{"push_id":2896065865,"size":24,"distinct_size":24,"ref":"refs/heads/1.6","head":"d2451f3f469e34ef755b8c73c683b6f7db8582ee","before":"5dbda4be65611159e951f0c30409793ceda20fb5","commits":[{"sha":"c23d7cfb6588c48a4e8da2fa22ad59b9ba01206e","author":{"name":"Alberto Ruiz","email":"d2f019744f8979e21d34ffd0559f4b5f32e49672@gnome.org"},"message":"Update broken links for p11-kit and libverto","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/c23d7cfb6588c48a4e8da2fa22ad59b9ba01206e"},{"sha":"0b12d3c2d57e30109fa4abc865b1d795d596572a","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"python: Enable ucs4 unicode mode\n\nThis matches what basically all distros do. However, it is\nan ABI break, so we will have to update all known apps that may\nlink to python.\n\nSee:\n  https://github.com/flatpak/freedesktop-sdk-base/issues/18\nFor tracking the ABI change","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/0b12d3c2d57e30109fa4abc865b1d795d596572a"},{"sha":"0f966a64bab45c580d22e4ea0d96ccb7e2f60b93","author":{"name":"Michael Catanzaro","email":"757f5bb409f1c48343a595d2e53cbd9d9fe6f508@igalia.com"},"message":"Set a default trust store for GnuTLS\n\nOtherwise, the changes I am planning in\nhttps://bugzilla.gnome.org/show_bug.cgi?id=753260 are going to break\nglib-networking for Flatpak.","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/0f966a64bab45c580d22e4ea0d96ccb7e2f60b93"},{"sha":"64a04777f578f06ec903a41879ca62d93f5eb181","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"Update p11-kit to 0.23.10\n\nThis version has the needed stuff for https://github.com/p11-glue/p11-kit/issues/68 so\nwe can do a read-only remote cert forward","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/64a04777f578f06ec903a41879ca62d93f5eb181"},{"sha":"b07628d27983cc375a18cd47d5d792b36f8f1d9f","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"Add gnutls-bin to sdk","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/b07628d27983cc375a18cd47d5d792b36f8f1d9f"},{"sha":"ab9382725d2589863182b0545f8a674e505fe655","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"Add build.sh for building using org.flatpak.Builder\n\nAlso make \"make sandboxed\" use this.","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/ab9382725d2589863182b0545f8a674e505fe655"},{"sha":"8ce15bf9b709836e36980c1c021ff1dbe17f31a9","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"Update yocto to latest monty\n\nMajor changes affecting us:\n * Update to gcc 6.4\n * libvorbis CVE fixes\n * new tzdata version\n * Update to ruby 2.4.3","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/8ce15bf9b709836e36980c1c021ff1dbe17f31a9"},{"sha":"e6155d7d1583a117150875aac83cd9e2ca4bcd55","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"libtiff: Add patch for CVE-2017-9403","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/e6155d7d1583a117150875aac83cd9e2ca4bcd55"},{"sha":"41653771ebb1fc394062449ee9b9b091f5f235ea","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"glibc: Patch CVE-2017-18269 and CVE-2018-6551","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/41653771ebb1fc394062449ee9b9b091f5f235ea"},{"sha":"9acf62f94877620ae43f247b6bd1628c97894e12","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"openssl: patch CVEs: 2017-3735, 2017-3737, 2017-3738, 2018-0732, 2018-0739","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/9acf62f94877620ae43f247b6bd1628c97894e12"},{"sha":"06d1caee2481fe1bd93ff26fdecf4cd6ced0753a","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"unzip: Fix CVEs: 2014-9913, CVE-2015-7697, 2016-9844.patch","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/06d1caee2481fe1bd93ff26fdecf4cd6ced0753a"},{"sha":"a0a406158957f1d0b359018a35df4545c5f13e47","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"libarchive: Fix CVEs 2016-10209, 2016-10349, 2016-10350, CVE-2017-5601","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/a0a406158957f1d0b359018a35df4545c5f13e47"},{"sha":"a29b62680c80f00b6f2203ad2367cc4bcbf9be06","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"curl: patch CVEs\n\nThis fixes: 2017-8816, 2017-8817, 2018-1000120, 2018-1000121,\n2018-1000122, 2018-1000301","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/a29b62680c80f00b6f2203ad2367cc4bcbf9be06"},{"sha":"c69b898b9883f7a14f87db77f5cbf2106601edde","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"gnutls: Fix CVEs: 2017-5334 2017-5335 2017-5336 2017-5337","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/c69b898b9883f7a14f87db77f5cbf2106601edde"},{"sha":"c0fc6bb7d748d1337afa7dc3a3bd2fbdf445bcdc","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"libgcrypt: Patch CVE-2018-0495","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/c0fc6bb7d748d1337afa7dc3a3bd2fbdf445bcdc"},{"sha":"855eb11b5a29f0ffc80e2597d47227bf741b9b32","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"libpng: Patch CVE 2016-10087","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/855eb11b5a29f0ffc80e2597d47227bf741b9b32"},{"sha":"807dceb16693d17a76fc35a9c9aef48f8587bf0d","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"libsndfile: Patch CVEs\n\nAdd debian patches, fixing:\n\n    CVE-2017-7585\n    CVE-2017-7586\n    CVE-2017-7741\n    CVE-2017-7742\n    CVE-2017-8362\n    CVE-2017-8363\n    CVE-2017-8365","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/807dceb16693d17a76fc35a9c9aef48f8587bf0d"},{"sha":"d936ed9bfff71f3d1b98039c627d6b2b8c06194e","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"icu: Patch CVEs\n\nThis imports the debian CVE fixes for:\n\n CVE-2014-6585\n CVE-2015-4760\n CVE-2016-0494\n CVE-2016-6293\n CVE-2016-7415\n CVE-2017-14952\n CVE-2017-15422\n CVE-2017-7867\n CVE-2017-7868","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/d936ed9bfff71f3d1b98039c627d6b2b8c06194e"},{"sha":"a583f1e9101c5ac407e6684f261f09088da9216a","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"nss: Patch CVE 2017-5462","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/a583f1e9101c5ac407e6684f261f09088da9216a"},{"sha":"f63fcd34725a6c178b330ec66ffde983b98deb05","author":{"name":"Alexander Larsson","email":"8c32c4b573bb86be9076a894bc9e0dfe2b512e8a@redhat.com"},"message":"python2: Fix CVE 2018-1060, 2018-1061","distinct":true,"url":"https://api.github.com/repos/alexlarsson/freedesktop-sdk-base/commits/f63fcd34725a6c178b330ec66ffde983b98deb05"}]}
{"actor":{"display_login":"alexlarsson"}}