{"push_id":1437131080,"size":7,"distinct_size":7,"ref":"refs/heads/master","head":"724b87ba839e19048236db673b13cc4ff0f18827","before":"72bccdc078ab2d6ae5741e6bd886118a83ab11dd","commits":[{"sha":"c3d3bdc215881e2712843708c42978b7bac96ba9","author":{"name":"Lars Wendler","email":"e148fa001acd87d65338a1129b2e7e8698544915@gentoo.org"},"message":"app-shells/bash: Revbump to add popd offset overflow fix to bash-4.3 (#600174).\n\nPackage-Manager: portage-2.3.2","distinct":true,"url":"https://api.github.com/repos/gentoo-mirror/gentoo/commits/c3d3bdc215881e2712843708c42978b7bac96ba9"},{"sha":"6a35e4b98136e1aee0565435a9a039ffcbb7b8ef","author":{"name":"Lars Wendler","email":"e148fa001acd87d65338a1129b2e7e8698544915@gentoo.org"},"message":"app-shells/bash: Removed old.\n\nPackage-Manager: portage-2.3.2","distinct":true,"url":"https://api.github.com/repos/gentoo-mirror/gentoo/commits/6a35e4b98136e1aee0565435a9a039ffcbb7b8ef"},{"sha":"6371a02d00ea5b9bd43d92ab63ee8f81fa9b68e3","author":{"name":"Michael Orlitzky","email":"a4ae606e5b2e40b3eaab0159bd4dde589d43cdbe@gentoo.org"},"message":"net-analyzer/nagios-core: new revision and init script to fix CVE-2016-8641.\n\nThe new version 4.2.3 was added to fix CVE-2016-8641 in commit\nc9f880e. However, the root privilege exploit results from the use of\n\"chown\" in the init script. We don't use upstream's init script, so a\nproper fix requires an update to our init script as well.\n\nThe following changes were made to the init script:\n\n  * We no longer attempt to delete the external command file before\n    starting or stopping the daemon. It's not clear why this was done,\n    and that file should not exist unless the user intentionally\n    creates it.\n\n  * We do not create or change ownership of /var/nagios/nagios.log or\n    /var/nagios/status.sav when starting the daemon. The log file path\n    is defined in the config file, so the hard-coded path in the init\n    script might not have referred to the true location of the log file.\n\n    And when the nagios daemon creates these files on its own, they\n    should already have the correct permissions and ownership. By\n    removing the \"chown\", we have actually fixed the root privilege\n    exploit in CVE-2016-8641.\n\n  * The two files /var/nagios/status.log and /var/nagios/nagios.tmp are\n    not deleted after the daemon has shut down. I can come up with no\n    compelling argument to do so.\n\nGentoo-Bug: 600864\n\nPackage-Manager: portage-2.3.0","distinct":true,"url":"https://api.github.com/repos/gentoo-mirror/gentoo/commits/6371a02d00ea5b9bd43d92ab63ee8f81fa9b68e3"},{"sha":"977a01d81f75dc1e2fc0e6dc479b6ae13469aec4","author":{"name":"Mike Gilbert","email":"56874bd0af9ab7236ccd90ce881edda01cc304ad@gentoo.org"},"message":"net-misc/freerdp: fix ffmpeg dependency\n\nvirtual/ffmpeg is only for tools usage.\n\nPackage-Manager: portage-2.3.2_p13","distinct":true,"url":"https://api.github.com/repos/gentoo-mirror/gentoo/commits/977a01d81f75dc1e2fc0e6dc479b6ae13469aec4"},{"sha":"ebd3ec0fe10d86f231487cdc944ece5e4ee26371","author":{"name":"Mike Gilbert","email":"56874bd0af9ab7236ccd90ce881edda01cc304ad@gentoo.org"},"message":"www-client/chromium: dev channel bump (56.0.2924.14)\n\nDepends on >=media-video/ffmpeg-3.\n\nBug: https://bugs.gentoo.org/601604\nPackage-Manager: portage-2.3.2_p13","distinct":true,"url":"https://api.github.com/repos/gentoo-mirror/gentoo/commits/ebd3ec0fe10d86f231487cdc944ece5e4ee26371"},{"sha":"95e06a60c19a22536b2bd78d10ca7f6c86e895f8","author":{"name":"Repository QA checks","email":"282e4d7332ae3c5b424f3626cf99110df945e4de@gentoo.org"},"message":"Merge updates from master","distinct":true,"url":"https://api.github.com/repos/gentoo-mirror/gentoo/commits/95e06a60c19a22536b2bd78d10ca7f6c86e895f8"},{"sha":"724b87ba839e19048236db673b13cc4ff0f18827","author":{"name":"Repository QA checks","email":"282e4d7332ae3c5b424f3626cf99110df945e4de@gentoo.org"},"message":"2016-12-04 16:26:02 UTC","distinct":true,"url":"https://api.github.com/repos/gentoo-mirror/gentoo/commits/724b87ba839e19048236db673b13cc4ff0f18827"}]}
{"actor":{"display_login":"gentoo-repo-qa-bot"}}