nixpkgs/pkgs/development/interpreters
Anders Kaseorg 3cd8ce3bce treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH
Naive concatenation of $LD_LIBRARY_PATH can result in an empty
colon-delimited segment; this tells glibc to load libraries from the
current directory, which is definitely wrong, and may be a security
vulnerability if the current directory is untrusted.  (See #67234, for
example.)  Fix this throughout the tree.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-01-15 09:47:03 +01:00
..
acl2 treewide: remove redundant quotes 2019-08-26 21:40:19 +00:00
angelscript angelscript: 2.33.0 -> 2.34.0 2019-10-06 17:46:34 -07:00
bats treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
ceptre treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
chibi chibi: 0.7.3 -> 0.8 2018-07-18 15:56:04 -07:00
clips treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
clisp clisp: Add license 2019-04-09 13:23:55 +02:00
clojure clojure: 1.10.1.489 -> 1.10.1.492 2019-12-11 13:33:35 +01:00
clojurescript/lumo treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
dart treewide: name -> pname 2019-08-17 10:54:38 +00:00
dhall
duktape duktape: 2.4.0 -> 2.5.0 2019-12-08 21:47:09 +01:00
eff Treewide: fix more URL permanent redirects 2019-11-21 15:37:34 -08:00
elixir treewide: fix *Flags 2019-12-30 04:50:37 +01:00
erlang treewide: installTargets is a list 2019-12-31 00:25:26 +01:00
evcxr evcxr: 0.4.5 -> 0.4.6 2020-01-01 21:13:45 +01:00
falcon treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
gauche gauche: 0.9.8 -> 0.9.9 2019-12-16 20:20:20 -05:00
gnu-apl treewide: NIX_*_FLAGS -> string 2019-12-31 00:15:46 +01:00
groovy Merge branch 'master' into staging-next 2019-08-24 08:55:37 +02:00
gtk-server gtk-server: 2.3.1 -> 2.4.5 2019-12-15 13:31:53 -08:00
guile guile: fix unbound variable in setup-hook 2019-11-20 05:12:13 +01:00
hugs Revert "hugs: broken on clang" 2018-12-02 16:46:31 -05:00
hy hy: use python2, build fails with 3 2019-11-13 16:27:38 +01:00
icon-lang treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
io treewide: Get rid of libGLU_combined 2019-11-18 20:10:43 +00:00
j treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
janet janet: 1.5.1 -> 1.6.0 2020-01-06 09:50:36 -08:00
jimtcl treewide: NIX_*_FLAGS -> string 2019-12-31 00:15:46 +01:00
joker joker: 0.12.9 -> 0.14.0 2020-01-10 19:39:34 -05:00
jruby jruby: 9.2.8.0 -> 9.2.9.0 2019-11-01 21:49:48 -07:00
jython treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
kona treewide: replace make/build/configure/patchFlags with nix lists 2019-12-30 12:58:11 +01:00
lfe tree-wide: replace uses of splitString "." with lib.versions 2019-09-26 17:42:49 +02:00
lolcode treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
love treewide: NIX_*_FLAGS -> string 2019-12-31 00:15:46 +01:00
lua-5 Merge remote-tracking branch 'upstream/master' into wrapper-pname-support 2019-11-24 17:25:07 +00:00
luajit luajit_2_0: fix the platforms/extraMeta 2019-10-13 14:07:01 +02:00
lush treewide: Get rid of libGLU_combined 2019-11-18 20:10:43 +00:00
maude treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
metamath treewide: installTargets is a list 2019-12-30 13:29:27 +01:00
micropython micropython: init at 1.12 2020-01-03 10:57:55 +01:00
mujs treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
nix-exec treewide: name -> pname 2019-08-17 10:54:38 +00:00
octave Merge branch 'master' into octave-gl2ps 2019-12-08 18:09:08 +00:00
perl perl: fix configure phase for Aarch32 2020-01-04 09:51:10 +09:00
php treewide: *inputs are lists 2019-12-31 01:09:25 +01:00
picoc treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
picolisp picolisp: 19.6 -> 19.12 2020-01-06 22:25:42 -08:00
pixie treewide: remove redundant quotes 2019-09-08 23:38:31 +00:00
proglodyte-wasm treewide: mark some broken packages as broken 2019-10-08 17:14:26 +02:00
pure treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00
pyrex treewide: name -> pname (#67513) 2019-08-31 07:41:22 -04:00
python Merge pull request #77610 from LnL7/darwin-stdenv-python3 2020-01-15 09:24:57 +01:00
qnial treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
quickjs quickjs: 2019-10-27 -> 2019-12-21 2020-01-01 19:31:18 -06:00
racket racket: 7.4 -> 7.5 2019-12-04 04:20:00 -05:00
rakudo treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
rascal treewide: use dontUnpack 2019-07-01 04:23:51 -04:00
rebol treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
red treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
regina treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
renpy treewide: Get rid of libGLU_combined 2019-11-18 20:10:43 +00:00
ruby ruby: remove references to CC by default 2020-01-09 15:54:59 +00:00
scheme48 scheme48: add license 2018-08-04 18:53:53 +02:00
scsh treewide: Make more complicated configureFlags lists 2018-08-03 17:06:03 -04:00
self treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
spidermonkey treewide: replace make/build/configure/patchFlags with nix lists 2019-12-30 12:58:11 +01:00
supercollider supercollider: 3.10.2 -> 3.10.3 2019-09-03 04:20:00 -05:00
tcl tcl: fix dangling symlink 2019-12-19 09:46:36 -05:00
tinyscheme treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
unicon-lang treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
wasm-gc treewide: name -> pname (#67513) 2019-08-31 07:41:22 -04:00
wasmtime wasmtime: 20191111 -> v0.8.0 2020-01-07 17:36:29 +01:00