Code

Shipping Security Updates#10851

Code

Closed

nbp wants to merge 12 commits intoNixOS:masterNixOS/nixpkgs:masterfrom nbp:security-updatesnbp/nixpkgs-2:security-updatesCopy head branch name to clipboard

+731-18

Commits

Commits on Mar 24, 2016

• Extract all imports out of pkgsWithOvverrides.

  Show description for ad1572c
  nbp

  committed
  ad1572c

  Copy full SHA for ad1572c

• Add pkgsWithPackages function, and split pkgs expression.

  nbp

  committed
  c2134e1

  Copy full SHA for c2134e1

• Move the fix-point from pkgsWithOverridesWithPackages to pkgs, and add the unfix prefix to functions.

  nbp

  committed
  e0efe6c

  Copy full SHA for e0efe6c

Commits on Mar 26, 2016

• Add maybeApplyAbiCompatiblePatches, as well as the quickfixPackages argument.

  nbp

  committed
  187776f

  Copy full SHA for 187776f

• Add applyAbiCompatiblePatches function.

  Show description for c40639d
  nbp

  committed
  c40639d

  Copy full SHA for c40639d

• Add a flag for buildfarms, to turn off the abiCompatiblePatches while running the quick-fixes.

  nbp

  committed
  9f6ccac

  Copy full SHA for 9f6ccac

• Add a static analysis to report security issues.

  Show description for 0b4d9b1
  nbp

  committed
  0b4d9b1

  Copy full SHA for 0b4d9b1

Commits on Apr 2, 2016

• Add a test case to verify that security fixes are correctly applied.

  Show description for 2cc9534
  nbp

  committed
  2cc9534

  Copy full SHA for 2cc9534

• Add test cases to ensure that the onefix, and abifix are keeping the same hashes if there is no fixes.

  nbp

  committed
  ca70916

  Copy full SHA for ca70916

• Add security test cases as release blockers.

  nbp

  committed
  8729a70

  Copy full SHA for 8729a70

• Make patchUpdatedDependencies lazier, to accept loops with override function calls.

  nbp

  committed
  9b88a3b

  Copy full SHA for 9b88a3b

• Security Static Analysis: forceNativeDrv and lowPrio are not changing the evaluation depth of the derivations.

  nbp

  committed
  847405c

  Copy full SHA for 847405c