nixpkgs/pkgs
Florian Klink 9f6a942fc7 zziplib: 0.13.67 -> 0.13.68
Bump zziplib to 0.13.68 to fix multiple CVE issues:

 - CVE-2018-6381
 (a803559fa9)
 - CVE-2018-6484
 (https://github.com/gdraheim/zziplib/issues/14#issuecomment-363198084)
 - CVE-2018-6540
 (72ec933663)
 - CVE-2018-6541
 (https://github.com/gdraheim/zziplib/issues/16#issuecomment-363197718)
 - CVE-2018-6542
 (931f962ddf)

Unfortunately, getting only those patches is hard, as they're not well
referenced to linked issues. The testsuite checking for vulns
requires network access (so we can't easily test it here).

https://github.com/gdraheim/zziplib/issues/20 might still be an issue,
so keeping this as a TODO here.
2018-02-23 21:39:48 +01:00
..
applications electrum: Patch compat with python trezor>=0.9.0 2018-02-22 18:43:57 +08:00
build-support buildBazelPackage: init 2018-02-20 20:39:49 +03:00
common-updater update-source-version: Fix regex metacharacter 2018-02-17 22:34:12 +02:00
data Merge pull request #35137 from volth/patch-88 2018-02-20 15:49:51 +00:00
desktops xdg-desktop-portal-kde: init at 5.12.1 2018-02-22 16:01:28 +08:00
development zziplib: 0.13.67 -> 0.13.68 2018-02-23 21:39:48 +01:00
games openra: 20171014 -> 20180218 2018-02-21 00:27:31 +01:00
misc Merge pull request #35134 from xeji/mfcl2720dw 2018-02-21 10:28:24 +00:00
os-specific Merge pull request #35325 from peterhoeg/u/dbusb 2018-02-22 17:42:18 +08:00
servers Merge pull request #35254 from aborsu/nextcloud 2018-02-22 05:51:22 +00:00
shells define top-level attrs for getent, getconf 2018-02-13 11:47:16 -06:00
stdenv Merge branch 'master' into staging 2018-02-20 20:33:40 +01:00
test sierra-shared-test: fix build 2018-01-05 23:20:55 +01:00
tools fcitx-engines.table-other: 0.2.3 -> 0.2.4 2018-02-22 11:30:40 +01:00
top-level Merge pull request #35325 from peterhoeg/u/dbusb 2018-02-22 17:42:18 +08:00