{"action":"opened","issue":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/47123","repository_url":"https://api.github.com/repos/NixOS/nixpkgs","labels_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/47123/labels{/name}","comments_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/47123/comments","events_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/47123/events","html_url":"https://github.com/NixOS/nixpkgs/issues/47123","id":362609228,"node_id":"MDU6SXNzdWUzNjI2MDkyMjg=","number":47123,"title":"Vulnerability roundup 47 (release-18.03)","user":{"login":"ckauhaus","id":1448923,"node_id":"MDQ6VXNlcjE0NDg5MjM=","avatar_url":"https://avatars0.githubusercontent.com/u/1448923?v=4","gravatar_id":"","url":"https://api.github.com/users/ckauhaus","html_url":"https://github.com/ckauhaus","followers_url":"https://api.github.com/users/ckauhaus/followers","following_url":"https://api.github.com/users/ckauhaus/following{/other_user}","gists_url":"https://api.github.com/users/ckauhaus/gists{/gist_id}","starred_url":"https://api.github.com/users/ckauhaus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ckauhaus/subscriptions","organizations_url":"https://api.github.com/users/ckauhaus/orgs","repos_url":"https://api.github.com/users/ckauhaus/repos","events_url":"https://api.github.com/users/ckauhaus/events{/privacy}","received_events_url":"https://api.github.com/users/ckauhaus/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-09-21T13:10:49Z","updated_at":"2018-09-21T13:10:49Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"Scanned nixos/release-combined.nix @ d16a7ab. Filtered out previously reported CVEs. May contain false positives.\r\n\r\n### accountsservice-0.6.46 ([search](https://search.nix.gsc.io/?q=accountsservice&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=accountsservice+in%3Apath&type=Code))\r\n - [ ] [CVE-2018-14036](https://nvd.nist.gov/vuln/detail/CVE-2018-14036)\r\n\r\n### exempi-2.4.5 ([search](https://search.nix.gsc.io/?q=exempi&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=exempi+in%3Apath&type=Code))\r\n - [ ] [CVE-2018-12648](https://nvd.nist.gov/vuln/detail/CVE-2018-12648)\r\n\r\n### exiv2-0.26 ([search](https://search.nix.gsc.io/?q=exiv2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=exiv2+in%3Apath&type=Code))\r\n - [ ] [CVE-2018-14046](https://nvd.nist.gov/vuln/detail/CVE-2018-14046)\r\n - [ ] [CVE-2018-14338](https://nvd.nist.gov/vuln/detail/CVE-2018-14338)\r\n\r\n### ffmpeg-3.4.4 ([search](https://search.nix.gsc.io/?q=ffmpeg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ffmpeg+in%3Apath&type=Code))\r\n - [ ] [CVE-2018-14394](https://nvd.nist.gov/vuln/detail/CVE-2018-14394)\r\n - [ ] [CVE-2018-14395](https://nvd.nist.gov/vuln/detail/CVE-2018-14395)\r\n\r\n### libtiff-4.0.9 ([search](https://search.nix.gsc.io/?q=libtiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libtiff+in%3Apath&type=Code))\r\n - [ ] [CVE-2018-12900](https://nvd.nist.gov/vuln/detail/CVE-2018-12900)\r\n\r\n### lua-5.1.5 ([search](https://search.nix.gsc.io/?q=lua&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lua+in%3Apath&type=Code))\r\n - [ ] [CVE-2014-5461](https://nvd.nist.gov/vuln/detail/CVE-2014-5461)\r\n\r\n### openjpeg-2.3.0 ([search](https://search.nix.gsc.io/?q=openjpeg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openjpeg+in%3Apath&type=Code))\r\n - [ ] [CVE-2018-14423](https://nvd.nist.gov/vuln/detail/CVE-2018-14423)\r\n\r\n### procps-3.3.15 ([search](https://search.nix.gsc.io/?q=procps&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=procps+in%3Apath&type=Code))\r\n - [ ] [CVE-2018-1121](https://nvd.nist.gov/vuln/detail/CVE-2018-1121)\r\n\r\n### sddm-0.17.0 ([search](https://search.nix.gsc.io/?q=sddm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=sddm+in%3Apath&type=Code))\r\n - [ ] [CVE-2018-14345](https://nvd.nist.gov/vuln/detail/CVE-2018-14345)\r\n\r\n### zip-3.0 ([search](https://search.nix.gsc.io/?q=zip&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=zip+in%3Apath&type=Code))\r\n - [ ] [CVE-2018-13410](https://nvd.nist.gov/vuln/detail/CVE-2018-13410)\r\n\r\nCc: @joepie91, @phanimahesh, @the-kenny, @7c6f434c, @k0001, @peterhoeg, @nh2, @LnL7, @grahamc, @adisbladis, @fpletz, @vcunat\r\n\r\nContact @ckauhaus for any questions.\r\n\r\n"}}
{"actor":{"display_login":"ckauhaus"}}