
    M pkgs/data/documentation/man-pages/default.nix
    M pkgs/development/compilers/ats2/default.nix
    M pkgs/development/compilers/ghc/8.0.1.nix
    M pkgs/development/compilers/oraclejdk/jdk-linux-base.nix
    M pkgs/development/compilers/oraclejdk/jdk8-linux.nix
    M pkgs/development/interpreters/groovy/default.nix
    M pkgs/development/interpreters/php/default.nix
    M pkgs/development/libraries/SDL/default.nix
    M pkgs/development/libraries/assimp/default.nix
    M pkgs/development/libraries/libass/default.nix
    M pkgs/development/libraries/libfilezilla/default.nix
    M pkgs/development/libraries/libinput/default.nix
    A pkgs/development/libraries/xgboost/default.nix
    M pkgs/development/ocaml-modules/batteries/default.nix
    M pkgs/development/python-modules/bootstrapped-pip/default.nix
    M pkgs/development/python-modules/pyexiv2/default.nix
    M pkgs/development/python-modules/pygobject/3.nix
    M pkgs/development/python-modules/pygobject/default.nix
    M pkgs/development/python-modules/pyqt/4.x.nix
    M pkgs/development/python-modules/pyqt/5.x.nix
    M pkgs/development/python-modules/sip/4.16.nix
    M pkgs/development/python-modules/sip/default.nix
    M pkgs/development/tools/analysis/checkstyle/default.nix
    M pkgs/development/tools/continuous-integration/jenkins/default.nix
    M pkgs/development/tools/misc/ccache/default.nix
    M pkgs/development/tools/packer/default.nix
    M pkgs/development/tools/packer/deps.nix
    A pkgs/development/tools/postiats-utilities/default.nix
    A pkgs/development/tools/rust/racerd/default.nix
    M pkgs/games/scorched3d/default.nix
    R pkgs/misc/sails/default.nix
    A pkgs/misc/sailsd/default.nix
    M pkgs/misc/screensavers/xlockmore/default.nix
    M pkgs/misc/vim-plugins/default.nix
    M pkgs/misc/vim-plugins/vim2nix/additional-nix-code/youcompleteme
    M pkgs/os-specific/linux/ati-drivers/builder.sh
    M pkgs/os-specific/linux/ati-drivers/default.nix
    M pkgs/os-specific/linux/kernel/linux-4.5.nix
    M pkgs/os-specific/linux/kernel/linux-grsecurity-4.5.nix
    M pkgs/os-specific/linux/kernel/patches.nix
    M pkgs/os-specific/linux/systemd/default.nix
    R pkgs/os-specific/linux/tcp-wrappers/builder.sh
    M pkgs/os-specific/linux/tcp-wrappers/default.nix
    A pkgs/servers/dns/bind/darwin-openssl-linking-fix.patch
    M pkgs/servers/dns/bind/default.nix
    A pkgs/servers/dns/bind/dont-keep-configure-flags.patch
    M pkgs/servers/misc/subsonic/default.nix
    M pkgs/servers/monitoring/grafana/default.nix
    M pkgs/servers/mpd/default.nix
    M pkgs/servers/sslh/default.nix
    M pkgs/tools/backup/rsnapshot/default.nix
    M pkgs/tools/compression/zstd/default.nix
    M pkgs/tools/filesystems/btrfs-progs/default.nix
    M pkgs/tools/filesystems/dosfstools/default.nix
    M pkgs/tools/filesystems/duperemove/default.nix
    M pkgs/tools/filesystems/f2fs-tools/default.nix
    M pkgs/tools/filesystems/nixpart/0.4/multipath-tools.nix
    M pkgs/tools/filesystems/securefs/default.nix
    M pkgs/tools/misc/coreutils/default.nix
    M pkgs/tools/misc/graylog/default.nix
    M pkgs/tools/misc/parallel/default.nix
    M pkgs/tools/misc/zsh-navigation-tools/default.nix
    M pkgs/tools/networking/axel/default.nix
    M pkgs/tools/networking/radvd/default.nix
    M pkgs/tools/networking/tinc/default.nix
    M pkgs/tools/package-management/dpkg/default.nix
    M pkgs/tools/package-management/nix-prefetch-scripts/default.nix
    M pkgs/tools/security/ccid/default.nix
    M pkgs/tools/security/p0f/default.nix
    M pkgs/tools/security/pcsclite/default.nix
    M pkgs/top-level/all-packages.nix
    M pkgs/top-level/emacs-packages.nix
    M pkgs/top-level/perl-packages.nix
    M pkgs/top-level/python-packages.nix
    M pkgs/top-level/rust-packages.nix

  Log Message:
  -----------
  Merge branch 'master' into staging


  Commit: 45a14c873b90023e83cd9a97b642f206da1ac432
      
https://github.com/NixOS/nixpkgs/commit/45a14c873b90023e83cd9a97b642f206da1ac432
  Author: Vladimír Čunát <vcu...@gmail.com>
  Date:   2016-05-14 (Sat, 14 May 2016)

  Changed paths:
    M pkgs/development/libraries/glibc/common.nix
    A pkgs/development/libraries/glibc/cve-2016-1234.patch
    A pkgs/development/libraries/glibc/cve-2016-3075.patch
    A pkgs/development/libraries/glibc/cve-2016-3706.patch
    A pkgs/development/libraries/glibc/glob-simplify-interface.patch

  Log Message:
  -----------
  Merge #15447: glibc security updates


  Commit: 26e8e3e654d4392963f6913974ac3430aa9e0cd7
      
https://github.com/NixOS/nixpkgs/commit/26e8e3e654d4392963f6913974ac3430aa9e0cd7
  Author: Vladimír Čunát <vcu...@gmail.com>
  Date:   2016-05-14 (Sat, 14 May 2016)

  Changed paths:
    M pkgs/os-specific/linux/util-linux/default.nix

  Log Message:
  -----------
  util-linux: use sha256 instead of sha512 again

/cc #15048. I believe the usage of sha512 here at this point
brings very little gain and can be quite painful to some users.


  Commit: 024d44dd617fe9c891cc42d4079a680a094cc92f
      
https://github.com/NixOS/nixpkgs/commit/024d44dd617fe9c891cc42d4079a680a094cc92f
  Author: Vladimír Čunát <vcu...@gmail.com>
  Date:   2016-05-14 (Sat, 14 May 2016)

  Changed paths:
    A pkgs/os-specific/linux/kernel-headers/4.4.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  Merge #15449: update default Linux headers

...to those of the default NixOS kernel


  Commit: 49cf9b902ac26a7389aae5fe9c5ba5099e721a2a
      
https://github.com/NixOS/nixpkgs/commit/49cf9b902ac26a7389aae5fe9c5ba5099e721a2a
  Author: Pascal Wittmann <m...@pascal-wittmann.de>
  Date:   2016-05-15 (Sun, 15 May 2016)

  Changed paths:
    M pkgs/development/tools/misc/help2man/default.nix

  Log Message:
  -----------
  help2man: 1.47.3 -> 1.47.4


  Commit: 21d09bcb717de1f618f47a4d23989a5f5617575a
      
https://github.com/NixOS/nixpkgs/commit/21d09bcb717de1f618f47a4d23989a5f5617575a
  Author: Vladimír Čunát <vcu...@gmail.com>
  Date:   2016-05-15 (Sun, 15 May 2016)

  Changed paths:
    M pkgs/tools/system/efivar/default.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  efivar: fix build after #15449

I don't know why it matters here; the error was:
linux.c:25:24: fatal error: linux/nvme.h: No such file or directory


  Commit: 0a8d1627ec7dfb3cdf8a87201d5ac55beab023bc
      
https://github.com/NixOS/nixpkgs/commit/0a8d1627ec7dfb3cdf8a87201d5ac55beab023bc
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2016-05-15 (Sun, 15 May 2016)

  Changed paths:
    M pkgs/tools/system/efivar/default.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  Revert "efivar: fix build after #15449"

This reverts commit 21d09bcb717de1f618f47a4d23989a5f5617575a.


  Commit: a11b0bc5151b219629b270391c104ca168cf7d09
      
https://github.com/NixOS/nixpkgs/commit/a11b0bc5151b219629b270391c104ca168cf7d09
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2016-05-15 (Sun, 15 May 2016)

  Changed paths:
    M pkgs/tools/system/efivar/default.nix

  Log Message:
  -----------
  efivar: fix build against linux 4.4 headers


  Commit: ca730d445235c185cb94fbf51561b137eddd56ff
      
https://github.com/NixOS/nixpkgs/commit/ca730d445235c185cb94fbf51561b137eddd56ff
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2016-05-16 (Mon, 16 May 2016)

  Changed paths:
    M pkgs/tools/system/fio/default.nix

  Log Message:
  -----------
  fio: 2.2.11 -> 2.9

This fixes the build against linux 4.4 headers; see
https://hydra.nixos.org/build/35697941/log/raw

Also set `platforms.unix` per what upstream claims.


  Commit: 4cf524e588c28f7a6965ed310c4f2a46f05edbc2
      
https://github.com/NixOS/nixpkgs/commit/4cf524e588c28f7a6965ed310c4f2a46f05edbc2
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2016-05-16 (Mon, 16 May 2016)

  Changed paths:
    M pkgs/os-specific/linux/udev/182.nix

  Log Message:
  -----------
  udev182: fix build against linux 4.4 headers

Fix from https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=libudev0


  Commit: e5d40c6fa3cf11b7e06e6fe09ab0dc249ab436d2
      
https://github.com/NixOS/nixpkgs/commit/e5d40c6fa3cf11b7e06e6fe09ab0dc249ab436d2
  Author: Vladimír Čunát <vcu...@gmail.com>
  Date:   2016-05-16 (Mon, 16 May 2016)

  Changed paths:
    M pkgs/development/interpreters/perl/default.nix
    M pkgs/development/libraries/glibc/common.nix
    A pkgs/development/libraries/glibc/cve-2016-1234.patch
    A pkgs/development/libraries/glibc/cve-2016-3075.patch
    A pkgs/development/libraries/glibc/cve-2016-3706.patch
    A pkgs/development/libraries/glibc/glob-simplify-interface.patch
    M pkgs/development/libraries/jemalloc/default.nix
    M pkgs/development/libraries/nghttp2/default.nix
    M pkgs/development/tools/misc/help2man/default.nix
    A pkgs/os-specific/linux/kernel-headers/4.4.nix
    M pkgs/os-specific/linux/udev/182.nix
    M pkgs/os-specific/linux/util-linux/default.nix
    M pkgs/tools/system/efivar/default.nix
    M pkgs/tools/system/fio/default.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  Merge branch 'staging'

Hydra is only half-finished, but we'd better get secure glibc fast.


Compare: https://github.com/NixOS/nixpkgs/compare/d15fedbcc0ac...e5d40c6fa3cf
_______________________________________________
nix-commits mailing list
nix-comm...@lists.science.uu.nl
http://lists.science.uu.nl/mailman/listinfo/nix-commits

Reply via email to