{"push_id":1011405035,"size":38,"distinct_size":38,"ref":"refs/heads/release-15.09","head":"f6d1666b4c18925ca4175dccc7363ffab1b24d76","before":"478d32d64a3f5ef27319b5ba8efc3fb008d5f630","commits":[{"sha":"9dbef54378811bf3b95b41b17e3691ed7e428db7","author":{"email":"2df8353a7dde1aec9e45e5618f14c2d7e3007ca4@phunehehe.net","name":"Hoang Xuan Phu"},"message":"bump bundler-head to 1.8.9","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/9dbef54378811bf3b95b41b17e3691ed7e428db7"},{"sha":"37252fe6dabe554339cdd864ced8693415dbfa91","author":{"email":"18bcce67ef2f5d2b4420605f7a02256a2eeb2f91@bendlas.net","name":"Herwig Hochleitner"},"message":"dropbox: 3.12.6 -> 3.14.5 (release 15.09)\n\nAlso updates qt5 dependency to qt55, as per release notes: https://www.dropboxforum.com/hc/en-us/community/posts/205672126-Release-Candidate-3-14-5","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/37252fe6dabe554339cdd864ced8693415dbfa91"},{"sha":"fe32d292bfd56df3518837f7ed8d958ca3794f31","author":{"email":"18bcce67ef2f5d2b4420605f7a02256a2eeb2f91@bendlas.net","name":"Herwig Hochleitner"},"message":"dropbox: 3.14.5 -> 3.14.7","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/fe32d292bfd56df3518837f7ed8d958ca3794f31"},{"sha":"6647ce67fae27dfc6b1ee1677249b24c74ec2168","author":{"email":"d053fff6c1dd5a6f0bb9d13e16d51544711388e9@gmail.com","name":"Charles Strahan"},"message":"ghcjs: fix building with cabal-install-1.22.8.0\n\n(cherry picked from commit bbce88302a98338f014e7978e128f438dec3cc2d)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/6647ce67fae27dfc6b1ee1677249b24c74ec2168"},{"sha":"8ea0c7cf6eca98cacd3bc1d481bf20624f048be0","author":{"email":"d053fff6c1dd5a6f0bb9d13e16d51544711388e9@gmail.com","name":"Charles Strahan"},"message":"ghcjs: use native ghc to build Setup.hs\n\n(cherry picked from commit 97d9071b95e25eb2d9840b0f24639e2fb8eab5e0)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/8ea0c7cf6eca98cacd3bc1d481bf20624f048be0"},{"sha":"1504cc7b044a1452b7aeb0640625774929f3444c","author":{"email":"d053fff6c1dd5a6f0bb9d13e16d51544711388e9@gmail.com","name":"Charles Strahan"},"message":"ghcjs: don't propagate Cabal to all packages\n\nPreviously, we were compiling Setup.hs with ghcjs (instead of  ghc),\nand that required that Cabal be available, otherwise the Setup.hs would\nfail to compile.\n\nNow that we are compiling Setup.hs with ghc, it's no longer necessary\nto add Cabal as a dependency to all ghcjs packages.\n\n(cherry picked from commit e6e9970891781768d85a1c3005c2486b591723c7)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/1504cc7b044a1452b7aeb0640625774929f3444c"},{"sha":"ffe80607f7c261d07cd90c42c31b12c9f54c20f2","author":{"email":"d053fff6c1dd5a6f0bb9d13e16d51544711388e9@gmail.com","name":"Charles Strahan"},"message":"ghcjs: replace integer-simple with integer-gmp\n\nGHCJS uses integer-gmp, but cabal2nix generates a dependency list that\nincludes integer-simple instead. This tweaks the stage2 generator to\nreplace any instance of integer-simple with integer-gmp.\n\nThings currently still work without this change (assuming\ninteger-simple is defined as null), as ghcjs includes integer-gmp in\nits stage1 packages - so it's always available.\n\nHowever, this change makes things a bit more explicit, rather than\nleaving things to chance. If at any point the stage1 packages are also\nsplit up into separate derivations, the integer-gmp package will need to\nbe passed along to the packages that depend on it. This change should\nprevent some confusion going forward.\n\n(cherry picked from commit 516057ffa9746ac1bf58d5a868957c18c5b5a252)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/ffe80607f7c261d07cd90c42c31b12c9f54c20f2"},{"sha":"6dc374c91fd83111bad8eb4be20c741a99ab024d","author":{"email":"d053fff6c1dd5a6f0bb9d13e16d51544711388e9@gmail.com","name":"Charles Strahan"},"message":"ghcjs-shims: 2016/01/07 -> 2016/02/10\n\nBump revisions: 45f44f5f027 -> 4df1808d031\n\n(cherry picked from commit c374ce26b0dec50bfd51aab86bc61648296e28d4)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/6dc374c91fd83111bad8eb4be20c741a99ab024d"},{"sha":"208b620bf0db2f8399ca87ea5c96ffa335b16ed8","author":{"email":"5ee0edb9e2229c0838f1959779f1949031de0123@nequissimus.com","name":"Tim Steinbach"},"message":"linux_4_3: 4.3.4 -> 4.3.6 (close #13408)\n\n(cherry picked from commit a2bd90650d319bf86a601a778388476daa9883f2)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/208b620bf0db2f8399ca87ea5c96ffa335b16ed8"},{"sha":"b28ed38457c36c88a8c7e6ff03cc1719ea2bceec","author":{"email":"5ee0edb9e2229c0838f1959779f1949031de0123@nequissimus.com","name":"Tim Steinbach"},"message":"linux_3_14: 3.14.60 -> 3.14.61 (close #13407)\n\n(cherry picked from commit 08cf57204f83cac4454b6b67946f0dd039aae94d)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/b28ed38457c36c88a8c7e6ff03cc1719ea2bceec"},{"sha":"8bdb164a1cc7d7e8b1448669dad1bdef6323b543","author":{"email":"5ee0edb9e2229c0838f1959779f1949031de0123@nequissimus.com","name":"Tim Steinbach"},"message":"linux_3_12: 3.12.53 -> 3.12.54 (close #13406)\n\n(cherry picked from commit 642517fbda94d7c7fcd77ad910812d6d42a40760)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/8bdb164a1cc7d7e8b1448669dad1bdef6323b543"},{"sha":"a376adce73bd86cb005f8507c5d05792558e3497","author":{"email":"94d83425409de9ee56d459272701873ba7720bde@gmail.com","name":"Vladimír Čunát"},"message":"libssh: security update 0.7.1 -> 0.7.3\n\nIt's supposed to fix CVE-2016-0739: weak secret with diffie-hellman.\n\n(cherry picked from commit 0ee46ddffbd3b8afb585021cd724bc93a9adca04)\nI'm lazy to isolate a patch for CVE itself, so we're getting the usual\nbugfixes as well.","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/a376adce73bd86cb005f8507c5d05792558e3497"},{"sha":"d8aae2964d387eb98ff016fd7696729331f1b2e9","author":{"email":"a175f38389e09b92ea81d89428d08876c6be93d0@tatapa.org","name":"taku0"},"message":"thunderbird-bin: 38.5.1 -> 38.6.0 (close #13437)\n\n(cherry picked from commit ce763e2d663cf3d79f5c679043bd815cc15a4fa0)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/d8aae2964d387eb98ff016fd7696729331f1b2e9"},{"sha":"9b9a9ee7caf3a39b7f34854d8bd86f2ac3fbcc75","author":{"email":"5ca27e75aea3e5e83a04c6cfa5f1b63d358cd03d@grahamc.com","name":"Graham Christensen"},"message":"chromium{,Beta,Dev}: 48.0.2564.97 -> 48.0.2564.116\n\nFrom the debian security mailing list:\n\nSeveral vulnerabilities have been discovered in the chromium web browser.\n\nCVE-2016-1622\n\n    It was discovered that a maliciously crafted extension could bypass\n    the Same Origin Policy.\n\nCVE-2016-1623\n\n    Mariusz Mlynski discovered a way to bypass the Same Origin Policy.\n\nCVE-2016-1624\n\n    lukezli discovered a buffer overflow issue in the Brotli library.\n\nCVE-2016-1625\n\n    Jann Horn discovered a way to cause the Chrome Instant feature to\n    navigate to unintended destinations.\n\nCVE-2016-1626\n\n    An out-of-bounds read issue was discovered in the openjpeg library.\n\nCVE-2016-1627\n\n    It was discovered that the Developer Tools did not validate URLs.\n\nCVE-2016-1628\n\n    An out-of-bounds read issue was discovered in the pdfium library.\n\nCVE-2016-1629\n\n    A way to bypass the Same Origin Policy was discovered in Blink/WebKit,\n    along with a way to escape the chromium sandbox.\n\n(cherry picked from commit 712d59225e52c7636e315cb2cce35e357114b183)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/9b9a9ee7caf3a39b7f34854d8bd86f2ac3fbcc75"},{"sha":"27a86495a3af5af7a46e3bec2cbbb097e4d089e7","author":{"email":"2510a6bd204d03d1ddabd16aea1928eca92e8cb3@iki.fi","name":"Tuomas Tynkkynen"},"message":"linux-3.10: fixup config by a slightly hacky way\n\nFor explanation see:\nhttps://github.com/NixOS/nixpkgs/pull/13405#issuecomment-188357637\n\n(cherry picked from commit 0e1319f03ffe5b9b365d056c1bc5d18e1a5b75ea)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/27a86495a3af5af7a46e3bec2cbbb097e4d089e7"},{"sha":"ba559fcbfc12033fd87432be40332be8191a410b","author":{"email":"5ee0edb9e2229c0838f1959779f1949031de0123@nequissimus.com","name":"Tim Steinbach"},"message":"linux_3_10: 3.10.96 -> 3.10.97 (close #13405)\n\n(cherry picked from commit 7506c58d74553d7801c3f09be34f05015d70e53b)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/ba559fcbfc12033fd87432be40332be8191a410b"},{"sha":"c7834513bd3757e15675f6a87dfd65bcf34856d0","author":{"email":"5ca27e75aea3e5e83a04c6cfa5f1b63d358cd03d@grahamc.com","name":"Graham Christensen"},"message":"xerces-c: 3.1.1 -> 3.1.3\n\nSecurity & bugfix release. See #13454.\n\n(cherry picked from commit f91c979f8aaa329de089d3d4e0dd56a6bb9d922a)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/c7834513bd3757e15675f6a87dfd65bcf34856d0"},{"sha":"e49d3ba6d7f9982c7b1b1a4823bb31694b35af98","author":{"email":"5ca27e75aea3e5e83a04c6cfa5f1b63d358cd03d@grahamc.com","name":"Graham Christensen"},"message":"libssh2: 1.6.0 -> 1.7.0\n\n    This release includes the following changes:\n      o libssh2_session_set_last_error: Add function\n      o mac: Add support for HMAC-SHA-256 and HMAC-SHA-512\n      o WinCNG: support for SHA256/512 HMAC\n      o kex: Added diffie-hellman-group-exchange-sha256 support\n      o OS/400 crypto library QC3 support\n    This release includes the following security advisory:\n      o diffie_hellman_sha256: convert bytes to bits\n        CVE-2016-0787: http://www.libssh2.org/adv_20160223.html\n    This release includes the following bugfixes:\n      o SFTP: Increase speed and datasize in SFTP read\n      o openssl: make libssh2_sha1 return error code\n      o openssl: fix memleak in _libssh2_dsa_sha1_verify()\n      o cmake: include CMake files in the release tarballs\n      o Fix builds with Visual Studio 2015\n      o hostkey.c: Fix compiling error when OPENSSL_NO_MD5 is defined\n      o GNUmakefile: add support for LIBSSH2_LDFLAG_EXTRAS\n      o GNUmakefile: add -m64 CFLAGS when targeting mingw64\n      o kex: free server host key before allocating it (again)\n      o SCP: add libssh2_scp_recv2 to support large (> 2GB) files on windows\n      o channel: Detect bad usage of libssh2_channel_process_startup\n      o userauth: Fix off by one error when reading public key file\n      o kex: removed dupe entry from libssh2_kex_methods\n      o _libssh2_error: Support allocating the error message\n      o hostkey: fix invalid memory access if libssh2_dsa_new fails\n      o hostkey: align code path of ssh_rsa_init to ssh_dss_init\n      o libssh2.pc.in: fix the output of pkg-config --libs\n      o wincng: fixed possible memory leak in _libssh2_wincng_hash\n      o wincng: fixed _libssh2_wincng_hash_final return value\n      o add OpenSSL 1.1.0-pre2 compatibility\n      o agent_disconnect_unix: unset the agent fd after closing it\n      o sftp: stop reading when buffer is full\n      o sftp: Send at least one read request before reading\n      o sftp: Don't return EAGAIN if data was written to buffer\n      o sftp: Check read packet file offset\n      o configure: build \"silent\" if possible\n      o openssl: add OpenSSL 1.1.0-pre3-dev compatibility\n      o GNUmakefile: list system libs after user libs\n\n(cherry picked from commit 737e808913be98d674c280711cdd2304e0c79a50)\n\nSecurity fix. See #13473.","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/e49d3ba6d7f9982c7b1b1a4823bb31694b35af98"},{"sha":"aad885192dabfca8a971e2d923177ac6d2b3278b","author":{"email":"5ca27e75aea3e5e83a04c6cfa5f1b63d358cd03d@grahamc.com","name":"Graham Christensen"},"message":"cpio: patch CVE-2016-2037, out of bounds write (close #13489)\n\n(cherry picked from commit 483a130f894505917c00cb6d4eca50225fde4c38)","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/aad885192dabfca8a971e2d923177ac6d2b3278b"},{"sha":"6c9421370a81c4777928654188b320bfb1d45e7f","author":{"email":"d854b1d3ed5139007a744537899948b07cb6574e@fnordicwalking.de","name":"Franz Pletz"},"message":"Merge pull request #12787 from phunehehe/bundler-head-1.8.9\n\nbump bundler-head to 1.8.9","distinct":true,"url":"https://api.github.com/repos/abuibrahim/nixpkgs/commits/6c9421370a81c4777928654188b320bfb1d45e7f"}]}