JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
0e6a290842
nixpkgs/pkgs/tools
History
Anders Kaseorg 3cd8ce3bce treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 
Naive concatenation of $LD_LIBRARY_PATH can result in an empty
colon-delimited segment; this tells glibc to load libraries from the
current directory, which is definitely wrong, and may be a security
vulnerability if the current directory is untrusted.  (See #67234, for
example.)  Fix this throughout the tree.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-01-15 09:47:03 +01:00
..
admin Merge pull request #77670 from amarrella/update/eksctl 2020-01-14 21:49:58 -05:00
archivers treewide: installFlags is a list 2019-12-30 13:22:43 +01:00
audio treewide: NIX_*_FLAGS -> string 2019-12-31 00:15:46 +01:00
backup duplicati: 2.0.4.5 -> 2.0.4.23 2020-01-09 07:40:16 +01:00
bluetooth obexfs: add missing bluez dep 2020-01-09 12:30:31 -08:00
bootloaders/refind treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
cd-dvd treewide: installTargets is a list 2019-12-30 13:29:27 +01:00
compression Merge pull request #75798 from tobim/pkgsStatic/arrow 2020-01-03 10:13:31 +01:00
filesystems treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00
graphics Merge pull request #77187 from r-ryantm/auto-update/pstoedit 2020-01-12 04:24:06 +01:00
inputmethods treewide: fix *Flags 2019-12-30 04:50:37 +01:00
misc coreutils: Fix cross compilation for Android 2020-01-15 09:44:10 +01:00
networking curl: 7.67.0 -> 7.68.0 2020-01-15 09:40:40 +01:00
nix nixpkgs-fmt: 0.6.0 -> 0.6.1 2019-11-07 22:50:57 +00:00
package-management Merge master into staging-next 2020-01-11 09:32:41 +01:00
security treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00
system Merge master into staging-next 2020-01-07 20:06:22 +01:00
text treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00
toml2nix
typesetting texlive: make updmap actually regenerate (#76826) (#76867) 2020-01-07 13:17:40 -05:00
video bento4: 1.5.1-628 -> 1.5.1-629 2020-01-05 21:08:12 -08:00
virtualization cri-tools: 1.16.1 -> v1.17.0 2019-12-16 09:48:03 +01:00
wayland/ydotool ydotool: init at 0.1.8 2019-10-29 14:43:43 +01:00
X11 treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00