1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-03 02:51:18 +00:00
nixpkgs/pkgs/tools
Anders Kaseorg 3cd8ce3bce treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH
Naive concatenation of $LD_LIBRARY_PATH can result in an empty
colon-delimited segment; this tells glibc to load libraries from the
current directory, which is definitely wrong, and may be a security
vulnerability if the current directory is untrusted.  (See #67234, for
example.)  Fix this throughout the tree.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-01-15 09:47:03 +01:00
..
admin Merge pull request #77670 from amarrella/update/eksctl 2020-01-14 21:49:58 -05:00
archivers treewide: installFlags is a list 2019-12-30 13:22:43 +01:00
audio treewide: NIX_*_FLAGS -> string 2019-12-31 00:15:46 +01:00
backup duplicati: 2.0.4.5 -> 2.0.4.23 2020-01-09 07:40:16 +01:00
bluetooth obexfs: add missing bluez dep 2020-01-09 12:30:31 -08:00
bootloaders/refind
cd-dvd treewide: installTargets is a list 2019-12-30 13:29:27 +01:00
compression Merge pull request #75798 from tobim/pkgsStatic/arrow 2020-01-03 10:13:31 +01:00
filesystems treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00
graphics Merge pull request #77187 from r-ryantm/auto-update/pstoedit 2020-01-12 04:24:06 +01:00
inputmethods treewide: fix *Flags 2019-12-30 04:50:37 +01:00
misc coreutils: Fix cross compilation for Android 2020-01-15 09:44:10 +01:00
networking curl: 7.67.0 -> 7.68.0 2020-01-15 09:40:40 +01:00
nix
package-management Merge master into staging-next 2020-01-11 09:32:41 +01:00
security treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00
system Merge master into staging-next 2020-01-07 20:06:22 +01:00
text treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00
toml2nix
typesetting texlive: make updmap actually regenerate (#76826) (#76867) 2020-01-07 13:17:40 -05:00
video bento4: 1.5.1-628 -> 1.5.1-629 2020-01-05 21:08:12 -08:00
virtualization
wayland/ydotool
X11 treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00