Red Davies 2ddb0c7400 corosync: 2.4.3 -> 2.4.5 ...

Reason0: Changed name metadata to pname and version metadata.
Reason1: Fixes CVE-2018-1084

Corosync is prone to an integer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code
in the context of the affected application. Failed exploit
attempts will likely cause a denial-of-service condition.

Fixed in 2.4.4

See issue: #90784

2020-11-25 17:01:30 -05:00

..

applications

Merge pull request #103523 from r-ryantm/auto-update/rssguard

2020-11-24 02:59:45 +01:00

build-support

referencesByPopularity: Don't use buildPackages at call-site

2020-11-24 02:55:40 +01:00

common-updater

unstableUpdater: init

2020-11-21 11:28:45 +01:00

data

Merge pull request #103779 from alexameen/fix_google_fonts_adobe_blank

2020-11-23 07:38:20 +01:00

desktops

…

development

pythonPackages.asyncssh: Switch PyTestCheckHook, disable failing tests

2020-11-23 16:29:49 -08:00

games

Merge pull request #102269 from pkern/terraria

2020-11-24 00:17:47 +01:00

misc

seafile-shared: 7.0.8 -> 7.0.9

2020-11-23 20:41:08 +01:00

os-specific

Merge pull request #93176 from oxalica/init/swapview

2020-11-23 11:24:59 -08:00

pkgs-lib

…

servers

corosync: 2.4.3 -> 2.4.5

2020-11-25 17:01:30 -05:00

shells

dash: add patch to prevent code execution when noexec is set

2020-11-23 11:57:29 -08:00

stdenv

…

test

…

tools

Merge pull request #103594 from r-ryantm/auto-update/yafaray-core

2020-11-24 02:30:54 +01:00

top-level

referencesByPopularity: Don't use buildPackages at call-site

2020-11-24 02:55:40 +01:00