# issues

state: closed
title: git-crypt: allow any platform
user_login: manveru
html_url: https://github.com/NixOS/nixpkgs/pull/18811
updated_at: 2016-09-30 22:49:01
body:
  ###### Motivation for this change

  Since this works anywhere that its dependencies work, and I get tired of patching it everytime i want to install on darwin.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: pythonPackages.python-Levenshtein: init at 0.12.0
user_login: aske
html_url: https://github.com/NixOS/nixpkgs/pull/18812
updated_at: 2016-09-21 15:21:21
body:
  ###### Motivation for this change

  Required for `ibus-uniemoji` (will add it later).
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: nvme-cli: init at 0.9
user_login: tavyc
html_url: https://github.com/NixOS/nixpkgs/pull/18814
updated_at: 2016-09-22 20:47:57
body:
  ###### Motivation for this change

  This adds a package for nvme-cli, a set of tools to manage NVMe SSDs on Linux.

  Tested on release-16.09 with a Samsung 950 Pro SSD.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ibus-engines.uniemoji: init at 2016-09-20
user_login: aske
html_url: https://github.com/NixOS/nixpkgs/pull/18815
updated_at: 2016-10-01 02:57:29
body:
  ###### Motivation for this change

  Add input method for ibus which allows to enter unicode emoji and other symbols by name
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: lib.options: automatically generate example for booleans
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18816
updated_at: 2017-03-17 22:18:43
body:
  ###### Motivation for this change

  Remove the need to provide an example for boolean options. Since there are only two possibilities, setting `example = !default` is reasonable. This should remove the amount of boilerplate in nixpkgs by a few hundred lines.

  Also catches cases where `type == bool` but `default` is not defined and provides `example = true`.

  The second commit catches cases where `type != bool` but `isBool default` holds (type may be undefined or something like `nullOr bool`) and `!default` is a valid value.
  If this is too expensive we can also drop it, but since this is only executed for the manual generation, it should be ok. 

  The first commit adds 853 example values to options-db.xml, the second one another 3.

  ref #18803 could use this :wink: 
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Rfc htpdate
user_login: Jookia
html_url: https://github.com/NixOS/nixpkgs/pull/18818
updated_at: 2016-09-23 13:19:59
body:
  ###### Motivation for this change

  This PR adds the htpdate utility as well as a NixOS service to run it as a daemon.
  ###### Things done
  - [x] Tested using sandboxing
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: OCaml Compiler Versions
user_login: maurer
html_url: https://github.com/NixOS/nixpkgs/issues/18819
updated_at: 2017-03-31 22:37:11
body:
  We currently have support for a huge number of OCaml compilers, from the truly ancient 3.0.8, up to 4.02.3.

  An increasing number of OCaml packages are mandating 4.02 or higher to build - in the tree right now, 57 packages which either fail to build with OCaml < 4.02, need to use an older version of the package, or need to add configure switches/patches to disable features.

  This problem is not going away, it's only getting worse - of the packages I've been adding to the tree for work, only one of them did not mandate OCaml >=4.02 to work.

  To exacerbate the situation, OCaml is switching to a new macro system (`ppx`) which is only supported in 4.02 and up. In #18572 I've tried to keep support around for the `camlp4` stuff around, but this is mostly a stopgap measure.

  We need to make a few decisions:
  1. Do we want to change the default OCaml version?
  2. Do we really want to keep all these versions around?
  3. Do we want to support `camlp4` in the future?

  Personally, I'd propose:
  1. Bump default OCaml to 4.02
  2. Keep a minimal set of compiler versions (hopefully just 4.02 + one other) in order to keep any applications (not libraries) which may depend on older OCaml working.
  3. Similarly to legacy OCaml compiler support, I'd recommend keeping `camlp4` versions of libraries around only in cases where they are used by a binary.

  Obviously I'm not the one to make the decision, but something needs to be done about this or it's only going to get more difficult to keep up with the OCaml ecosystem.


state: closed
title: pg_repack: init at 1.3.4
user_login: danbst
html_url: https://github.com/NixOS/nixpkgs/pull/18820
updated_at: 2016-09-22 20:46:47
body:
  ###### Motivation for this change

  pg_repack is a great extension for removing bloat from databases online. It supports postgresqls up to 9.5. In my case, it reduced database size from 70G to 40G without downtime.

  It should be used as postgresql plugin. e.g.:

  ```
      services.postgresql.extraPlugins = [ pkgs.pg_repack ];
  ```
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Allow access to /dev/net/tun inside containers
user_login: wlhlm
html_url: https://github.com/NixOS/nixpkgs/pull/18822
updated_at: 2018-11-13 23:11:23
body:
  This allows containers to access `/dev/net/tun` by adding an option `containers.<name>.enableTun` that enables the correct capabilities and permissions for the container.

  Also adds two generic options `containers.<name>.additionalCapabilitites` and `containers.<name>.allowedDevices` that help adding things like FUSE access (`/dev/fuse`) later down the road.
  ###### Motivation for this change

  This change is useful for programs running in containers trying to set up tunnel interfaces. The current `DevicePolicy` prevents containers from accessing most device files thus explicitly allow `/dev/net/tun`.

  Fixes #18708.

  /cc @Mic92 
  ###### Things done
  - [x] Tested using `nixos-rebuild test`
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Add option to grant additional capabilities to containers
user_login: wlhlm
html_url: https://github.com/NixOS/nixpkgs/pull/18823
updated_at: 2016-09-25 18:00:20
body:
  Adds and option `additionalCapabilities` to allow to grant additional capabilities to a container.
  ###### Motivation for this change

  This helps with running programs such as OpenVPN or tinc that setup tunnel interfaces and thus require `CAP_NET_ADMIN`, to run inside a container.

  See #18708 for more detail.

  /cc @Mic92 
  ###### Things done
  - [x] Tested using `nixos-rebuild test`
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: xflux-gui: 2016-08-08 -> 2016-09-21, fix icon display
user_login: aske
html_url: https://github.com/NixOS/nixpkgs/pull/18824
updated_at: 2016-09-22 20:45:42
body:
  ###### Motivation for this change

  Finally make icons work, also update the package while we are at it.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Use machinectl shell for nixos-container run/root-login instead of nsenter+su
user_login: wlhlm
html_url: https://github.com/NixOS/nixpkgs/pull/18825
updated_at: 2017-10-02 18:00:22
body:
  Unfortunately, `nsenter`+`su` don't grant the "real" container environment and lead to surprising results where the same command run via a service inside a container fails, but works perfectly fine using `nixos-container run`. See https://github.com/NixOS/nixpkgs/issues/18708#issuecomment-247864660 and https://github.com/NixOS/nixpkgs/issues/18708#issuecomment-248227752 for such a case.

  Note, that `machinectl shell` currently prints some boilerplate messages when entering and leaving a container:

  ```
  # machinectl shell vpn
  Connected to machine vpn. Press ^] three times within 1s to exit session.
  ...
  Connection to machine vpn terminated.
  ```

  I've submitted systemd/systemd#4196 to get rid of this.
  ###### Motivation for this change

  `machinectl shell` tries hard open a session inside the container that is isolated from its host environment, so it's better suited than the current implementation using `nsenter`+`su`.

  https://github.com/systemd/systemd/issues/825#issuecomment-127917622 for more background.

  Ref. #18708 
  ###### Things done
  - [x] Tested using `nixos-rebuild test`
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: utillinux: 2.28.1 -> 2.28.2
user_login: RamKromberg
html_url: https://github.com/NixOS/nixpkgs/pull/18826
updated_at: 2016-09-30 22:57:35
body:
  maintenance. https://www.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28.2-ReleaseNotes

  Done away with of the patch and fixed the path for uuidd.


state: closed
title: irssi: 1.8.19 -> 1.8.20 (security)
user_login: avnik
html_url: https://github.com/NixOS/nixpkgs/pull/18827
updated_at: 2016-09-22 00:44:22
body:
  ###### Motivation for this change

  new minor version update (security)
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  https://irssi.org/security/irssi_sa_2016.txt
    CVE-2016-7044
    CVE-2016-7045


state: open
title: expose more postgresql initdb flags
user_login: nhooyr
html_url: https://github.com/NixOS/nixpkgs/issues/18829
updated_at: 2017-02-11 02:52:05
body:
  The line https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/databases/postgresql.nix#L208

  Does not use the value of `i18n.defaultLocale` but maybe it should?


state: closed
title: Updated darktable to version 2.0.6
user_login: paperdigits
html_url: https://github.com/NixOS/nixpkgs/pull/18830
updated_at: 2016-09-23 10:43:19
body:
  ###### Motivation for this change

  Updated darktable to the newest release.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Updated hugin to version 2016.2.0
user_login: paperdigits
html_url: https://github.com/NixOS/nixpkgs/pull/18831
updated_at: 2016-10-02 21:39:23
body:
  ###### Motivation for this change

  Updated hugin to the newest release.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Updated gmic to the latest version
user_login: paperdigits
html_url: https://github.com/NixOS/nixpkgs/pull/18832
updated_at: 2016-09-23 10:20:55
body:
  ###### Motivation for this change

  Updating to the latest GMIC version.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: rsnapshot: add default options to module config
user_login: DamienCassou
html_url: https://github.com/NixOS/nixpkgs/pull/18833
updated_at: 2016-09-24 21:07:49
body:
  ###### Motivation for this change

  rsnapshot has some options that can be configured directly from the module.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: kiwix build failure: cannot find libctpp2
user_login: rasendubi
html_url: https://github.com/NixOS/nixpkgs/issues/18835
updated_at: 2017-05-11 12:44:31
body:
  ## Issue description

  ```
  $ nix-build -A kiwix
  checking for ctpp2/CTPP2GlobalDefines.h... yes
  checking for _init in -lctpp2... no
  configure: error: cannot find libctpp2
  builder for ‘/nix/store/jcmifdl06ym01kh4x4m2waxrnf4zqwlv-kiwix-0.9.drv’ failed with exit code 1
  error: build of ‘/nix/store/jcmifdl06ym01kh4x4m2waxrnf4zqwlv-kiwix-0.9.drv’ failed
  ```
  ### Steps to reproduce

  ```
  nix-build -A kiwix
  ```
  ## Technical details
  - System: Gentoo
  - Nix version: nix-env (Nix) 1.11.2
  - Nixpkgs version: a28b8ec7713d3a01637aebf7dd42cba737abd5d3 (17.03pre-git)


state: closed
title: pyopenssl: 16.0.0 -> 16.1.0
user_login: nlewo
html_url: https://github.com/NixOS/nixpkgs/pull/18836
updated_at: 2016-09-29 18:01:49
body:
  ###### Motivation for this change

  Fix the following bug:

  ```
   File "/usr/lib/python2.7/dist-packages/OpenSSL/crypto.py", line 2563, in sign 
  md_ctx = _ffi.new("EVP_MD_CTX*")
  TypeError: cannot instantiate ctype 'EVP_MD_CTX' of unknown size
  ```
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: Add libnabo and libpointmatcher
user_login: cryptix
html_url: https://github.com/NixOS/nixpkgs/pull/18837
updated_at: 2016-09-27 20:39:07
body:
  ###### Motivation for this change

  I need these for another project and wanted to supply them to others.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: systemd.services.<service>.serviceConfig should support multiple entries per option
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/issues/18838
updated_at: 2016-09-22 11:35:15
body:
  ## Issue description

  There are several options like `ExecStart`, `DeviceAllow`, or `Environment`
  which can be specified multiple times in systemd units,
  where nix only allow one instances due type restrictions.
  This leads to ugly workarounds, when multiple entries would be needed (example: https://github.com/NixOS/nixpkgs/pull/17933, https://github.com/NixOS/nixpkgs/pull/18822).

  The only idea I had, was to support lists as arguments as well, 
  as single arguments. However this reminds a little bit of perl, where functions act different depending
  on the argument type passed, so this may lead to unpleasant surprises.

  Any ideas?


state: closed
title: binutils conflicts with itself (due to .dev output)
user_login: bjornfor
html_url: https://github.com/NixOS/nixpkgs/issues/18839
updated_at: 2017-03-01 10:36:23
body:
  ## Issue description

  So it cannot be installed:

  ```
  $ nix-env -iA nixos.binutils
  installing ‘binutils-2.27’
  building path(s) ‘/nix/store/g6iksgvyza9470w1rsvk2mhxkk747cp0-user-environment’
  Wide character in die at /nix/store/64jc9gd2rkbgdb4yjx3nrgc91bpjj5ky-buildenv.pl line 79.
  collision between ‘/nix/store/xank34knz9h7351m1km1x4bz4p8l1x46-binutils-2.27/bin/addr2line’ and ‘/nix/store/nqdk6dzwwhrq63gmiy4hm473z51yxcan-binutils-2.27-dev/bin/addr2line’; use ‘nix-env --set-flag priority NUMBER PKGNAME’ to change the priority of one of the conflicting packages
  builder for ‘/nix/store/idd9rbr78x1i0kipk5qvf6ylq85f5jlk-user-environment.drv’ failed with exit code 255
  error: build of ‘/nix/store/idd9rbr78x1i0kipk5qvf6ylq85f5jlk-user-environment.drv’ failed
  ```
  ## Technical details
  - System: NixOS 16.09


state: closed
title: mesa_noglu.drivers closure size increase
user_login: edolstra
html_url: https://github.com/NixOS/nixpkgs/issues/18840
updated_at: 2016-09-30 09:42:59
body:
  ## Issue description

  The LLVM package in the closure of `mesa_noglu.drivers` has increased dramatically from 16.03 to 16.09, from 77 MiB to 194 MiB:

  ```
  #16.03
  $ nix path-info -rs $(nix-build -A mesa_noglu.drivers) | grep llvm
  /nix/store/cyr7nnpp7wvz121ig7mpnvcn8qq3hl18-llvm-3.7.1                     80634520

  #16.09
  $ nix path-info -rs $(nix-build -A mesa_noglu.drivers) | grep llvm
  /nix/store/xdjw917wvykbjp6ymxj3mn7fhj1fl3xr-llvm-3.9.0                    204421320
  ```

  In fact `llvm` is the biggest package in my 16.09 system closure.

  In 16.03, the `llvm` package only contained .so libraries, but now it also includes static libraries (109 MiB).  Maybe these should be moved to a `dev` output, or removed altogether (if we're not using the static libraries anywhere)?

  Ping @vcunat. Do you know if there is any obstacle to splitting `llvm` into multiple outputs?


state: closed
title: lib.optionalString should accept null in addition to booleans
user_login: RonnyPfannschmidt
html_url: https://github.com/NixOS/nixpkgs/issues/18841
updated_at: 2016-09-25 03:22:15
body:
  the pattern of `optionalString (cfg.localAddress != null)`

  as used in b9df84cd4f6b70bdfa395a91dbf3d712adc7e18d
  seems repetive

  i believe null should be accepted just as true/false are


state: closed
title: nftables module: Add new module for nftables firewall settings
user_login: Jookia
html_url: https://github.com/NixOS/nixpkgs/pull/18842
updated_at: 2017-02-26 15:52:28
body:
  ###### Motivation for this change

  This adds a simple service for setting up firewall rules using nftables instead of iptables. It includes a few examples, and it allows you to specify files so they can be generated from scripts.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: gnupg1compat needs a meta description
user_login: chris-martin
html_url: https://github.com/NixOS/nixpkgs/issues/18843
updated_at: 2018-07-20 07:00:32
body:
  The [meta](https://github.com/NixOS/nixpkgs/blob/f081a1aaf4ec30f953c8c68ce1be9f687179d4e5/pkgs/tools/security/gnupg/1compat.nix#L21-L23) info for gnupg1compat is pretty sparse; I can't tell what this package is for.

  Well, I guess by reading the build script, I can tell.

  I am confused about why the package name is "1compat", though. It seems like it ought to have "2" in the name, since what it does is set up the gpg command to point to version 2, and version 1 is not involved at all?


state: closed
title: enpass: init at 5.3.0
user_login: s1lvester
html_url: https://github.com/NixOS/nixpkgs/pull/18844
updated_at: 2016-10-10 13:17:39
body:
  ###### Motivation for this change

  enpass is an closed source cross-platform password manager with nice browser and firefox extensions. Open Source alternatives are availible. See keepass and keepassx or pass.

  I'm using this on my iPhone and want to use it on my nixos too.
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: C14 : init
user_login: apeyroux
html_url: https://github.com/NixOS/nixpkgs/pull/18845
updated_at: 2016-10-02 10:41:40
body:
  ###### Motivation for this change

  C14 is designed for data archiving & long-term backups and lets you store and retrieve large amounts of data.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: cogl: 1.22.0 -> 1.22.2, enable wayland support
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18846
updated_at: 2016-10-26 14:58:57
body:
  ###### Motivation for this change
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  cc @lovek323 


state: closed
title: libva: 1.7.0 -> 1.7.2
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18847
updated_at: 2016-09-25 00:22:13
body:
  ###### Motivation for this change

  new version
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: glib: 2.48.2 -> 2.50.0 [-> staging]
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18849
updated_at: 2016-09-24 12:10:07
body:
  ###### Motivation for this change
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  glib now uses libmount per default -> depend on utillinux.
  To avoid circular dependency (glib, utillinux, systemd, glib) use the
  minimal version


state: closed
title: webkitgtk: remove 2.10.x, add 2.14.x
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18850
updated_at: 2016-09-22 20:38:49
body:
  ###### Motivation for this change

  2.14 is needed for gnome 3.22
  2.10 looks unused to me

  What's the best way to check if we can switch from 2.12 to 2.14? Should I file another PR against staging with that change to get failure reports from hydra in a day or so? It's too much to compile for me.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  We already have 3 versions of webkitgtk in nixpkgs. Maybe it is time to remove


state: closed
title: Riak needs to write to `~/.erlang.cookie` but it's immutable
user_login: kvz
html_url: https://github.com/NixOS/nixpkgs/issues/18852
updated_at: 2016-09-23 00:51:26
body:
  This is a continuation of my comment over at https://github.com/NixOS/nixpkgs/issues/18358#issuecomment-249015126. LnL and jaym on IRC prompted me to create a new issue.

  As we're unable to change the Erlang cookie path (`~/.erlang.cookie`), it might be better to make Riak's data dir its homedir, which is writable. I'm unsure if we should add `environment.HOME = "${cfg.dataDir}"` to the service, or made that the `riak` user's an actual homedir. I suppose the latter would also allow scripts to run as this user, but that might not be required/desired.
  ### Steps to reproduce
  - Install the Riak drv from the latest unstable
  - `sudo -EHu riak riak-admin security enable` (this would show the error)
  ## Technical details
  - System: NixOS: `17.03.git.2b0eace (Gorilla)`
  - Nix version: `nix-env (Nix) 1.11.4`
  - Nixpkgs version: `"17.03.git.2b0eaceM"`


state: closed
title: Run riak with its `dataDir` as `HOME` so Erlang cookie can be written
user_login: kvz
html_url: https://github.com/NixOS/nixpkgs/pull/18853
updated_at: 2016-09-23 00:51:26
body:
  Merging this would fix #18852 
  ###### Motivation for this change

  As we're unable to change the Erlang cookie path (`~/.erlang.cookie`), it might be better to make Riak's `dataDir` its `HOME` dir, which is writable. The current solution adds `environment.HOME = "${cfg.dataDir}"` to the service.

  Alternatively we could perhaps make it the `riak` user's an actual homedir. I suppose this would also allow scripts to run as this user, but that might not be required or even desired, accumulating state in more/different places.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: idris: upgrade to v0.12.3
user_login: siddharthist
html_url: https://github.com/NixOS/nixpkgs/issues/18854
updated_at: 2016-09-27 20:22:28
body:
  ## Issue description

  There's a new version of Idris out: https://hackage.haskell.org/package/idris
  ## Technical details

  ```
  code/nixpkgs > nixos-version
  17.03.git.cd343b7 (Gorilla)
  ```


state: closed
title: Put fonts into their own namespace
user_login: chris-martin
html_url: https://github.com/NixOS/nixpkgs/issues/18855
updated_at: 2018-06-24 12:32:31
body:
  In the discussion on #18775 we touched on the possibility of putting fonts into their own set - for example, the top-level package `inconsolata` instead becomes `fonts.inconsolata`. I think it would make it easier to search for fonts, and might be nice to clean up the top-level namespace a little (we have a lot of font packages, and there are plenty more out there that could be added - I wouldn't be surprised if some names conflict with software names).


state: closed
title: Bug Fix Bonanza: Triage Vulnerabilities Since 16.03 (Vulnerability Roundup 1)
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/issues/18856
updated_at: 2016-11-28 14:41:13
body:
  ## Goal

  Before 16.09 is official, I think it would be good to try and resolve
  as many vulnerabilities as we can. To try and cover as much ground as
  possible we have leaned on LWN's list of vulnerabilities.
  ### History

  Last release, @fpletz and I went through the list fairly ad-hoc and
  addressed as many as we could. This time, I've compiled a list of all
  the reports since our last release and grouped them a bit.
  ## Notes on the list
  1. This list is _very_ long, but I think it will go faster than we
     expect: A single upgrade of a package may fix all the related bugs. _Already 75% done!_
  2. The reports have been roughly grouped by the package name. This
     isn't perfect, but is intended to help identify if a whole group
     of reports is resolved already.
  3. Some issues will be duplicated, because it affects multiple packages.
     For example, there are sometimes problems that impact thunderbird,
     and firefox. LWN might report in one vulnerability "thunderbird
     firefox". These names have been split to make sure both packages get
     addressed.
  4. By each issue is a link to code search for the package name, and
     a Github search by filename. These are to help, but may not return
     results when we do in fact package the software. If a search
     doesn't turn up, please try altering the search criteria or
     looking in nixpkgs manually before asserting we don't have it.
  ### What about Vulnix / monitor.nixos.org?

  I'm leery about about leaving the triage completely to automation.
  I've found it very difficult to be highly confident in the ability
  to match packages and versions to a CVE report.

  I believe this list is orthogonal to the automation tools which have
  been created, and that those tools could be used to accomplish
  the triaging in this report.
  # Instructions:
  1. Triage a report: If we don't have the software or our version isn't
     vulnerable, tick the box or add a comment with the report number,
     stating it isn't vulnerable.
  2. Fix the issue: If we do have the software and it is vulnerable,
     either leave a comment on this issue saying so, even open a pull
     request with the fix. If you open a PR, make sure to tag this
     issue so we can coordinate.
  3. When an entire section is completed, move the section to the
     "Triaged and Resolved Issues" `details` block below.

  Without further ado...

  ---
  ## Total remaining: 0

  ---


  <strong>Triaged and Resolved Issues</strong>


  ### 389-ds-base (2 issues)
  - [x] [`#699805`](https://lwn.net/Vulnerabilities/699805/) ([search](http://search.nix.gsc.io/?q=389-ds-base&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=389-ds-base+in%3Apath&type=Code))  389-ds-base: information disclosure
  - [x] [`#675820`](https://lwn.net/Vulnerabilities/675820/) ([search](http://search.nix.gsc.io/?q=389-ds-base&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=389-ds-base+in%3Apath&type=Code))  389-ds-base: denial of service
  ### Assorted (312 issues)
  - [x] [`#701147`](https://lwn.net/Vulnerabilities/701147/) ([search](http://search.nix.gsc.io/?q=moin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=moin+in%3Apath&type=Code))  moin: unspecified
  - [x] [`#688207`](https://lwn.net/Vulnerabilities/688207/) ([search](http://search.nix.gsc.io/?q=bugzilla&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bugzilla+in%3Apath&type=Code))  bugzilla: cross-site scripting
  - [x] [`#685287`](https://lwn.net/Vulnerabilities/685287/) ([search](http://search.nix.gsc.io/?q=rpm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=rpm+in%3Apath&type=Code))  rpm: two vulnerabilities
  - [x] [`#686450`](https://lwn.net/Vulnerabilities/686450/) ([search](http://search.nix.gsc.io/?q=dhcp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dhcp+in%3Apath&type=Code))  dhcp: denial of service
  - [x] [`#701629`](https://lwn.net/Vulnerabilities/701629/) ([search](http://search.nix.gsc.io/?q=pidgin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pidgin+in%3Apath&type=Code))  pidgin: mysterious vulnerabilities
  - [x] [`#676089`](https://lwn.net/Vulnerabilities/676089/) ([search](http://search.nix.gsc.io/?q=asterisk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=asterisk+in%3Apath&type=Code))  asterisk: file descriptor exhaustion
  - [x] [`#681270`](https://lwn.net/Vulnerabilities/681270/) ([search](http://search.nix.gsc.io/?q=redmine&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=redmine+in%3Apath&type=Code))  redmine: unspecified information disclosure vulnerabilities
  - [x] [`#683992`](https://lwn.net/Vulnerabilities/683992/) ([search](http://search.nix.gsc.io/?q=cryptopp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cryptopp+in%3Apath&type=Code))  cryptopp: information disclosure
  - [x] [`#695093`](https://lwn.net/Vulnerabilities/695093/) ([search](http://search.nix.gsc.io/?q=openstack-neutron&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openstack-neutron+in%3Apath&type=Code))  openstack-neutron: three vulnerabilities
  - [x] [`#691101`](https://lwn.net/Vulnerabilities/691101/) ([search](http://search.nix.gsc.io/?q=opera&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=opera+in%3Apath&type=Code))  opera: multiple vulnerabilities
  - [x] [`#671736`](https://lwn.net/Vulnerabilities/671736/) ([search](http://search.nix.gsc.io/?q=isc-dhcp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=isc-dhcp+in%3Apath&type=Code))  isc-dhcp: denial of service
  - [x] [`#664752`](https://lwn.net/Vulnerabilities/664752/) ([search](http://search.nix.gsc.io/?q=lib32-libpng&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lib32-libpng+in%3Apath&type=Code))  lib32-libpng: denial of service
  - [x] [`#675227`](https://lwn.net/Vulnerabilities/675227/) ([search](http://search.nix.gsc.io/?q=firebird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firebird+in%3Apath&type=Code))  firebird: denial of service
  - [x] [`#677963`](https://lwn.net/Vulnerabilities/677963/) ([search](http://search.nix.gsc.io/?q=ia32-libs&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ia32-libs+in%3Apath&type=Code))  ia32-libs: multiple vulnerabilities
  - [x] [`#698139`](https://lwn.net/Vulnerabilities/698139/) ([search](http://search.nix.gsc.io/?q=mingw-lcms2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mingw-lcms2+in%3Apath&type=Code))  mingw-lcms2: heap memory leak
  - [x] [`#475668`](https://lwn.net/Vulnerabilities/475668/) ([search](http://search.nix.gsc.io/?q=plib&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=plib+in%3Apath&type=Code))  plib: arbitrary code execution
  - [x] [`#692849`](https://lwn.net/Vulnerabilities/692849/) ([search](http://search.nix.gsc.io/?q=libdwarf&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libdwarf+in%3Apath&type=Code))  libdwarf: multiple vulnerabilities
  - [x] [`#693578`](https://lwn.net/Vulnerabilities/693578/) ([search](http://search.nix.gsc.io/?q=libircclient&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libircclient+in%3Apath&type=Code))  libircclient: insecure cipher suites
  - [x] [`#675823`](https://lwn.net/Vulnerabilities/675823/) ([search](http://search.nix.gsc.io/?q=graphite&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=graphite+in%3Apath&type=Code))  mozilla: two vulnerabilities
  - [x] [`#692378`](https://lwn.net/Vulnerabilities/692378/) ([search](http://search.nix.gsc.io/?q=python2.7&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python2.7+in%3Apath&type=Code))  python2.7: three vulnerabilities
  - [x] [`#695323`](https://lwn.net/Vulnerabilities/695323/) ([search](http://search.nix.gsc.io/?q=kf5-karchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kf5-karchive+in%3Apath&type=Code))  kf5-karchive: command execution
  - [x] [`#689266`](https://lwn.net/Vulnerabilities/689266/) ([search](http://search.nix.gsc.io/?q=libfpx&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libfpx+in%3Apath&type=Code))  libfpx: denial of service
  - [x] [`#689256`](https://lwn.net/Vulnerabilities/689256/) ([search](http://search.nix.gsc.io/?q=kf5-kinit&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kf5-kinit+in%3Apath&type=Code))  kf5-kinit: privilege escalation
  - [x] [`#678161`](https://lwn.net/Vulnerabilities/678161/) ([search](http://search.nix.gsc.io/?q=KDE&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=KDE+in%3Apath&type=Code))  KDE Frameworks: multiple vulnerabilities
  - [x] [`#700116`](https://lwn.net/Vulnerabilities/700116/) ([search](http://search.nix.gsc.io/?q=file-roller&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=file-roller+in%3Apath&type=Code))  file-roller: file deletion
  - [x] [`#695092`](https://lwn.net/Vulnerabilities/695092/) ([search](http://search.nix.gsc.io/?q=java-1.8.0-oracle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.8.0-oracle+in%3Apath&type=Code))  java: unspecified vulnerability
  - [x] [`#690411`](https://lwn.net/Vulnerabilities/690411/) ([search](http://search.nix.gsc.io/?q=libpdfbox-java&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libpdfbox-java+in%3Apath&type=Code))  libpdfbox-java: XML External Entity (XXE) attacks
  - [x] [`#676797`](https://lwn.net/Vulnerabilities/676797/) ([search](http://search.nix.gsc.io/?q=obs-service-download_files&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=obs-service-download_files+in%3Apath&type=Code))  obs-service-download_files: code injection
  - [x] [`#686448`](https://lwn.net/Vulnerabilities/686448/) ([search](http://search.nix.gsc.io/?q=mplayer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mplayer+in%3Apath&type=Code))  mplayer: code execution
  - [x] [`#681395`](https://lwn.net/Vulnerabilities/681395/) ([search](http://search.nix.gsc.io/?q=webkit2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkit2+in%3Apath&type=Code))  webkit2: many vulnerabilities
  - [x] [`#679404`](https://lwn.net/Vulnerabilities/679404/) ([search](http://search.nix.gsc.io/?q=openstack-nova&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openstack-nova+in%3Apath&type=Code))  openstack-nova: information exposure
  - [x] [`#680797`](https://lwn.net/Vulnerabilities/680797/) ([search](http://search.nix.gsc.io/?q=webkitgtk3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkitgtk3+in%3Apath&type=Code))  webkitgtk3: multiple vulnerabilities
  - [x] [`#674494`](https://lwn.net/Vulnerabilities/674494/) ([search](http://search.nix.gsc.io/?q=openstack-heat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openstack-heat+in%3Apath&type=Code))  openstack-heat: denial of service
  - [x] [`#700654`](https://lwn.net/Vulnerabilities/700654/) ([search](http://search.nix.gsc.io/?q=webkit2gtk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkit2gtk+in%3Apath&type=Code))  webkit2gtk: multiple vulnerabilities
  - [x] [`#696699`](https://lwn.net/Vulnerabilities/696699/) ([search](http://search.nix.gsc.io/?q=bsdiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bsdiff+in%3Apath&type=Code))  bsdiff: denial of service
  - [x] [`#667315`](https://lwn.net/Vulnerabilities/667315/) ([search](http://search.nix.gsc.io/?q=libphp-phpmailer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libphp-phpmailer+in%3Apath&type=Code))  libphp-phpmailer: header injection
  - [x] [`#676272`](https://lwn.net/Vulnerabilities/676272/) ([search](http://search.nix.gsc.io/?q=hamster-time-tracker&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=hamster-time-tracker+in%3Apath&type=Code))  hamster-time-tracker: two denial of service flaws
  - [x] [`#692027`](https://lwn.net/Vulnerabilities/692027/) ([search](http://search.nix.gsc.io/?q=horizon&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=horizon+in%3Apath&type=Code))  horizon: cross-site scripting
  - [x] [`#677956`](https://lwn.net/Vulnerabilities/677956/) ([search](http://search.nix.gsc.io/?q=openstack-glance&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openstack-glance+in%3Apath&type=Code))  openstack-glance: authorization bypass
  - [x] [`#694623`](https://lwn.net/Vulnerabilities/694623/) ([search](http://search.nix.gsc.io/?q=atomic-openshift&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=atomic-openshift+in%3Apath&type=Code))  atomic-openshift: information leak
  - [x] [`#688205`](https://lwn.net/Vulnerabilities/688205/) ([search](http://search.nix.gsc.io/?q=Red Hat OpenShift Enterprise 3.1&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=Red Hat OpenShift Enterprise 3.1+in%3Apath&type=Code))  ose3.1: unauthorized access
  - [x] [`#675698`](https://lwn.net/Vulnerabilities/675698/) ([search](http://search.nix.gsc.io/?q=iceweasel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=iceweasel+in%3Apath&type=Code))  mozilla: denial of service
  - [x] [`#641431`](https://lwn.net/Vulnerabilities/641431/) ([search](http://search.nix.gsc.io/?q=qt&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qt+in%3Apath&type=Code))  qt: multiple vulnerabilities
  - [x] [`#688206`](https://lwn.net/Vulnerabilities/688206/) ([search](http://search.nix.gsc.io/?q=Red Hat OpenShift Enterprise 3.2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=Red Hat OpenShift Enterprise 3.2+in%3Apath&type=Code))  ose3.2: two vulnerabilities
  - [x] [`#675045`](https://lwn.net/Vulnerabilities/675045/) ([search](http://search.nix.gsc.io/?q=kscreenlocker&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kscreenlocker+in%3Apath&type=Code))  kscreenlocker: restriction bypass
  - [x] [`#694515`](https://lwn.net/Vulnerabilities/694515/) ([search](http://search.nix.gsc.io/?q=MozillaFirefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=MozillaFirefox+in%3Apath&type=Code))  firefox: code execution
  - [x] [`#629676`](https://lwn.net/Vulnerabilities/629676/) ([search](http://search.nix.gsc.io/?q=kde-runtime&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kde-runtime+in%3Apath&type=Code))  kde-runtime: misuse of crypto
  - [x] [`#693472`](https://lwn.net/Vulnerabilities/693472/) ([search](http://search.nix.gsc.io/?q=openstack-ironic&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openstack-ironic+in%3Apath&type=Code))  openstack-ironic: authentication bypass
  - [x] [`#681991`](https://lwn.net/Vulnerabilities/681991/) ([search](http://search.nix.gsc.io/?q=libqt4&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libqt4+in%3Apath&type=Code))  libqt4: unsafe SSL ciphers
  - [x] [`#678163`](https://lwn.net/Vulnerabilities/678163/) ([search](http://search.nix.gsc.io/?q=libqt5-qtbase&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libqt5-qtbase+in%3Apath&type=Code))  libqt5-qtbase: two vulnerabilities
  - [x] [`#699957`](https://lwn.net/Vulnerabilities/699957/) ([search](http://search.nix.gsc.io/?q=java-1_7_1-ibm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1_7_1-ibm+in%3Apath&type=Code))  java: unspecified vulnerability
  - [x] [`#678161`](https://lwn.net/Vulnerabilities/678161/) ([search](http://search.nix.gsc.io/?q=Frameworks&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=Frameworks+in%3Apath&type=Code))  KDE Frameworks: multiple vulnerabilities
  - [x] [`#687227`](https://lwn.net/Vulnerabilities/687227/) ([search](http://search.nix.gsc.io/?q=ocaml&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ocaml+in%3Apath&type=Code))  ocaml: information leak
  - [x] [`#695459`](https://lwn.net/Vulnerabilities/695459/) ([search](http://search.nix.gsc.io/?q=uclibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=uclibc+in%3Apath&type=Code))  uclibc: three vulnerabilities
  - [x] [`#686293`](https://lwn.net/Vulnerabilities/686293/) ([search](http://search.nix.gsc.io/?q=xerces-j2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xerces-j2+in%3Apath&type=Code))  xerces-j2: denial of service
  - [x] [`#692375`](https://lwn.net/Vulnerabilities/692375/) ([search](http://search.nix.gsc.io/?q=setroubleshoot&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=setroubleshoot+in%3Apath&type=Code))  setroubleshoot: multiple vulnerabilities
  - [x] [`#695956`](https://lwn.net/Vulnerabilities/695956/) ([search](http://search.nix.gsc.io/?q=libdbd-mysql-perl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libdbd-mysql-perl+in%3Apath&type=Code))  libdbd-mysql-perl: code execution
  - [x] [`#683998`](https://lwn.net/Vulnerabilities/683998/) ([search](http://search.nix.gsc.io/?q=qpid-proton&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qpid-proton+in%3Apath&type=Code))  qpid-proton: TLS to plaintext downgrade
  - [x] [`#676927`](https://lwn.net/Vulnerabilities/676927/) ([search](http://search.nix.gsc.io/?q=libssh2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libssh2+in%3Apath&type=Code))  libssh2: insecure ssh sessions
  - [x] [`#699175`](https://lwn.net/Vulnerabilities/699175/) ([search](http://search.nix.gsc.io/?q=canl-c&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=canl-c+in%3Apath&type=Code))  canl-c: proxy manipulation
  - [x] [`#672559`](https://lwn.net/Vulnerabilities/672559/) ([search](http://search.nix.gsc.io/?q=bind9&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bind9+in%3Apath&type=Code))  bind9: denial of service
  - [x] [`#697947`](https://lwn.net/Vulnerabilities/697947/) ([search](http://search.nix.gsc.io/?q=firewalld&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firewalld+in%3Apath&type=Code))  firewalld: authentication bypass
  - [x] [`#680031`](https://lwn.net/Vulnerabilities/680031/) ([search](http://search.nix.gsc.io/?q=pidgin-otr&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pidgin-otr+in%3Apath&type=Code))  pidgin-otr: code execution
  - [x] [`#578785`](https://lwn.net/Vulnerabilities/578785/) ([search](http://search.nix.gsc.io/?q=typo3-src&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=typo3-src+in%3Apath&type=Code))  typo3-src: multiple vulnerabilities
  - [x] [`#636684`](https://lwn.net/Vulnerabilities/636684/) ([search](http://search.nix.gsc.io/?q=osc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=osc+in%3Apath&type=Code))  osc: command injection
  - [x] [`#688456`](https://lwn.net/Vulnerabilities/688456/) ([search](http://search.nix.gsc.io/?q=networkmanager&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=networkmanager+in%3Apath&type=Code))  networkmanager: information leak
  - [x] [`#687716`](https://lwn.net/Vulnerabilities/687716/) ([search](http://search.nix.gsc.io/?q=atheme&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=atheme+in%3Apath&type=Code))  atheme: two vulnerabilities
  - [x] [`#684456`](https://lwn.net/Vulnerabilities/684456/) ([search](http://search.nix.gsc.io/?q=apparmor&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=apparmor+in%3Apath&type=Code))  apparmor: profile updates
  - [x] [`#701139`](https://lwn.net/Vulnerabilities/701139/) ([search](http://search.nix.gsc.io/?q=jackrabbit&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jackrabbit+in%3Apath&type=Code))  jackrabbit: cross-site request forgery
  - [x] [`#514067`](https://lwn.net/Vulnerabilities/514067/) ([search](http://search.nix.gsc.io/?q=xulrunner&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xulrunner+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#693003`](https://lwn.net/Vulnerabilities/693003/) ([search](http://search.nix.gsc.io/?q=xguest&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xguest+in%3Apath&type=Code))  xguest: insecure password creation
  - [x] [`#561443`](https://lwn.net/Vulnerabilities/561443/) ([search](http://search.nix.gsc.io/?q=lcms2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lcms2+in%3Apath&type=Code))  lcms2: denial of service
  - [x] [`#696815`](https://lwn.net/Vulnerabilities/696815/) ([search](http://search.nix.gsc.io/?q=openntpd/busybox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openntpd/busybox+in%3Apath&type=Code))  openntpd/busybox: denial of service
  - [x] [`#666133`](https://lwn.net/Vulnerabilities/666133/) ([search](http://search.nix.gsc.io/?q=cyrus-imapd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cyrus-imapd+in%3Apath&type=Code))  cyrus-imapd: two vulnerabilities
  - [x] [`#683452`](https://lwn.net/Vulnerabilities/683452/) ([search](http://search.nix.gsc.io/?q=cairo&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cairo+in%3Apath&type=Code))  cairo: denial of service
  - [x] [`#699682`](https://lwn.net/Vulnerabilities/699682/) ([search](http://search.nix.gsc.io/?q=jsch&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jsch+in%3Apath&type=Code))  jsch: path traversal
  - [x] [`#643372`](https://lwn.net/Vulnerabilities/643372/) ([search](http://search.nix.gsc.io/?q=erlang&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=erlang+in%3Apath&type=Code))  erlang:  man-in-the-middle attack
  - [x] [`#699952`](https://lwn.net/Vulnerabilities/699952/) ([search](http://search.nix.gsc.io/?q=icu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=icu+in%3Apath&type=Code))  icu: code execution
  - [x] [`#677961`](https://lwn.net/Vulnerabilities/677961/) ([search](http://search.nix.gsc.io/?q=bsh&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bsh+in%3Apath&type=Code))  bsh: code execution
  - [x] [`#699684`](https://lwn.net/Vulnerabilities/699684/) ([search](http://search.nix.gsc.io/?q=tiff3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tiff3+in%3Apath&type=Code))  tiff3: two vulnerabilities
  - [x] [`#688728`](https://lwn.net/Vulnerabilities/688728/) ([search](http://search.nix.gsc.io/?q=bozohttpd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bozohttpd+in%3Apath&type=Code))  bozohttpd: two vulnerabilities
  - [x] [`#681096`](https://lwn.net/Vulnerabilities/681096/) ([search](http://search.nix.gsc.io/?q=foomatic&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=foomatic+in%3Apath&type=Code))  foomatic: code execution
  - [x] [`#698794`](https://lwn.net/Vulnerabilities/698794/) ([search](http://search.nix.gsc.io/?q=tryton-server&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tryton-server+in%3Apath&type=Code))  tryton-server: two vulnerabilities
  - [x] [`#691098`](https://lwn.net/Vulnerabilities/691098/) ([search](http://search.nix.gsc.io/?q=libjpeg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libjpeg+in%3Apath&type=Code))  libjpeg: memory leak
  - [x] [`#682385`](https://lwn.net/Vulnerabilities/682385/) ([search](http://search.nix.gsc.io/?q=lhasa&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lhasa+in%3Apath&type=Code))  lhasa: code execution
  - [x] [`#633536`](https://lwn.net/Vulnerabilities/633536/) ([search](http://search.nix.gsc.io/?q=pigz&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pigz+in%3Apath&type=Code))  pigz: directory traversal
  - [x] [`#699955`](https://lwn.net/Vulnerabilities/699955/) ([search](http://search.nix.gsc.io/?q=libstorage&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libstorage+in%3Apath&type=Code))  libstorage: password disclosure
  - [x] [`#694515`](https://lwn.net/Vulnerabilities/694515/) ([search](http://search.nix.gsc.io/?q=MozillaFirefox-branding-SLE&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=MozillaFirefox-branding-SLE+in%3Apath&type=Code))  firefox: code execution
  - [x] [`#658939`](https://lwn.net/Vulnerabilities/658939/) ([search](http://search.nix.gsc.io/?q=fuseiso&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=fuseiso+in%3Apath&type=Code))  fuseiso: two vulnerabilities
  - [x] [`#688729`](https://lwn.net/Vulnerabilities/688729/) ([search](http://search.nix.gsc.io/?q=ruby-mail&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ruby-mail+in%3Apath&type=Code))  ruby-mail: SMTP injection
  - [x] [`#687713`](https://lwn.net/Vulnerabilities/687713/) ([search](http://search.nix.gsc.io/?q=ioprocess&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ioprocess+in%3Apath&type=Code))  ioprocess: invalid md5sum
  - [x] [`#694784`](https://lwn.net/Vulnerabilities/694784/) ([search](http://search.nix.gsc.io/?q=ruby-eventmachine&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ruby-eventmachine+in%3Apath&type=Code))  ruby-eventmachine: denial of service
  - [x] [`#689258`](https://lwn.net/Vulnerabilities/689258/) ([search](http://search.nix.gsc.io/?q=libimobiledevice&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libimobiledevice+in%3Apath&type=Code))  libimobiledevice: sockets listening on INADDR_ANY
  - [x] [`#692856`](https://lwn.net/Vulnerabilities/692856/) ([search](http://search.nix.gsc.io/?q=libcommons-fileupload-java&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libcommons-fileupload-java+in%3Apath&type=Code))  libcommons-fileupload-java: denial of service
  - [x] [`#692176`](https://lwn.net/Vulnerabilities/692176/) ([search](http://search.nix.gsc.io/?q=nfdump&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nfdump+in%3Apath&type=Code))  nfdump: multiple vulnerabilities
  - [x] [`#688051`](https://lwn.net/Vulnerabilities/688051/) ([search](http://search.nix.gsc.io/?q=p7zip&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=p7zip+in%3Apath&type=Code))  p7zip: two code execution flaws
  - [x] [`#697440`](https://lwn.net/Vulnerabilities/697440/) ([search](http://search.nix.gsc.io/?q=pulp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pulp+in%3Apath&type=Code))  pulp: two vulnerabilities
  - [x] [`#665242`](https://lwn.net/Vulnerabilities/665242/) ([search](http://search.nix.gsc.io/?q=uglify-js&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=uglify-js+in%3Apath&type=Code))  uglify-js: malicious code obfuscation
  - [x] [`#691095`](https://lwn.net/Vulnerabilities/691095/) ([search](http://search.nix.gsc.io/?q=nspr&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nspr+in%3Apath&type=Code))  nspr: buffer overflow
  - [x] [`#669405`](https://lwn.net/Vulnerabilities/669405/) ([search](http://search.nix.gsc.io/?q=activemq&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=activemq+in%3Apath&type=Code))  activemq: unsafe deserialization
  - [x] [`#685139`](https://lwn.net/Vulnerabilities/685139/) ([search](http://search.nix.gsc.io/?q=mod_nss&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mod_nss+in%3Apath&type=Code))  mod_nss: invalid handling of +CIPHER operator
  - [x] [`#699946`](https://lwn.net/Vulnerabilities/699946/) ([search](http://search.nix.gsc.io/?q=Kibana&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=Kibana+in%3Apath&type=Code))  kibana: two vulnerabilties
  - [x] [`#685892`](https://lwn.net/Vulnerabilities/685892/) ([search](http://search.nix.gsc.io/?q=ubuntu-core-launcher&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ubuntu-core-launcher+in%3Apath&type=Code))  ubuntu-core-launcher: code execution
  - [x] [`#678811`](https://lwn.net/Vulnerabilities/678811/) ([search](http://search.nix.gsc.io/?q=roundup&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=roundup+in%3Apath&type=Code))  roundup: information leak
  - [x] [`#696419`](https://lwn.net/Vulnerabilities/696419/) ([search](http://search.nix.gsc.io/?q=hawk2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=hawk2+in%3Apath&type=Code))  hawk2: clickjacking prevention
  - [x] [`#661900`](https://lwn.net/Vulnerabilities/661900/) ([search](http://search.nix.gsc.io/?q=cakephp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cakephp+in%3Apath&type=Code))  cakephp: denial of service
  - [x] [`#695326`](https://lwn.net/Vulnerabilities/695326/) ([search](http://search.nix.gsc.io/?q=gnugk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gnugk+in%3Apath&type=Code))  gnugk: denial of service
  - [x] [`#696553`](https://lwn.net/Vulnerabilities/696553/) ([search](http://search.nix.gsc.io/?q=python-autobahn&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-autobahn+in%3Apath&type=Code))  python-autobahn: insecure origin validation
  - [x] [`#671739`](https://lwn.net/Vulnerabilities/671739/) ([search](http://search.nix.gsc.io/?q=shotwell&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=shotwell+in%3Apath&type=Code))  shotwell: validate TLS certificates
  - [x] [`#652551`](https://lwn.net/Vulnerabilities/652551/) ([search](http://search.nix.gsc.io/?q=ghostscript&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ghostscript+in%3Apath&type=Code))  ghostscript: buffer overflow
  - [x] [`#681753`](https://lwn.net/Vulnerabilities/681753/) ([search](http://search.nix.gsc.io/?q=kamailio&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kamailio+in%3Apath&type=Code))  kamailio: code execution
  - [x] [`#685412`](https://lwn.net/Vulnerabilities/685412/) ([search](http://search.nix.gsc.io/?q=oxide-qt&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=oxide-qt+in%3Apath&type=Code))  oxide-qt: code execution
  - [x] [`#692924`](https://lwn.net/Vulnerabilities/692924/) ([search](http://search.nix.gsc.io/?q=movabletype-opensource&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=movabletype-opensource+in%3Apath&type=Code))  movabletype-opensource: SQL injection
  - [x] [`#697949`](https://lwn.net/Vulnerabilities/697949/) ([search](http://search.nix.gsc.io/?q=knot&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=knot+in%3Apath&type=Code))  knot: denial of service
  - [x] [`#691094`](https://lwn.net/Vulnerabilities/691094/) ([search](http://search.nix.gsc.io/?q=mantis&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mantis+in%3Apath&type=Code))  mantis: cross-site scripting
  - [x] [`#675832`](https://lwn.net/Vulnerabilities/675832/) ([search](http://search.nix.gsc.io/?q=xdelta3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xdelta3+in%3Apath&type=Code))  xdelta3: code execution
  - [x] [`#701142`](https://lwn.net/Vulnerabilities/701142/) ([search](http://search.nix.gsc.io/?q=distribution-gpg-keys&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=distribution-gpg-keys+in%3Apath&type=Code))  distribution-gpg-keys: privilege escalation
  - [x] [`#682756`](https://lwn.net/Vulnerabilities/682756/) ([search](http://search.nix.gsc.io/?q=oar&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=oar+in%3Apath&type=Code))  oar: privilege escalation
  - [x] [`#682974`](https://lwn.net/Vulnerabilities/682974/) ([search](http://search.nix.gsc.io/?q=libmaxminddb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libmaxminddb+in%3Apath&type=Code))  libmaxminddb: multiple vulnerabilities
  - [x] [`#684751`](https://lwn.net/Vulnerabilities/684751/) ([search](http://search.nix.gsc.io/?q=varnish&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=varnish+in%3Apath&type=Code))  varnish: access control bypass
  - [x] [`#679766`](https://lwn.net/Vulnerabilities/679766/) ([search](http://search.nix.gsc.io/?q=php-htmLawed&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-htmLawed+in%3Apath&type=Code))  php-htmLawed: unspecified vulnerability
  - [x] [`#691497`](https://lwn.net/Vulnerabilities/691497/) ([search](http://search.nix.gsc.io/?q=monit&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=monit+in%3Apath&type=Code))  monit: disable SSLv3
  - [x] [`#675834`](https://lwn.net/Vulnerabilities/675834/) ([search](http://search.nix.gsc.io/?q=gtk+&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gtk++in%3Apath&type=Code))  eog: code execution
  - [x] [`#686291`](https://lwn.net/Vulnerabilities/686291/) ([search](http://search.nix.gsc.io/?q=jq&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jq+in%3Apath&type=Code))  jq: two vulnerabilities
  - [x] [`#692635`](https://lwn.net/Vulnerabilities/692635/) ([search](http://search.nix.gsc.io/?q=kernel-rt&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel-rt+in%3Apath&type=Code))  kernel-rt: denial of service
  - [x] [`#698986`](https://lwn.net/Vulnerabilities/698986/) ([search](http://search.nix.gsc.io/?q=mozilla-thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mozilla-thunderbird+in%3Apath&type=Code))  mozilla-thunderbird: unspecified vulnerabilities
  - [x] [`#682157`](https://lwn.net/Vulnerabilities/682157/) ([search](http://search.nix.gsc.io/?q=thunderbird/thunderbird-l10n&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird/thunderbird-l10n+in%3Apath&type=Code))  thunderbird: unspecified vulnerabilities
  - [x] [`#680040`](https://lwn.net/Vulnerabilities/680040/) ([search](http://search.nix.gsc.io/?q=oracle-jre-bin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=oracle-jre-bin+in%3Apath&type=Code))  oracle-jre-bin: code execution
  - [x] [`#676094`](https://lwn.net/Vulnerabilities/676094/) ([search](http://search.nix.gsc.io/?q=mingw-pcre&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mingw-pcre+in%3Apath&type=Code))  pcre: multiple vulnerabilities
  - [x] [`#679630`](https://lwn.net/Vulnerabilities/679630/) ([search](http://search.nix.gsc.io/?q=php-udan11-sql-parser&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-udan11-sql-parser+in%3Apath&type=Code))  php-udan11-sql-parser: multiple vulnerabilities
  - [x] [`#677332`](https://lwn.net/Vulnerabilities/677332/) ([search](http://search.nix.gsc.io/?q=pixman&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pixman+in%3Apath&type=Code))  pixman: code execution
  - [x] [`#682977`](https://lwn.net/Vulnerabilities/682977/) ([search](http://search.nix.gsc.io/?q=python-rsa&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-rsa+in%3Apath&type=Code))  python-rsa: unspecified
  - [x] [`#665241`](https://lwn.net/Vulnerabilities/665241/) ([search](http://search.nix.gsc.io/?q=latex2rtf&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=latex2rtf+in%3Apath&type=Code))  latex2rtf: code execution
  - [x] [`#674608`](https://lwn.net/Vulnerabilities/674608/) ([search](http://search.nix.gsc.io/?q=nodejs-is-my-json-valid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nodejs-is-my-json-valid+in%3Apath&type=Code))  nodejs-is-my-json-valid: denial of service
  - [x] [`#626653`](https://lwn.net/Vulnerabilities/626653/) ([search](http://search.nix.gsc.io/?q=mailx&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mailx+in%3Apath&type=Code))  mailx: command execution
  - [x] [`#675700`](https://lwn.net/Vulnerabilities/675700/) ([search](http://search.nix.gsc.io/?q=cpio&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cpio+in%3Apath&type=Code))  cpio: out-of-bounds write
  - [x] [`#700389`](https://lwn.net/Vulnerabilities/700389/) ([search](http://search.nix.gsc.io/?q=elog&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=elog+in%3Apath&type=Code))  elog: unauthorized posts
  - [x] [`#695954`](https://lwn.net/Vulnerabilities/695954/) ([search](http://search.nix.gsc.io/?q=collectd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=collectd+in%3Apath&type=Code))  collectd: code execution
  - [x] [`#673463`](https://lwn.net/Vulnerabilities/673463/) ([search](http://search.nix.gsc.io/?q=chrony&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chrony+in%3Apath&type=Code))  chrony: packet modification
  - [x] [`#696812`](https://lwn.net/Vulnerabilities/696812/) ([search](http://search.nix.gsc.io/?q=nodejs-tough-cookie&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nodejs-tough-cookie+in%3Apath&type=Code))  nodejs-tough-cookie: denial of service
  - [x] [`#680794`](https://lwn.net/Vulnerabilities/680794/) ([search](http://search.nix.gsc.io/?q=mod_auth_mellon&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mod_auth_mellon+in%3Apath&type=Code))  mod_auth_mellon: denial of service
  - [x] [`#698499`](https://lwn.net/Vulnerabilities/698499/) ([search](http://search.nix.gsc.io/?q=typo3-cms-4_5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=typo3-cms-4_5+in%3Apath&type=Code))  typo3-cms-4_5: two vulnerabilities
  - [x] [`#695558`](https://lwn.net/Vulnerabilities/695558/) ([search](http://search.nix.gsc.io/?q=libupnp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libupnp+in%3Apath&type=Code))  libupnp: unauthenticated access
  - [x] [`#687592`](https://lwn.net/Vulnerabilities/687592/) ([search](http://search.nix.gsc.io/?q=wpa&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wpa+in%3Apath&type=Code))  wpa: two vulnerabilities
  - [x] [`#678822`](https://lwn.net/Vulnerabilities/678822/) ([search](http://search.nix.gsc.io/?q=exiv2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=exiv2+in%3Apath&type=Code))  exiv2: denial of service
  - [x] [`#695557`](https://lwn.net/Vulnerabilities/695557/) ([search](http://search.nix.gsc.io/?q=harfbuzz&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=harfbuzz+in%3Apath&type=Code))  harfbuzz: multiple vulnerabilities
  - [x] [`#686579`](https://lwn.net/Vulnerabilities/686579/) ([search](http://search.nix.gsc.io/?q=owncloud&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=owncloud+in%3Apath&type=Code))  owncloud: undisclosed vulnerabilities
  - [x] [`#681398`](https://lwn.net/Vulnerabilities/681398/) ([search](http://search.nix.gsc.io/?q=php-pecl-http&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-pecl-http+in%3Apath&type=Code))  php-pecl-http: multiple vulnerabilities
  - [x] [`#685005`](https://lwn.net/Vulnerabilities/685005/) ([search](http://search.nix.gsc.io/?q=parallel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=parallel+in%3Apath&type=Code))  parallel: file overwrites
  - [x] [`#687596`](https://lwn.net/Vulnerabilities/687596/) ([search](http://search.nix.gsc.io/?q=jackson-dataformat-xml&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jackson-dataformat-xml+in%3Apath&type=Code))  jackson-dataformat-xml: XXE attack
  - [x] [`#690791`](https://lwn.net/Vulnerabilities/690791/) ([search](http://search.nix.gsc.io/?q=haproxy&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=haproxy+in%3Apath&type=Code))  haproxy: denial of service
  - [x] [`#676097`](https://lwn.net/Vulnerabilities/676097/) ([search](http://search.nix.gsc.io/?q=springframework-social&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=springframework-social+in%3Apath&type=Code))  springframework-social: cross-site request forgery
  - [x] [`#692185`](https://lwn.net/Vulnerabilities/692185/) ([search](http://search.nix.gsc.io/?q=dnsmasq&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dnsmasq+in%3Apath&type=Code))  dnsmasq: denial of service
  - [x] [`#696807`](https://lwn.net/Vulnerabilities/696807/) ([search](http://search.nix.gsc.io/?q=fontconfig&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=fontconfig+in%3Apath&type=Code))  fontconfig: privilege escalation
  - [x] [`#674834`](https://lwn.net/Vulnerabilities/674834/) ([search](http://search.nix.gsc.io/?q=polarssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=polarssl+in%3Apath&type=Code))  polarssl: code execution
  - [x] [`#694103`](https://lwn.net/Vulnerabilities/694103/) ([search](http://search.nix.gsc.io/?q=nodejs-ws&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nodejs-ws+in%3Apath&type=Code))  nodejs-ws: denial of service
  - [x] [`#501450`](https://lwn.net/Vulnerabilities/501450/) ([search](http://search.nix.gsc.io/?q=FlightGear&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=FlightGear+in%3Apath&type=Code))  FlightGear: multiple vulnerabilities
  - [x] [`#682388`](https://lwn.net/Vulnerabilities/682388/) ([search](http://search.nix.gsc.io/?q=NetworkManager&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=NetworkManager+in%3Apath&type=Code))  networkmanager: multiple vulnerabilities
  - [x] [`#686454`](https://lwn.net/Vulnerabilities/686454/) ([search](http://search.nix.gsc.io/?q=obs-signd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=obs-signd+in%3Apath&type=Code))  obs-signd: improper user ID matching
  - [x] [`#682570`](https://lwn.net/Vulnerabilities/682570/) ([search](http://search.nix.gsc.io/?q=vtun&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=vtun+in%3Apath&type=Code))  vtun: denial of service
  - [x] [`#700521`](https://lwn.net/Vulnerabilities/700521/) ([search](http://search.nix.gsc.io/?q=libphp-adodb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libphp-adodb+in%3Apath&type=Code))  libphp-adodb: SQL injection
  - [x] [`#687394`](https://lwn.net/Vulnerabilities/687394/) ([search](http://search.nix.gsc.io/?q=v8&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=v8+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#685007`](https://lwn.net/Vulnerabilities/685007/) ([search](http://search.nix.gsc.io/?q=python-tgcaptcha2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-tgcaptcha2+in%3Apath&type=Code))  python-tgcaptcha2: reusable captchas
  - [x] [`#671445`](https://lwn.net/Vulnerabilities/671445/) ([search](http://search.nix.gsc.io/?q=gajim&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gajim+in%3Apath&type=Code))  gajim: man-in-the-middle
  - [x] [`#682159`](https://lwn.net/Vulnerabilities/682159/) ([search](http://search.nix.gsc.io/?q=kubernetes&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kubernetes+in%3Apath&type=Code))  kubernetes: improper admission check control
  - [x] [`#693176`](https://lwn.net/Vulnerabilities/693176/) ([search](http://search.nix.gsc.io/?q=libvirt&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libvirt+in%3Apath&type=Code))  libvirt: authentication bypass
  - [x] [`#592272`](https://lwn.net/Vulnerabilities/592272/) ([search](http://search.nix.gsc.io/?q=libxalan2-java&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libxalan2-java+in%3Apath&type=Code))  libxalan2-java: information disclosure/code execution
  - [x] [`#696418`](https://lwn.net/Vulnerabilities/696418/) ([search](http://search.nix.gsc.io/?q=pbuilder&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pbuilder+in%3Apath&type=Code))  pbuilder: file overwrite
  - [x] [`#699803`](https://lwn.net/Vulnerabilities/699803/) ([search](http://search.nix.gsc.io/?q=charybdis&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=charybdis+in%3Apath&type=Code))  charybdis: incorrect SASL authentication
  - [x] [`#701141`](https://lwn.net/Vulnerabilities/701141/) ([search](http://search.nix.gsc.io/?q=zookeeper&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=zookeeper+in%3Apath&type=Code))  zookeeper: buffer overflow
  - [x] [`#682759`](https://lwn.net/Vulnerabilities/682759/) ([search](http://search.nix.gsc.io/?q=file&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=file+in%3Apath&type=Code))  file: buffer over-write
  - [x] [`#680601`](https://lwn.net/Vulnerabilities/680601/) ([search](http://search.nix.gsc.io/?q=OpenAFS&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=OpenAFS+in%3Apath&type=Code))  openafs: multiple vulnerabilities
  - [x] [`#697946`](https://lwn.net/Vulnerabilities/697946/) ([search](http://search.nix.gsc.io/?q=suckless-tools&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=suckless-tools+in%3Apath&type=Code))  suckless-tools: screen locking bypass
  - [x] [`#689391`](https://lwn.net/Vulnerabilities/689391/) ([search](http://search.nix.gsc.io/?q=lxd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lxd+in%3Apath&type=Code))  lxd: two vulnerabilities
  - [x] [`#700391`](https://lwn.net/Vulnerabilities/700391/) ([search](http://search.nix.gsc.io/?q=python-jwcrypto&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-jwcrypto+in%3Apath&type=Code))  python-jwcrypto: information disclosure
  - [x] [`#678628`](https://lwn.net/Vulnerabilities/678628/) ([search](http://search.nix.gsc.io/?q=pcs&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pcs+in%3Apath&type=Code))  pcs: two vulnerabilities
  - [x] [`#695458`](https://lwn.net/Vulnerabilities/695458/) ([search](http://search.nix.gsc.io/?q=dietlibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dietlibc+in%3Apath&type=Code))  dietlibc: insecure default PATH
  - [x] [`#680318`](https://lwn.net/Vulnerabilities/680318/) ([search](http://search.nix.gsc.io/?q=spip&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=spip+in%3Apath&type=Code))  spip: two vulnerabilities
  - [x] [`#628611`](https://lwn.net/Vulnerabilities/628611/) ([search](http://search.nix.gsc.io/?q=libevent&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libevent+in%3Apath&type=Code))  libevent: denial of service
  - [x] [`#679616`](https://lwn.net/Vulnerabilities/679616/) ([search](http://search.nix.gsc.io/?q=libotr&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libotr+in%3Apath&type=Code))  libotr: code execution
  - [x] [`#697137`](https://lwn.net/Vulnerabilities/697137/) ([search](http://search.nix.gsc.io/?q=node.js-negotiator&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=node.js-negotiator+in%3Apath&type=Code))  node.js-negotiator: denial of service
  - [x] [`#685009`](https://lwn.net/Vulnerabilities/685009/) ([search](http://search.nix.gsc.io/?q=w3m&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=w3m+in%3Apath&type=Code))  w3m: denial of service
  - [x] [`#665238`](https://lwn.net/Vulnerabilities/665238/) ([search](http://search.nix.gsc.io/?q=gcc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gcc+in%3Apath&type=Code))  gcc: predictable random values
  - [x] [`#615071`](https://lwn.net/Vulnerabilities/615071/) ([search](http://search.nix.gsc.io/?q=nodejs-qs&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nodejs-qs+in%3Apath&type=Code))  nodejs-qs: denial of service
  - [x] [`#673018`](https://lwn.net/Vulnerabilities/673018/) ([search](http://search.nix.gsc.io/?q=cgit&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cgit+in%3Apath&type=Code))  cgit: three vulnerabilities
  - [x] [`#669406`](https://lwn.net/Vulnerabilities/669406/) ([search](http://search.nix.gsc.io/?q=openstack-swift-plugin-swift3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openstack-swift-plugin-swift3+in%3Apath&type=Code))  openstack-swift-plugin-swift3: replay attack
  - [x] [`#660897`](https://lwn.net/Vulnerabilities/660897/) ([search](http://search.nix.gsc.io/?q=docker-engine&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=docker-engine+in%3Apath&type=Code))  docker-engine: two vulnerabilities
  - [x] [`#675372`](https://lwn.net/Vulnerabilities/675372/) ([search](http://search.nix.gsc.io/?q=postgresql-9.3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=postgresql-9.3+in%3Apath&type=Code))  postgresql: two vulnerabilities
  - [x] [`#680793`](https://lwn.net/Vulnerabilities/680793/) ([search](http://search.nix.gsc.io/?q=drupal6-emfield&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal6-emfield+in%3Apath&type=Code))  drupal6-emfield: access bypass
  - [x] [`#646558`](https://lwn.net/Vulnerabilities/646558/) ([search](http://search.nix.gsc.io/?q=tomcat6&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tomcat6+in%3Apath&type=Code))  tomcat6: Security Manager bypass
  - [x] [`#697438`](https://lwn.net/Vulnerabilities/697438/) ([search](http://search.nix.gsc.io/?q=drupal7-theme-zen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal7-theme-zen+in%3Apath&type=Code))  drupal7-theme-zen: cross-site scripting
  - [x] [`#690142`](https://lwn.net/Vulnerabilities/690142/) ([search](http://search.nix.gsc.io/?q=dhcpcd5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dhcpcd5+in%3Apath&type=Code))  dhcpcd5: code execution
  - [x] [`#692030`](https://lwn.net/Vulnerabilities/692030/) ([search](http://search.nix.gsc.io/?q=iperf3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=iperf3+in%3Apath&type=Code))  iperf3: denial of service
  - [x] [`#701626`](https://lwn.net/Vulnerabilities/701626/) ([search](http://search.nix.gsc.io/?q=irssi&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=irssi+in%3Apath&type=Code))  irssi: heap corruption
  - [x] [`#690142`](https://lwn.net/Vulnerabilities/690142/) ([search](http://search.nix.gsc.io/?q=dhcpcd5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dhcpcd5+in%3Apath&type=Code))  dhcpcd5: code execution
  - [x] [`#701631`](https://lwn.net/Vulnerabilities/701631/) ([search](http://search.nix.gsc.io/?q=drupal7-panels&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal7-panels+in%3Apath&type=Code))  drupal panels: multiple vulnerabilities
  - [x] [`#701630`](https://lwn.net/Vulnerabilities/701630/) ([search](http://search.nix.gsc.io/?q=drupal7-google_analytics&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal7-google_analytics+in%3Apath&type=Code))  drupal7-google_analytics: cross-site scripting
  - [x] [`#692518`](https://lwn.net/Vulnerabilities/692518/) ([search](http://search.nix.gsc.io/?q=squidguard&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squidguard+in%3Apath&type=Code))  squidguard: cross-site scripting
  - [x] [`#672436`](https://lwn.net/Vulnerabilities/672436/) ([search](http://search.nix.gsc.io/?q=srtp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=srtp+in%3Apath&type=Code))  srtp: denial of service
  - [x] [`#684595`](https://lwn.net/Vulnerabilities/684595/) ([search](http://search.nix.gsc.io/?q=springframework-amqp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=springframework-amqp+in%3Apath&type=Code))  springframework-amqp: code execution
  - [x] [`#663516`](https://lwn.net/Vulnerabilities/663516/) ([search](http://search.nix.gsc.io/?q=libxslt&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libxslt+in%3Apath&type=Code))  libxslt: denial of service
  - [x] [`#686289`](https://lwn.net/Vulnerabilities/686289/) ([search](http://search.nix.gsc.io/?q=minissdpd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=minissdpd+in%3Apath&type=Code))  minissdpd: denial of service
  - [x] [`#694783`](https://lwn.net/Vulnerabilities/694783/) ([search](http://search.nix.gsc.io/?q=binutils&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=binutils+in%3Apath&type=Code))  binutils: multiple vulnerabilities
  - [x] [`#698653`](https://lwn.net/Vulnerabilities/698653/) ([search](http://search.nix.gsc.io/?q=freeipa&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=freeipa+in%3Apath&type=Code))  freeipa: denial of service
  - [x] [`#675368`](https://lwn.net/Vulnerabilities/675368/) ([search](http://search.nix.gsc.io/?q=libgcrypt20&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libgcrypt20+in%3Apath&type=Code))  libgcrypt20: key leak
  - [x] [`#693577`](https://lwn.net/Vulnerabilities/693577/) ([search](http://search.nix.gsc.io/?q=cronic&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cronic+in%3Apath&type=Code))  cronic: predictable temporary files
  - [x] [`#678159`](https://lwn.net/Vulnerabilities/678159/) ([search](http://search.nix.gsc.io/?q=okhttp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=okhttp+in%3Apath&type=Code))  okhttp: certificate pinning bypass
  - [x] [`#692179`](https://lwn.net/Vulnerabilities/692179/) ([search](http://search.nix.gsc.io/?q=ctdb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ctdb+in%3Apath&type=Code))  ctdb: privilege escalation
  - [x] [`#692851`](https://lwn.net/Vulnerabilities/692851/) ([search](http://search.nix.gsc.io/?q=libpurple&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libpurple+in%3Apath&type=Code))  libpurple: multiple vulnerabilities
  - [x] [`#688457`](https://lwn.net/Vulnerabilities/688457/) ([search](http://search.nix.gsc.io/?q=php-ZendFramework2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-ZendFramework2+in%3Apath&type=Code))  php-ZendFramework2: insecure ciphertexts
  - [x] [`#687591`](https://lwn.net/Vulnerabilities/687591/) ([search](http://search.nix.gsc.io/?q=dosfstools&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dosfstools+in%3Apath&type=Code))  dosfstools: two vulnerabilities
  - [x] [`#701142`](https://lwn.net/Vulnerabilities/701142/) ([search](http://search.nix.gsc.io/?q=mock&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mock+in%3Apath&type=Code))  distribution-gpg-keys: privilege escalation
  - [x] [`#701633`](https://lwn.net/Vulnerabilities/701633/) ([search](http://search.nix.gsc.io/?q=php-horde-Horde-Mime-Viewer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-horde-Horde-Mime-Viewer+in%3Apath&type=Code))  Horde: cross-site scripting
  - [x] [`#686446`](https://lwn.net/Vulnerabilities/686446/) ([search](http://search.nix.gsc.io/?q=libpam-sshauth&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libpam-sshauth+in%3Apath&type=Code))  libpam-sshauth: privilege escalation
  - [x] [`#688597`](https://lwn.net/Vulnerabilities/688597/) ([search](http://search.nix.gsc.io/?q=php7.0&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php7.0+in%3Apath&type=Code))  php: two vulnerabilities
  - [x] [`#684596`](https://lwn.net/Vulnerabilities/684596/) ([search](http://search.nix.gsc.io/?q=giflib&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=giflib+in%3Apath&type=Code))  giflib: denial of service
  - [x] [`#699685`](https://lwn.net/Vulnerabilities/699685/) ([search](http://search.nix.gsc.io/?q=ganglia&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ganglia+in%3Apath&type=Code))  ganglia: cross-site scripting
  - [x] [`#657320`](https://lwn.net/Vulnerabilities/657320/) ([search](http://search.nix.gsc.io/?q=icedtea-web&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=icedtea-web+in%3Apath&type=Code))  icedtea-web: applet execution
  - [x] [`#657406`](https://lwn.net/Vulnerabilities/657406/) ([search](http://search.nix.gsc.io/?q=php-doctrine-annotations&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-doctrine-annotations+in%3Apath&type=Code))  php-doctrine-annotations: privilege escalation
  - [x] [`#674840`](https://lwn.net/Vulnerabilities/674840/) ([search](http://search.nix.gsc.io/?q=socat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=socat+in%3Apath&type=Code))  socat: man-in-the-middle
  - [x] [`#686575`](https://lwn.net/Vulnerabilities/686575/) ([search](http://search.nix.gsc.io/?q=quassel-core&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=quassel-core+in%3Apath&type=Code))  quassel-core: denial of service
  - [x] [`#685012`](https://lwn.net/Vulnerabilities/685012/) ([search](http://search.nix.gsc.io/?q=yast2-users&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=yast2-users+in%3Apath&type=Code))  yast2-users: empty passwords fields in /etc/shadow
  - [x] [`#684746`](https://lwn.net/Vulnerabilities/684746/) ([search](http://search.nix.gsc.io/?q=drupal7-block_class&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal7-block_class+in%3Apath&type=Code))  drupal7-block_class: cross-site scripting
  - [x] [`#674836`](https://lwn.net/Vulnerabilities/674836/) ([search](http://search.nix.gsc.io/?q=linux-2.6&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=linux-2.6+in%3Apath&type=Code))  kernel: privilege escalation
  - [x] [`#674704`](https://lwn.net/Vulnerabilities/674704/) ([search](http://search.nix.gsc.io/?q=libbsd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libbsd+in%3Apath&type=Code))  libbsd: denial of service
  - [x] [`#690416`](https://lwn.net/Vulnerabilities/690416/) ([search](http://search.nix.gsc.io/?q=openslp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openslp+in%3Apath&type=Code))  openslp: denial of service
  - [x] [`#683994`](https://lwn.net/Vulnerabilities/683994/) ([search](http://search.nix.gsc.io/?q=libtasn1&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libtasn1+in%3Apath&type=Code))  libtasn1: denial of service
  - [x] [`#690141`](https://lwn.net/Vulnerabilities/690141/) ([search](http://search.nix.gsc.io/?q=spice&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=spice+in%3Apath&type=Code))  spice: two vulnerabilities
  - [x] [`#671465`](https://lwn.net/Vulnerabilities/671465/) ([search](http://search.nix.gsc.io/?q=rsync&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=rsync+in%3Apath&type=Code))  rsync: unsafe destination path
  - [x] [`#695968`](https://lwn.net/Vulnerabilities/695968/) ([search](http://search.nix.gsc.io/?q=kernel-uek&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel-uek+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#685879`](https://lwn.net/Vulnerabilities/685879/) ([search](http://search.nix.gsc.io/?q=openvas&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openvas+in%3Apath&type=Code))  openvas: cross-site scripting
  - [x] [`#690024`](https://lwn.net/Vulnerabilities/690024/) ([search](http://search.nix.gsc.io/?q=puppet-agent&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=puppet-agent+in%3Apath&type=Code))  puppet-agent: multiple vulnerabilities
  - [x] [`#684747`](https://lwn.net/Vulnerabilities/684747/) ([search](http://search.nix.gsc.io/?q=glpi&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glpi+in%3Apath&type=Code))  glpi: SQL injection
  - [x] [`#500144`](https://lwn.net/Vulnerabilities/500144/) ([search](http://search.nix.gsc.io/?q=arpwatch&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=arpwatch+in%3Apath&type=Code))  arpwatch: privilege escalation
  - [x] [`#642646`](https://lwn.net/Vulnerabilities/642646/) ([search](http://search.nix.gsc.io/?q=fcgi&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=fcgi+in%3Apath&type=Code))  fcgi: denial of service
  - [x] [`#682576`](https://lwn.net/Vulnerabilities/682576/) ([search](http://search.nix.gsc.io/?q=xchat-gnome&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xchat-gnome+in%3Apath&type=Code))  xchat-gnome: man-in-the-middle attack
  - [x] [`#682387`](https://lwn.net/Vulnerabilities/682387/) ([search](http://search.nix.gsc.io/?q=apache-commons-collections&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=apache-commons-collections+in%3Apath&type=Code))  apache-commons-collections: code execution
  - [x] [`#701151`](https://lwn.net/Vulnerabilities/701151/) ([search](http://search.nix.gsc.io/?q=php-adodb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-adodb+in%3Apath&type=Code))  php-adodb: cross-site scripting
  - [x] [`#701634`](https://lwn.net/Vulnerabilities/701634/) ([search](http://search.nix.gsc.io/?q=php-horde-Horde-Text-Filter&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-horde-Horde-Text-Filter+in%3Apath&type=Code))  Horde: cross-site scripting
  - [x] [`#674843`](https://lwn.net/Vulnerabilities/674843/) ([search](http://search.nix.gsc.io/?q=rubygem-rails-html-sanitizer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=rubygem-rails-html-sanitizer+in%3Apath&type=Code))  rubygem-rails-html-sanitizer: multiple vulnerabilities
  - [x] [`#694627`](https://lwn.net/Vulnerabilities/694627/) ([search](http://search.nix.gsc.io/?q=util-linux&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=util-linux+in%3Apath&type=Code))  util-linux: denial of service
  - [x] [`#689249`](https://lwn.net/Vulnerabilities/689249/) ([search](http://search.nix.gsc.io/?q=openafs&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openafs+in%3Apath&type=Code))  openafs: denial of service
  - [x] [`#693576`](https://lwn.net/Vulnerabilities/693576/) ([search](http://search.nix.gsc.io/?q=libgd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libgd+in%3Apath&type=Code))  libgd: denial of service
  - [x] [`#696702`](https://lwn.net/Vulnerabilities/696702/) ([search](http://search.nix.gsc.io/?q=stunnel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=stunnel+in%3Apath&type=Code))  stunnel: two vulnerabilities
  - [x] [`#677979`](https://lwn.net/Vulnerabilities/677979/) ([search](http://search.nix.gsc.io/?q=jabberd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jabberd+in%3Apath&type=Code))  jabberd: cryptographically insecure
  - [x] [`#692522`](https://lwn.net/Vulnerabilities/692522/) ([search](http://search.nix.gsc.io/?q=obs-service-source_validator&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=obs-service-source_validator+in%3Apath&type=Code))  obs-service-source_validator: code execution
  - [x] [`#699804`](https://lwn.net/Vulnerabilities/699804/) ([search](http://search.nix.gsc.io/?q=libtomcrypt&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libtomcrypt+in%3Apath&type=Code))  libtomcrypt: signature forgery
  - [x] [`#674258`](https://lwn.net/Vulnerabilities/674258/) ([search](http://search.nix.gsc.io/?q=gosa&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gosa+in%3Apath&type=Code))  gosa: code injection
  - [x] [`#697262`](https://lwn.net/Vulnerabilities/697262/) ([search](http://search.nix.gsc.io/?q=drupal7-entity_translation&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal7-entity_translation+in%3Apath&type=Code))  drupal7-entity_translation: cross-site scripting
  - [x] [`#687711`](https://lwn.net/Vulnerabilities/687711/) ([search](http://search.nix.gsc.io/?q=libndp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libndp+in%3Apath&type=Code))  libndp: man-in-the-middle attacks
  - [x] [`#676929`](https://lwn.net/Vulnerabilities/676929/) ([search](http://search.nix.gsc.io/?q=libssh&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libssh+in%3Apath&type=Code))  libssh: insecure ssh sessions
  - [x] [`#701632`](https://lwn.net/Vulnerabilities/701632/) ([search](http://search.nix.gsc.io/?q=mod_cluster&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mod_cluster+in%3Apath&type=Code))  mod_cluster: "remote exploits"
  - [x] [`#669408`](https://lwn.net/Vulnerabilities/669408/) ([search](http://search.nix.gsc.io/?q=gummi&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gummi+in%3Apath&type=Code))  gummi: predictable filenames in /tmp
  - [x] [`#695808`](https://lwn.net/Vulnerabilities/695808/) ([search](http://search.nix.gsc.io/?q=drupal7-views&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal7-views+in%3Apath&type=Code))  drupal7-views: access bypass
  - [x] [`#650307`](https://lwn.net/Vulnerabilities/650307/) ([search](http://search.nix.gsc.io/?q=polkit&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=polkit+in%3Apath&type=Code))  polkit: multiple vulnerabilities
  - [x] [`#683995`](https://lwn.net/Vulnerabilities/683995/) ([search](http://search.nix.gsc.io/?q=poppler&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=poppler+in%3Apath&type=Code))  poppler: code execution
  - [x] [`#695964`](https://lwn.net/Vulnerabilities/695964/) ([search](http://search.nix.gsc.io/?q=php-pecl-zip&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-pecl-zip+in%3Apath&type=Code))  php-pecl-zip: buffer overflow
  - [x] [`#689247`](https://lwn.net/Vulnerabilities/689247/) ([search](http://search.nix.gsc.io/?q=symfony&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=symfony+in%3Apath&type=Code))  symfony: two vulnerabilities
  - [x] [`#692375`](https://lwn.net/Vulnerabilities/692375/) ([search](http://search.nix.gsc.io/?q=setroubleshoot-plugins&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=setroubleshoot-plugins+in%3Apath&type=Code))  setroubleshoot: multiple vulnerabilities
  - [x] [`#679629`](https://lwn.net/Vulnerabilities/679629/) ([search](http://search.nix.gsc.io/?q=libmodbus&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libmodbus+in%3Apath&type=Code))  libmodbus: buffer overflow
  - [x] [`#669659`](https://lwn.net/Vulnerabilities/669659/) ([search](http://search.nix.gsc.io/?q=encfs&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=encfs+in%3Apath&type=Code))  encfs: multiple vulnerabilities
  - [x] [`#700836`](https://lwn.net/Vulnerabilities/700836/) ([search](http://search.nix.gsc.io/?q=autotrace&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=autotrace+in%3Apath&type=Code))  autotrace: code execution
  - [x] [`#694861`](https://lwn.net/Vulnerabilities/694861/) ([search](http://search.nix.gsc.io/?q=apache2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=apache2+in%3Apath&type=Code))  httpd: HTTP redirect
  - [x] [`#696215`](https://lwn.net/Vulnerabilities/696215/) ([search](http://search.nix.gsc.io/?q=lighttpd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lighttpd+in%3Apath&type=Code))  lighttpd: man-in-the-middle attacks
  - [x] [`#696808`](https://lwn.net/Vulnerabilities/696808/) ([search](http://search.nix.gsc.io/?q=flex&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=flex+in%3Apath&type=Code))  flex: buffer overflow
  - [x] [`#594740`](https://lwn.net/Vulnerabilities/594740/) ([search](http://search.nix.gsc.io/?q=nagios&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nagios+in%3Apath&type=Code))  nagios: denial of service
  - [x] [`#677960`](https://lwn.net/Vulnerabilities/677960/) ([search](http://search.nix.gsc.io/?q=xymon&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xymon+in%3Apath&type=Code))  xymon: multiple vulnerabilities
  - [x] [`#688210`](https://lwn.net/Vulnerabilities/688210/) ([search](http://search.nix.gsc.io/?q=gdk-pixbuf2.0&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gdk-pixbuf2.0+in%3Apath&type=Code))  gdk-pixbuf2.0: code execution
  - [x] [`#693865`](https://lwn.net/Vulnerabilities/693865/) ([search](http://search.nix.gsc.io/?q=tcpreplay&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tcpreplay+in%3Apath&type=Code))  tcpreplay: denial of service
  - [x] [`#699163`](https://lwn.net/Vulnerabilities/699163/) ([search](http://search.nix.gsc.io/?q=mailman&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mailman+in%3Apath&type=Code))  mailman: password disclosure
  - [x] [`#632256`](https://lwn.net/Vulnerabilities/632256/) ([search](http://search.nix.gsc.io/?q=hexchat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=hexchat+in%3Apath&type=Code))  hexchat: SSL spoofing
  - [x] [`#676274`](https://lwn.net/Vulnerabilities/676274/) ([search](http://search.nix.gsc.io/?q=libxmp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libxmp+in%3Apath&type=Code))  libxmp: multiple vulnerabilities
  - [x] [`#696696`](https://lwn.net/Vulnerabilities/696696/) ([search](http://search.nix.gsc.io/?q=mongodb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mongodb+in%3Apath&type=Code))  mongodb: two vulnerabilities
  - [x] [`#681647`](https://lwn.net/Vulnerabilities/681647/) ([search](http://search.nix.gsc.io/?q=openvswitch&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openvswitch+in%3Apath&type=Code))  openvswitch: code execution
  - [x] [`#684749`](https://lwn.net/Vulnerabilities/684749/) ([search](http://search.nix.gsc.io/?q=lha&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lha+in%3Apath&type=Code))  lha: buffer overflow
  - [x] [`#654283`](https://lwn.net/Vulnerabilities/654283/) ([search](http://search.nix.gsc.io/?q=gnutls28&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gnutls28+in%3Apath&type=Code))  gnutls: denial of service
  - [x] [`#681098`](https://lwn.net/Vulnerabilities/681098/) ([search](http://search.nix.gsc.io/?q=libmatroska&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libmatroska+in%3Apath&type=Code))  libmatroska: information leak
  - [x] [`#686749`](https://lwn.net/Vulnerabilities/686749/) ([search](http://search.nix.gsc.io/?q=ikiwiki&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ikiwiki+in%3Apath&type=Code))  ikiwiki: cross-site scripting
  - [x] [`#673455`](https://lwn.net/Vulnerabilities/673455/) ([search](http://search.nix.gsc.io/?q=privoxy&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=privoxy+in%3Apath&type=Code))  privoxy: two denial of service flaws
  - [x] [`#694102`](https://lwn.net/Vulnerabilities/694102/) ([search](http://search.nix.gsc.io/?q=davfs2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=davfs2+in%3Apath&type=Code))  davfs2: unspecified
  - [x] [`#687590`](https://lwn.net/Vulnerabilities/687590/) ([search](http://search.nix.gsc.io/?q=jansson&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jansson+in%3Apath&type=Code))  jansson: denial of service
  - [x] [`#697945`](https://lwn.net/Vulnerabilities/697945/) ([search](http://search.nix.gsc.io/?q=cracklib2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cracklib2+in%3Apath&type=Code))  cracklib2: code execution
  - [x] [`#697141`](https://lwn.net/Vulnerabilities/697141/) ([search](http://search.nix.gsc.io/?q=python&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python+in%3Apath&type=Code))  python: proxy injection
  - [x] [`#672564`](https://lwn.net/Vulnerabilities/672564/) ([search](http://search.nix.gsc.io/?q=radicale&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=radicale+in%3Apath&type=Code))  radicale: multiple vulnerabilities
  - [x] [`#674706`](https://lwn.net/Vulnerabilities/674706/) ([search](http://search.nix.gsc.io/?q=salt&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=salt+in%3Apath&type=Code))  salt: information leak
  - [x] [`#676794`](https://lwn.net/Vulnerabilities/676794/) ([search](http://search.nix.gsc.io/?q=php-horde-horde&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-horde-horde+in%3Apath&type=Code))  php-horde-horde: cross-site scripting
  - [x] [`#686288`](https://lwn.net/Vulnerabilities/686288/) ([search](http://search.nix.gsc.io/?q=lib32-openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lib32-openssl+in%3Apath&type=Code))  openssl: information leak
  - [x] [`#688452`](https://lwn.net/Vulnerabilities/688452/) ([search](http://search.nix.gsc.io/?q=php-symfony&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-symfony+in%3Apath&type=Code))  php-symfony: buffer overflow
  - [x] [`#685875`](https://lwn.net/Vulnerabilities/685875/) ([search](http://search.nix.gsc.io/?q=tardiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tardiff+in%3Apath&type=Code))  tardiff: two vulnerabilities
  - [x] [`#647621`](https://lwn.net/Vulnerabilities/647621/) ([search](http://search.nix.gsc.io/?q=rabbitmq-server&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=rabbitmq-server+in%3Apath&type=Code))  rabbitmq-server: multiple vulnerabilities
  - [x] [`#668547`](https://lwn.net/Vulnerabilities/668547/) ([search](http://search.nix.gsc.io/?q=sosreport&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=sosreport+in%3Apath&type=Code))  sosreport: two vulnerabilities
  - [x] [`#676787`](https://lwn.net/Vulnerabilities/676787/) ([search](http://search.nix.gsc.io/?q=didiwiki&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=didiwiki+in%3Apath&type=Code))  didiwiki: unintended access
  - [x] [`#674493`](https://lwn.net/Vulnerabilities/674493/) ([search](http://search.nix.gsc.io/?q=lib32-nettle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=lib32-nettle+in%3Apath&type=Code))  nettle: improper cryptographic calculations
  - [x] [`#693574`](https://lwn.net/Vulnerabilities/693574/) ([search](http://search.nix.gsc.io/?q=sqlite3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=sqlite3+in%3Apath&type=Code))  sqlite3: information leak
  - [x] [`#698658`](https://lwn.net/Vulnerabilities/698658/) ([search](http://search.nix.gsc.io/?q=rubygem-actionpack&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=rubygem-actionpack+in%3Apath&type=Code))  rubygem-actionpack: unsafe query generation
  - [x] [`#646898`](https://lwn.net/Vulnerabilities/646898/) ([search](http://search.nix.gsc.io/?q=mysql-connector-java&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-connector-java+in%3Apath&type=Code))  mysql-connector-java: information disclosure
  - [x] [`#696805`](https://lwn.net/Vulnerabilities/696805/) ([search](http://search.nix.gsc.io/?q=nodejs010-nodejs-minimatch&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nodejs010-nodejs-minimatch+in%3Apath&type=Code))  minimatch: denial of service
  - [x] [`#692859`](https://lwn.net/Vulnerabilities/692859/) ([search](http://search.nix.gsc.io/?q=mirrormanager&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mirrormanager+in%3Apath&type=Code))  mirrormanager: code execution
  - [x] [`#677959`](https://lwn.net/Vulnerabilities/677959/) ([search](http://search.nix.gsc.io/?q=pillow&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pillow+in%3Apath&type=Code))  pillow: code execution
  - [x] [`#694861`](https://lwn.net/Vulnerabilities/694861/) ([search](http://search.nix.gsc.io/?q=apache&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=apache+in%3Apath&type=Code))  httpd: HTTP redirect
  - [x] [`#685137`](https://lwn.net/Vulnerabilities/685137/) ([search](http://search.nix.gsc.io/?q=ansible1.9&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ansible1.9+in%3Apath&type=Code))  ansible: code execution
  - [x] [`#638544`](https://lwn.net/Vulnerabilities/638544/) ([search](http://search.nix.gsc.io/?q=freexl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=freexl+in%3Apath&type=Code))  freexl: code execution
  - [x] [`#673582`](https://lwn.net/Vulnerabilities/673582/) ([search](http://search.nix.gsc.io/?q=mariadb-10.0&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mariadb-10.0+in%3Apath&type=Code))  mariadb: multiple vulnerabilities
  - [x] [`#664752`](https://lwn.net/Vulnerabilities/664752/) ([search](http://search.nix.gsc.io/?q=libpng&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libpng+in%3Apath&type=Code))  lib32-libpng: denial of service
  - [x] [`#695170`](https://lwn.net/Vulnerabilities/695170/) ([search](http://search.nix.gsc.io/?q=mysql-5.7&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-5.7+in%3Apath&type=Code))  mysql: multiple unspecified vulnerabilities
  - [x] [`#701352`](https://lwn.net/Vulnerabilities/701352/) ([search](http://search.nix.gsc.io/?q=unadf&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=unadf+in%3Apath&type=Code))  unadf: two vulnerabilities
  - [x] [`#681399`](https://lwn.net/Vulnerabilities/681399/) ([search](http://search.nix.gsc.io/?q=torbrowser-launcher&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=torbrowser-launcher+in%3Apath&type=Code))  torbrowser-launcher: signature verification bypass
  - [x] [`#686751`](https://lwn.net/Vulnerabilities/686751/) ([search](http://search.nix.gsc.io/?q=libecap&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libecap+in%3Apath&type=Code))  libecap: denial  of service
  - [x] [`#619213`](https://lwn.net/Vulnerabilities/619213/) ([search](http://search.nix.gsc.io/?q=php-Smarty&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-Smarty+in%3Apath&type=Code))  php-Smarty: code execution
  - [x] [`#685492`](https://lwn.net/Vulnerabilities/685492/) ([search](http://search.nix.gsc.io/?q=i7z&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=i7z+in%3Apath&type=Code))  i7z: denial of service
  - [x] [`#685290`](https://lwn.net/Vulnerabilities/685290/) ([search](http://search.nix.gsc.io/?q=xstream&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xstream+in%3Apath&type=Code))  xstream: enabled processing of external entities
  - [x] [`#696207`](https://lwn.net/Vulnerabilities/696207/) ([search](http://search.nix.gsc.io/?q=libtiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libtiff+in%3Apath&type=Code))  libtiff: multiple vulnerabilities
  ### Chromium (2 issues)
  - [x] [`#696700`](https://lwn.net/Vulnerabilities/696700/) ([search](http://search.nix.gsc.io/?q=Chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=Chromium+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#682155`](https://lwn.net/Vulnerabilities/682155/) ([search](http://search.nix.gsc.io/?q=Chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=Chromium+in%3Apath&type=Code))  Chromium: denial of service
  ### GraphicsMagick (4 issues)
  - [x] [`#700838`](https://lwn.net/Vulnerabilities/700838/) ([search](http://search.nix.gsc.io/?q=GraphicsMagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=GraphicsMagick+in%3Apath&type=Code))  graphicsmagick: multiple vulnerabilities
  - [x] [`#693480`](https://lwn.net/Vulnerabilities/693480/) ([search](http://search.nix.gsc.io/?q=GraphicsMagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=GraphicsMagick+in%3Apath&type=Code))  graphicsmagick: multiple vulnerabilities
  - [x] [`#692029`](https://lwn.net/Vulnerabilities/692029/) ([search](http://search.nix.gsc.io/?q=GraphicsMagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=GraphicsMagick+in%3Apath&type=Code))  GraphicsMagick: denial of service
  - [x] [`#677107`](https://lwn.net/Vulnerabilities/677107/) ([search](http://search.nix.gsc.io/?q=GraphicsMagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=GraphicsMagick+in%3Apath&type=Code))  GraphicsMagick: out-of-bounds read flaw
  ### ImageMagick (2 issues)
  - [x] [`#697263`](https://lwn.net/Vulnerabilities/697263/) ([search](http://search.nix.gsc.io/?q=ImageMagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ImageMagick+in%3Apath&type=Code))  imagemagick: two vulnerabilities
  - [x] [`#693727`](https://lwn.net/Vulnerabilities/693727/) ([search](http://search.nix.gsc.io/?q=ImageMagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ImageMagick+in%3Apath&type=Code))  imagemagick: many vulnerabilities
  ### bind (3 issues)
  - [x] [`#695097`](https://lwn.net/Vulnerabilities/695097/) ([search](http://search.nix.gsc.io/?q=bind&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bind+in%3Apath&type=Code))  bind: denial of service
  - [x] [`#679612`](https://lwn.net/Vulnerabilities/679612/) ([search](http://search.nix.gsc.io/?q=bind&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bind+in%3Apath&type=Code))  bind: multiple vulnerabilities
  - [x] [`#679760`](https://lwn.net/Vulnerabilities/679760/) ([search](http://search.nix.gsc.io/?q=bind&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=bind+in%3Apath&type=Code))  bind: denial of service
  ### botan (3 issues)
  - [x] [`#681390`](https://lwn.net/Vulnerabilities/681390/) ([search](http://search.nix.gsc.io/?q=botan&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=botan+in%3Apath&type=Code))  botan: multiple vulnerabilities
  - [x] [`#679255`](https://lwn.net/Vulnerabilities/679255/) ([search](http://search.nix.gsc.io/?q=botan&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=botan+in%3Apath&type=Code))  botan: two vulnerabilities
  - [x] [`#675225`](https://lwn.net/Vulnerabilities/675225/) ([search](http://search.nix.gsc.io/?q=botan&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=botan+in%3Apath&type=Code))  botan: three vulnerabilities
  ### botan1.10 (2 issues)
  - [x] [`#685877`](https://lwn.net/Vulnerabilities/685877/) ([search](http://search.nix.gsc.io/?q=botan1.10&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=botan1.10+in%3Apath&type=Code))  botan: insufficient randomness
  - [x] [`#685873`](https://lwn.net/Vulnerabilities/685873/) ([search](http://search.nix.gsc.io/?q=botan1.10&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=botan1.10+in%3Apath&type=Code))  botan: side channel attack
  ### cacti (3 issues)
  - [x] [`#687042`](https://lwn.net/Vulnerabilities/687042/) ([search](http://search.nix.gsc.io/?q=cacti&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cacti+in%3Apath&type=Code))  cacti: SQL injection
  - [x] [`#687864`](https://lwn.net/Vulnerabilities/687864/) ([search](http://search.nix.gsc.io/?q=cacti&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cacti+in%3Apath&type=Code))  cacti: SQL injection
  - [x] [`#675369`](https://lwn.net/Vulnerabilities/675369/) ([search](http://search.nix.gsc.io/?q=cacti&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=cacti+in%3Apath&type=Code))  cacti: authentication bypass
  ### chromium (11 issues)
  - [x] [`#687394`](https://lwn.net/Vulnerabilities/687394/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#699161`](https://lwn.net/Vulnerabilities/699161/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#695320`](https://lwn.net/Vulnerabilities/695320/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#689242`](https://lwn.net/Vulnerabilities/689242/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#692035`](https://lwn.net/Vulnerabilities/692035/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#687715`](https://lwn.net/Vulnerabilities/687715/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: directory traversal
  - [x] [`#681568`](https://lwn.net/Vulnerabilities/681568/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#679613`](https://lwn.net/Vulnerabilities/679613/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#680036`](https://lwn.net/Vulnerabilities/680036/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: two vulnerabilities
  - [x] [`#678807`](https://lwn.net/Vulnerabilities/678807/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#676784`](https://lwn.net/Vulnerabilities/676784/) ([search](http://search.nix.gsc.io/?q=chromium&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium+in%3Apath&type=Code))  chromium: code execution
  ### chromium-browser (7 issues)
  - [x] [`#700835`](https://lwn.net/Vulnerabilities/700835/) ([search](http://search.nix.gsc.io/?q=chromium-browser&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium-browser+in%3Apath&type=Code))  chromium-browser: multiple vulnerabilities
  - [x] [`#689718`](https://lwn.net/Vulnerabilities/689718/) ([search](http://search.nix.gsc.io/?q=chromium-browser&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium-browser+in%3Apath&type=Code))  chromium-browser: multiple vulnerabilities
  - [x] [`#685867`](https://lwn.net/Vulnerabilities/685867/) ([search](http://search.nix.gsc.io/?q=chromium-browser&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium-browser+in%3Apath&type=Code))  chromium-browser: multiple vulnerabilities
  - [x] [`#683985`](https://lwn.net/Vulnerabilities/683985/) ([search](http://search.nix.gsc.io/?q=chromium-browser&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium-browser+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#601056`](https://lwn.net/Vulnerabilities/601056/) ([search](http://search.nix.gsc.io/?q=chromium-browser&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium-browser+in%3Apath&type=Code))  chromium-browser: multiple vulnerabilities
  - [x] [`#676786`](https://lwn.net/Vulnerabilities/676786/) ([search](http://search.nix.gsc.io/?q=chromium-browser&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium-browser+in%3Apath&type=Code))  chromium: code execution
  - [x] [`#676077`](https://lwn.net/Vulnerabilities/676077/) ([search](http://search.nix.gsc.io/?q=chromium-browser&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=chromium-browser+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  ### claws-mail (2 issues)
  - [x] [`#669041`](https://lwn.net/Vulnerabilities/669041/) ([search](http://search.nix.gsc.io/?q=claws-mail&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=claws-mail+in%3Apath&type=Code))  claws-mail: code execution
  - [x] [`#674837`](https://lwn.net/Vulnerabilities/674837/) ([search](http://search.nix.gsc.io/?q=claws-mail&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=claws-mail+in%3Apath&type=Code))  claws-mail: stack-based buffer overflow
  ### community-mysql (2 issues)
  - [x] [`#694101`](https://lwn.net/Vulnerabilities/694101/) ([search](http://search.nix.gsc.io/?q=community-mysql&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=community-mysql+in%3Apath&type=Code))  community-mysql: unspecified
  - [x] [`#679627`](https://lwn.net/Vulnerabilities/679627/) ([search](http://search.nix.gsc.io/?q=community-mysql&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=community-mysql+in%3Apath&type=Code))  community-mysql: multiple vulnerabilities
  ### curl (5 issues)
  - [x] [`#700965`](https://lwn.net/Vulnerabilities/700965/) ([search](http://search.nix.gsc.io/?q=curl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=curl+in%3Apath&type=Code))  curl: code execution
  - [x] [`#700112`](https://lwn.net/Vulnerabilities/700112/) ([search](http://search.nix.gsc.io/?q=curl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=curl+in%3Apath&type=Code))  curl: certificate reuse
  - [x] [`#696214`](https://lwn.net/Vulnerabilities/696214/) ([search](http://search.nix.gsc.io/?q=curl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=curl+in%3Apath&type=Code))  curl: three vulnerabilities
  - [x] [`#688458`](https://lwn.net/Vulnerabilities/688458/) ([search](http://search.nix.gsc.io/?q=curl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=curl+in%3Apath&type=Code))  curl: server spoofing
  - [x] [`#673777`](https://lwn.net/Vulnerabilities/673777/) ([search](http://search.nix.gsc.io/?q=curl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=curl+in%3Apath&type=Code))  curl: authentication bypass
  ### dhcpcd (3 issues)
  - [x] [`#671444`](https://lwn.net/Vulnerabilities/671444/) ([search](http://search.nix.gsc.io/?q=dhcpcd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dhcpcd+in%3Apath&type=Code))  dhcpcd: denial of service
  - [x] [`#688209`](https://lwn.net/Vulnerabilities/688209/) ([search](http://search.nix.gsc.io/?q=dhcpcd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dhcpcd+in%3Apath&type=Code))  dhcpcd: code execution
  - [x] [`#667314`](https://lwn.net/Vulnerabilities/667314/) ([search](http://search.nix.gsc.io/?q=dhcpcd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dhcpcd+in%3Apath&type=Code))  dhcpcd: multiple vulnerabilities
  ### docker (2 issues)
  - [x] [`#687396`](https://lwn.net/Vulnerabilities/687396/) ([search](http://search.nix.gsc.io/?q=docker&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=docker+in%3Apath&type=Code))  docker: privilege escalation
  - [x] [`#672312`](https://lwn.net/Vulnerabilities/672312/) ([search](http://search.nix.gsc.io/?q=docker&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=docker+in%3Apath&type=Code))  docker: information disclosure
  ### dropbear (2 issues)
  - [x] [`#695690`](https://lwn.net/Vulnerabilities/695690/) ([search](http://search.nix.gsc.io/?q=dropbear&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dropbear+in%3Apath&type=Code))  dropbear: multiple vulnerabilities
  - [x] [`#680178`](https://lwn.net/Vulnerabilities/680178/) ([search](http://search.nix.gsc.io/?q=dropbear&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=dropbear+in%3Apath&type=Code))  dropbear: information disclosure
  ### drupal (2 issues)
  - [x] [`#695167`](https://lwn.net/Vulnerabilities/695167/) ([search](http://search.nix.gsc.io/?q=drupal&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal+in%3Apath&type=Code))  drupal: proxy injection
  - [x] [`#662052`](https://lwn.net/Vulnerabilities/662052/) ([search](http://search.nix.gsc.io/?q=drupal&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal+in%3Apath&type=Code))  drupal: open redirect vulnerability
  ### drupal7 (2 issues)
  - [x] [`#691830`](https://lwn.net/Vulnerabilities/691830/) ([search](http://search.nix.gsc.io/?q=drupal7&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal7+in%3Apath&type=Code))  drupal7: privilege escalation
  - [x] [`#677958`](https://lwn.net/Vulnerabilities/677958/) ([search](http://search.nix.gsc.io/?q=drupal7&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=drupal7+in%3Apath&type=Code))  drupal7: multiple vulnerabilities
  ### ecryptfs-utils (2 issues)
  - [x] [`#694959`](https://lwn.net/Vulnerabilities/694959/) ([search](http://search.nix.gsc.io/?q=ecryptfs-utils&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ecryptfs-utils+in%3Apath&type=Code))  ecryptfs-utils: two vulnerabilities
  - [x] [`#672561`](https://lwn.net/Vulnerabilities/672561/) ([search](http://search.nix.gsc.io/?q=ecryptfs-utils&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ecryptfs-utils+in%3Apath&type=Code))  ecryptfs-utils: privilege escalation
  ### eglibc (3 issues)
  - [x] [`#688730`](https://lwn.net/Vulnerabilities/688730/) ([search](http://search.nix.gsc.io/?q=eglibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=eglibc+in%3Apath&type=Code))  glibc: privilege escalation
  - [x] [`#674835`](https://lwn.net/Vulnerabilities/674835/) ([search](http://search.nix.gsc.io/?q=eglibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=eglibc+in%3Apath&type=Code))  eglibc: multiple vulnerabilities
  - [x] [`#675830`](https://lwn.net/Vulnerabilities/675830/) ([search](http://search.nix.gsc.io/?q=eglibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=eglibc+in%3Apath&type=Code))  eglibc: code execution
  ### eog (2 issues)
  - [x] [`#698137`](https://lwn.net/Vulnerabilities/698137/) ([search](http://search.nix.gsc.io/?q=eog&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=eog+in%3Apath&type=Code))  eog: out-of-bounds write
  - [x] [`#675834`](https://lwn.net/Vulnerabilities/675834/) ([search](http://search.nix.gsc.io/?q=eog&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=eog+in%3Apath&type=Code))  eog: code execution
  ### exim (2 issues)
  - [x] [`#607575`](https://lwn.net/Vulnerabilities/607575/) ([search](http://search.nix.gsc.io/?q=exim&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=exim+in%3Apath&type=Code))  exim: code execution
  - [x] [`#679614`](https://lwn.net/Vulnerabilities/679614/) ([search](http://search.nix.gsc.io/?q=exim&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=exim+in%3Apath&type=Code))  exim: privilege escalation
  ### expat (5 issues)
  - [x] [`#692028`](https://lwn.net/Vulnerabilities/692028/) ([search](http://search.nix.gsc.io/?q=expat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=expat+in%3Apath&type=Code))  expat: pointer overflows
  - [x] [`#690403`](https://lwn.net/Vulnerabilities/690403/) ([search](http://search.nix.gsc.io/?q=expat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=expat+in%3Apath&type=Code))  expat: two vulnerabilities
  - [x] [`#687860`](https://lwn.net/Vulnerabilities/687860/) ([search](http://search.nix.gsc.io/?q=expat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=expat+in%3Apath&type=Code))  expat: code execution
  - [x] [`#681391`](https://lwn.net/Vulnerabilities/681391/) ([search](http://search.nix.gsc.io/?q=expat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=expat+in%3Apath&type=Code))  expat: code execution
  - [x] [`#489072`](https://lwn.net/Vulnerabilities/489072/) ([search](http://search.nix.gsc.io/?q=expat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=expat+in%3Apath&type=Code))  expat: denial of service
  ### extplorer (3 issues)
  - [x] [`#697338`](https://lwn.net/Vulnerabilities/697338/) ([search](http://search.nix.gsc.io/?q=extplorer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=extplorer+in%3Apath&type=Code))  extplorer: file overwrite
  - [x] [`#688447`](https://lwn.net/Vulnerabilities/688447/) ([search](http://search.nix.gsc.io/?q=extplorer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=extplorer+in%3Apath&type=Code))  extplorer: cross-site request forgery
  - [x] [`#655402`](https://lwn.net/Vulnerabilities/655402/) ([search](http://search.nix.gsc.io/?q=extplorer&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=extplorer+in%3Apath&type=Code))  extplorer: cross-site scripting
  ### ffmpeg (6 issues)
  - [x] [`#692033`](https://lwn.net/Vulnerabilities/692033/) ([search](http://search.nix.gsc.io/?q=ffmpeg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ffmpeg+in%3Apath&type=Code))  ffmpeg: multiple vulnerabilities
  - [x] [`#680038`](https://lwn.net/Vulnerabilities/680038/) ([search](http://search.nix.gsc.io/?q=ffmpeg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ffmpeg+in%3Apath&type=Code))  ffmpeg: multiple vulnerabilities
  - [x] [`#679124`](https://lwn.net/Vulnerabilities/679124/) ([search](http://search.nix.gsc.io/?q=ffmpeg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ffmpeg+in%3Apath&type=Code))  ffmpeg: denial of service
  - [x] [`#672314`](https://lwn.net/Vulnerabilities/672314/) ([search](http://search.nix.gsc.io/?q=ffmpeg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ffmpeg+in%3Apath&type=Code))  ffmpeg: cross-origin attacks
  - [x] [`#676796`](https://lwn.net/Vulnerabilities/676796/) ([search](http://search.nix.gsc.io/?q=ffmpeg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ffmpeg+in%3Apath&type=Code))  ffmpeg: denial of service
  - [x] [`#675050`](https://lwn.net/Vulnerabilities/675050/) ([search](http://search.nix.gsc.io/?q=ffmpeg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ffmpeg+in%3Apath&type=Code))  ffmpeg: denial of service
  ### firefox (26 issues)
  - [x] [`#696206`](https://lwn.net/Vulnerabilities/696206/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#701625`](https://lwn.net/Vulnerabilities/701625/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  firefox: multiple vulnerabilities
  - [x] [`#701347`](https://lwn.net/Vulnerabilities/701347/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#696550`](https://lwn.net/Vulnerabilities/696550/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  firefox: multiple vulnerabilities
  - [x] [`#696551`](https://lwn.net/Vulnerabilities/696551/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  Firefox: denial of service
  - [x] [`#690400`](https://lwn.net/Vulnerabilities/690400/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#685285`](https://lwn.net/Vulnerabilities/685285/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#689268`](https://lwn.net/Vulnerabilities/689268/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#679618`](https://lwn.net/Vulnerabilities/679618/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  firefox: use-after-free
  - [x] [`#686577`](https://lwn.net/Vulnerabilities/686577/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  firefox: denial of service
  - [x] [`#685294`](https://lwn.net/Vulnerabilities/685294/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#679413`](https://lwn.net/Vulnerabilities/679413/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#668127`](https://lwn.net/Vulnerabilities/668127/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#679400`](https://lwn.net/Vulnerabilities/679400/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#654279`](https://lwn.net/Vulnerabilities/654279/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  firefox: multiple vulnerabilities
  - [x] [`#679615`](https://lwn.net/Vulnerabilities/679615/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  firefox: multiple vulnerabilities
  - [x] [`#680044`](https://lwn.net/Vulnerabilities/680044/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  nss: denial of service
  - [x] [`#514067`](https://lwn.net/Vulnerabilities/514067/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#675698`](https://lwn.net/Vulnerabilities/675698/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: denial of service
  - [x] [`#654275`](https://lwn.net/Vulnerabilities/654275/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  firefox: multiple vulnerabilities
  - [x] [`#675371`](https://lwn.net/Vulnerabilities/675371/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  firefox: same-origin restriction bypass
  - [x] [`#673782`](https://lwn.net/Vulnerabilities/673782/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#673772`](https://lwn.net/Vulnerabilities/673772/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: code execution
  - [x] [`#675823`](https://lwn.net/Vulnerabilities/675823/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: two vulnerabilities
  - [x] [`#675228`](https://lwn.net/Vulnerabilities/675228/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  firefox: denial of service
  - [x] [`#675701`](https://lwn.net/Vulnerabilities/675701/) ([search](http://search.nix.gsc.io/?q=firefox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=firefox+in%3Apath&type=Code))  mozilla: denial of service
  ### gd (2 issues)
  - [x] [`#698984`](https://lwn.net/Vulnerabilities/698984/) ([search](http://search.nix.gsc.io/?q=gd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gd+in%3Apath&type=Code))  gd: out-of-bounds read
  - [x] [`#689578`](https://lwn.net/Vulnerabilities/689578/) ([search](http://search.nix.gsc.io/?q=gd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gd+in%3Apath&type=Code))  gd: information leak
  ### gdk-pixbuf (3 issues)
  - [x] [`#700113`](https://lwn.net/Vulnerabilities/700113/) ([search](http://search.nix.gsc.io/?q=gdk-pixbuf&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gdk-pixbuf+in%3Apath&type=Code))  gdk-pixbuf: denial of service
  - [x] [`#681648`](https://lwn.net/Vulnerabilities/681648/) ([search](http://search.nix.gsc.io/?q=gdk-pixbuf&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gdk-pixbuf+in%3Apath&type=Code))  gdk-pixbuf: buffer overflows
  - [x] [`#659284`](https://lwn.net/Vulnerabilities/659284/) ([search](http://search.nix.gsc.io/?q=gdk-pixbuf&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gdk-pixbuf+in%3Apath&type=Code))  gdk-pixbuf: two vulnerabilities
  ### gimp (3 issues)
  - [x] [`#692855`](https://lwn.net/Vulnerabilities/692855/) ([search](http://search.nix.gsc.io/?q=gimp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gimp+in%3Apath&type=Code))  gimp: use-after-free
  - [x] [`#679128`](https://lwn.net/Vulnerabilities/679128/) ([search](http://search.nix.gsc.io/?q=gimp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gimp+in%3Apath&type=Code))  gimp: command execution
  - [x] [`#575639`](https://lwn.net/Vulnerabilities/575639/) ([search](http://search.nix.gsc.io/?q=gimp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gimp+in%3Apath&type=Code))  gimp: code execution
  ### git (2 issues)
  - [x] [`#660668`](https://lwn.net/Vulnerabilities/660668/) ([search](http://search.nix.gsc.io/?q=git&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=git+in%3Apath&type=Code))  git: multiple vulnerabilities
  - [x] [`#680320`](https://lwn.net/Vulnerabilities/680320/) ([search](http://search.nix.gsc.io/?q=git&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=git+in%3Apath&type=Code))  git: code execution
  ### glibc (9 issues)
  - [x] [`#697948`](https://lwn.net/Vulnerabilities/697948/) ([search](http://search.nix.gsc.io/?q=glibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glibc+in%3Apath&type=Code))  glibc: denial of service
  - [x] [`#696694`](https://lwn.net/Vulnerabilities/696694/) ([search](http://search.nix.gsc.io/?q=glibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glibc+in%3Apath&type=Code))  glibc: denial of service
  - [x] [`#687047`](https://lwn.net/Vulnerabilities/687047/) ([search](http://search.nix.gsc.io/?q=glibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glibc+in%3Apath&type=Code))  glibc: two vulnerabilities
  - [x] [`#690146`](https://lwn.net/Vulnerabilities/690146/) ([search](http://search.nix.gsc.io/?q=glibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glibc+in%3Apath&type=Code))  glibc: denial of service
  - [x] [`#634468`](https://lwn.net/Vulnerabilities/634468/) ([search](http://search.nix.gsc.io/?q=glibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glibc+in%3Apath&type=Code))  glibc: sends DNS queries to random file descriptors
  - [x] [`#688730`](https://lwn.net/Vulnerabilities/688730/) ([search](http://search.nix.gsc.io/?q=glibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glibc+in%3Apath&type=Code))  glibc: privilege escalation
  - [x] [`#687400`](https://lwn.net/Vulnerabilities/687400/) ([search](http://search.nix.gsc.io/?q=glibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glibc+in%3Apath&type=Code))  glibc: denial of service
  - [x] [`#675830`](https://lwn.net/Vulnerabilities/675830/) ([search](http://search.nix.gsc.io/?q=glibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glibc+in%3Apath&type=Code))  eglibc: code execution
  - [x] [`#676082`](https://lwn.net/Vulnerabilities/676082/) ([search](http://search.nix.gsc.io/?q=glibc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=glibc+in%3Apath&type=Code))  glibc: denial of service
  ### gnupg (2 issues)
  - [x] [`#697568`](https://lwn.net/Vulnerabilities/697568/) ([search](http://search.nix.gsc.io/?q=gnupg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gnupg+in%3Apath&type=Code))  gnupg: flawed random number generation
  - [x] [`#635765`](https://lwn.net/Vulnerabilities/635765/) ([search](http://search.nix.gsc.io/?q=gnupg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gnupg+in%3Apath&type=Code))  gnupg: multiple vulnerabilities
  ### gnutls (3 issues)
  - [x] [`#700652`](https://lwn.net/Vulnerabilities/700652/) ([search](http://search.nix.gsc.io/?q=gnutls&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gnutls+in%3Apath&type=Code))  gnutls: certificate verification vulnerability
  - [x] [`#694238`](https://lwn.net/Vulnerabilities/694238/) ([search](http://search.nix.gsc.io/?q=gnutls&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gnutls+in%3Apath&type=Code))  gnutls: certificate verification vulnerability
  - [x] [`#690656`](https://lwn.net/Vulnerabilities/690656/) ([search](http://search.nix.gsc.io/?q=gnutls&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gnutls+in%3Apath&type=Code))  gnutls: arbitrary file overwrite
  ### golang (3 issues)
  - [x] [`#695809`](https://lwn.net/Vulnerabilities/695809/) ([search](http://search.nix.gsc.io/?q=golang&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=golang+in%3Apath&type=Code))  golang: denial of service
  - [x] [`#654887`](https://lwn.net/Vulnerabilities/654887/) ([search](http://search.nix.gsc.io/?q=golang&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=golang+in%3Apath&type=Code))  golang: HTTP request smuggling
  - [x] [`#685138`](https://lwn.net/Vulnerabilities/685138/) ([search](http://search.nix.gsc.io/?q=golang&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=golang+in%3Apath&type=Code))  golang: denial of service
  ### graphicsmagick (3 issues)
  - [x] [`#688448`](https://lwn.net/Vulnerabilities/688448/) ([search](http://search.nix.gsc.io/?q=graphicsmagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=graphicsmagick+in%3Apath&type=Code))  graphicsmagick: denial of service
  - [x] [`#694626`](https://lwn.net/Vulnerabilities/694626/) ([search](http://search.nix.gsc.io/?q=graphicsmagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=graphicsmagick+in%3Apath&type=Code))  graphicsmagick: out-of-bounds read
  - [x] [`#689277`](https://lwn.net/Vulnerabilities/689277/) ([search](http://search.nix.gsc.io/?q=graphicsmagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=graphicsmagick+in%3Apath&type=Code))  imagemagick: command execution
  ### graphite2 (2 issues)
  - [x] [`#678388`](https://lwn.net/Vulnerabilities/678388/) ([search](http://search.nix.gsc.io/?q=graphite2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=graphite2+in%3Apath&type=Code))  graphite2: multiple vulnerabilities
  - [x] [`#676106`](https://lwn.net/Vulnerabilities/676106/) ([search](http://search.nix.gsc.io/?q=graphite2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=graphite2+in%3Apath&type=Code))  graphite2: information disclosure
  ### gsi-openssh (2 issues)
  - [x] [`#694239`](https://lwn.net/Vulnerabilities/694239/) ([search](http://search.nix.gsc.io/?q=gsi-openssh&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gsi-openssh+in%3Apath&type=Code))  gsi-openssh: support GSI authentication
  - [x] [`#675229`](https://lwn.net/Vulnerabilities/675229/) ([search](http://search.nix.gsc.io/?q=gsi-openssh&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=gsi-openssh+in%3Apath&type=Code))  gsi-openssh: privilege escalation
  ### httpd (2 issues)
  - [x] [`#694861`](https://lwn.net/Vulnerabilities/694861/) ([search](http://search.nix.gsc.io/?q=httpd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=httpd+in%3Apath&type=Code))  httpd: HTTP redirect
  - [x] [`#694240`](https://lwn.net/Vulnerabilities/694240/) ([search](http://search.nix.gsc.io/?q=httpd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=httpd+in%3Apath&type=Code))  httpd: authentication bypass
  ### imagemagick (8 issues)
  - [x] [`#695953`](https://lwn.net/Vulnerabilities/695953/) ([search](http://search.nix.gsc.io/?q=imagemagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imagemagick+in%3Apath&type=Code))  imagemagick: information leak
  - [x] [`#692862`](https://lwn.net/Vulnerabilities/692862/) ([search](http://search.nix.gsc.io/?q=imagemagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imagemagick+in%3Apath&type=Code))  imagemagick: multiple vulnerabilities
  - [x] [`#691831`](https://lwn.net/Vulnerabilities/691831/) ([search](http://search.nix.gsc.io/?q=imagemagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imagemagick+in%3Apath&type=Code))  imagemagick: buffer overflow
  - [x] [`#691829`](https://lwn.net/Vulnerabilities/691829/) ([search](http://search.nix.gsc.io/?q=imagemagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imagemagick+in%3Apath&type=Code))  ImageMagick: multiple vulnerabilities
  - [x] [`#689277`](https://lwn.net/Vulnerabilities/689277/) ([search](http://search.nix.gsc.io/?q=imagemagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imagemagick+in%3Apath&type=Code))  imagemagick: command execution
  - [x] [`#686574`](https://lwn.net/Vulnerabilities/686574/) ([search](http://search.nix.gsc.io/?q=imagemagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imagemagick+in%3Apath&type=Code))  imagemagick: code execution
  - [x] [`#686761`](https://lwn.net/Vulnerabilities/686761/) ([search](http://search.nix.gsc.io/?q=imagemagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imagemagick+in%3Apath&type=Code))  imagemagick: multiple vulnerabilities
  - [x] [`#683451`](https://lwn.net/Vulnerabilities/683451/) ([search](http://search.nix.gsc.io/?q=imagemagick&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imagemagick+in%3Apath&type=Code))  ImageMagick: multiple vulnerabilities
  ### imlib2 (5 issues)
  - [x] [`#685003`](https://lwn.net/Vulnerabilities/685003/) ([search](http://search.nix.gsc.io/?q=imlib2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imlib2+in%3Apath&type=Code))  imlib2: denial of service
  - [x] [`#684748`](https://lwn.net/Vulnerabilities/684748/) ([search](http://search.nix.gsc.io/?q=imlib2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imlib2+in%3Apath&type=Code))  imlib2: code execution
  - [x] [`#683843`](https://lwn.net/Vulnerabilities/683843/) ([search](http://search.nix.gsc.io/?q=imlib2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imlib2+in%3Apath&type=Code))  imlib2: denial of service
  - [x] [`#683727`](https://lwn.net/Vulnerabilities/683727/) ([search](http://search.nix.gsc.io/?q=imlib2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imlib2+in%3Apath&type=Code))  imlib2: two vulnerabilities
  - [x] [`#673458`](https://lwn.net/Vulnerabilities/673458/) ([search](http://search.nix.gsc.io/?q=imlib2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=imlib2+in%3Apath&type=Code))  imlib2: denial of service
  ### inspircd (2 issues)
  - [x] [`#700109`](https://lwn.net/Vulnerabilities/700109/) ([search](http://search.nix.gsc.io/?q=inspircd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=inspircd+in%3Apath&type=Code))  inspircd: user impersonation
  - [x] [`#669754`](https://lwn.net/Vulnerabilities/669754/) ([search](http://search.nix.gsc.io/?q=inspircd&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=inspircd+in%3Apath&type=Code))  inspircd: three largely unspecified vulnerabilities
  ### jasper (5 issues)
  - [x] [`#655645`](https://lwn.net/Vulnerabilities/655645/) ([search](http://search.nix.gsc.io/?q=jasper&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jasper+in%3Apath&type=Code))  jasper: denial of service
  - [x] [`#697339`](https://lwn.net/Vulnerabilities/697339/) ([search](http://search.nix.gsc.io/?q=jasper&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jasper+in%3Apath&type=Code))  jasper: use-after-free
  - [x] [`#678818`](https://lwn.net/Vulnerabilities/678818/) ([search](http://search.nix.gsc.io/?q=jasper&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jasper+in%3Apath&type=Code))  jasper: multiple vulnerabilities
  - [x] [`#675051`](https://lwn.net/Vulnerabilities/675051/) ([search](http://search.nix.gsc.io/?q=jasper&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jasper+in%3Apath&type=Code))  jasper: denial of service
  - [x] [`#673469`](https://lwn.net/Vulnerabilities/673469/) ([search](http://search.nix.gsc.io/?q=jasper&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jasper+in%3Apath&type=Code))  jasper: denial of service
  ### java-1.6.0-ibm (2 issues)
  - [x] [`#674380`](https://lwn.net/Vulnerabilities/674380/) ([search](http://search.nix.gsc.io/?q=java-1.6.0-ibm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.6.0-ibm+in%3Apath&type=Code))  java: information leak
  - [x] [`#685870`](https://lwn.net/Vulnerabilities/685870/) ([search](http://search.nix.gsc.io/?q=java-1.6.0-ibm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.6.0-ibm+in%3Apath&type=Code))  java: three vulnerabilities
  ### java-1.6.0-sun (2 issues)
  - [x] [`#695089`](https://lwn.net/Vulnerabilities/695089/) ([search](http://search.nix.gsc.io/?q=java-1.6.0-sun&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.6.0-sun+in%3Apath&type=Code))  java: unspecified vulnerability
  - [x] [`#684745`](https://lwn.net/Vulnerabilities/684745/) ([search](http://search.nix.gsc.io/?q=java-1.6.0-sun&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.6.0-sun+in%3Apath&type=Code))  java-1.6.0-sun: multiple vulnerabilities
  ### java-1.7.0-openjdk (2 issues)
  - [x] [`#661762`](https://lwn.net/Vulnerabilities/661762/) ([search](http://search.nix.gsc.io/?q=java-1.7.0-openjdk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.7.0-openjdk+in%3Apath&type=Code))  java-1.7.0-openjdk: many vulnerabilities
  - [x] [`#681387`](https://lwn.net/Vulnerabilities/681387/) ([search](http://search.nix.gsc.io/?q=java-1.7.0-openjdk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.7.0-openjdk+in%3Apath&type=Code))  java: sandbox bypass
  ### java-1.7.0-oracle (2 issues) See: https://github.com/NixOS/nixpkgs/issues/18856#issuecomment-249179789
  - [x] [`#695091`](https://lwn.net/Vulnerabilities/695091/) ([search](http://search.nix.gsc.io/?q=java-1.7.0-oracle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.7.0-oracle+in%3Apath&type=Code))  java: two unspecified vulnerabilties
  - [x] [`#570812`](https://lwn.net/Vulnerabilities/570812/) ([search](http://search.nix.gsc.io/?q=java-1.7.0-oracle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.7.0-oracle+in%3Apath&type=Code))  java-1.7.0-oracle: multiple vulnerabilities
  ### java-1.8.0-openjdk (3 issues)
  - [x] [`#694957`](https://lwn.net/Vulnerabilities/694957/) ([search](http://search.nix.gsc.io/?q=java-1.8.0-openjdk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.8.0-openjdk+in%3Apath&type=Code))  java-1.8.0-openjdk: multiple vulnerabilities
  - [x] [`#684597`](https://lwn.net/Vulnerabilities/684597/) ([search](http://search.nix.gsc.io/?q=java-1.8.0-openjdk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.8.0-openjdk+in%3Apath&type=Code))  java-1.8.0-openjdk: multiple vulnerabilities
  - [x] [`#681387`](https://lwn.net/Vulnerabilities/681387/) ([search](http://search.nix.gsc.io/?q=java-1.8.0-openjdk&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=java-1.8.0-openjdk+in%3Apath&type=Code))  java: sandbox bypass
  ### jenkins (2 issues)
  - [x] [`#688829`](https://lwn.net/Vulnerabilities/688829/) ([search](http://search.nix.gsc.io/?q=jenkins&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jenkins+in%3Apath&type=Code))  jenkins: multiple vulnerabilities
  - [x] [`#680602`](https://lwn.net/Vulnerabilities/680602/) ([search](http://search.nix.gsc.io/?q=jenkins&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=jenkins+in%3Apath&type=Code))  jenkins: multiple vulnerabilities
  ### kernel (50 issues)
  - [x] [`#701254`](https://lwn.net/Vulnerabilities/701254/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#699683`](https://lwn.net/Vulnerabilities/699683/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: three vulnerabilities
  - [x] [`#694960`](https://lwn.net/Vulnerabilities/694960/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#698136`](https://lwn.net/Vulnerabilities/698136/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#698054`](https://lwn.net/Vulnerabilities/698054/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: use-after-free
  - [x] [`#697341`](https://lwn.net/Vulnerabilities/697341/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#690793`](https://lwn.net/Vulnerabilities/690793/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#696810`](https://lwn.net/Vulnerabilities/696810/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#696549`](https://lwn.net/Vulnerabilities/696549/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#689390`](https://lwn.net/Vulnerabilities/689390/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: information disclosure
  - [x] [`#694514`](https://lwn.net/Vulnerabilities/694514/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: code execution
  - [x] [`#665248`](https://lwn.net/Vulnerabilities/665248/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#693177`](https://lwn.net/Vulnerabilities/693177/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#693473`](https://lwn.net/Vulnerabilities/693473/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#692931`](https://lwn.net/Vulnerabilities/692931/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#692930`](https://lwn.net/Vulnerabilities/692930/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: restriction  bypass
  - [x] [`#692923`](https://lwn.net/Vulnerabilities/692923/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#692183`](https://lwn.net/Vulnerabilities/692183/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#691832`](https://lwn.net/Vulnerabilities/691832/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#691097`](https://lwn.net/Vulnerabilities/691097/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#650896`](https://lwn.net/Vulnerabilities/650896/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two remote denial of service vulnerabilities
  - [x] [`#689580`](https://lwn.net/Vulnerabilities/689580/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#689579`](https://lwn.net/Vulnerabilities/689579/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#688596`](https://lwn.net/Vulnerabilities/688596/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#687597`](https://lwn.net/Vulnerabilities/687597/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#687718`](https://lwn.net/Vulnerabilities/687718/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: privilege escalation
  - [x] [`#687224`](https://lwn.net/Vulnerabilities/687224/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: privilege escalation
  - [x] [`#687231`](https://lwn.net/Vulnerabilities/687231/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: information disclosure
  - [x] [`#686867`](https://lwn.net/Vulnerabilities/686867/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: poison-pointer protection bypass
  - [x] [`#686769`](https://lwn.net/Vulnerabilities/686769/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#685409`](https://lwn.net/Vulnerabilities/685409/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#684455`](https://lwn.net/Vulnerabilities/684455/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: three vulnerabilities
  - [x] [`#683732`](https://lwn.net/Vulnerabilities/683732/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: two vulnerabilities
  - [x] [`#683456`](https://lwn.net/Vulnerabilities/683456/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#683314`](https://lwn.net/Vulnerabilities/683314/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#674491`](https://lwn.net/Vulnerabilities/674491/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: memory leak
  - [x] [`#681754`](https://lwn.net/Vulnerabilities/681754/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: privilege escalation
  - [x] [`#682763`](https://lwn.net/Vulnerabilities/682763/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: timing side channel vulnerability
  - [x] [`#681272`](https://lwn.net/Vulnerabilities/681272/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#680184`](https://lwn.net/Vulnerabilities/680184/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#616163`](https://lwn.net/Vulnerabilities/616163/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: privilege escalation
  - [x] [`#679765`](https://lwn.net/Vulnerabilities/679765/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#677981`](https://lwn.net/Vulnerabilities/677981/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#678626`](https://lwn.net/Vulnerabilities/678626/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#678809`](https://lwn.net/Vulnerabilities/678809/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#676932`](https://lwn.net/Vulnerabilities/676932/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: privilege escalation
  - [x] [`#668949`](https://lwn.net/Vulnerabilities/668949/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  - [x] [`#652174`](https://lwn.net/Vulnerabilities/652174/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: multiple vulnerabilities
  - [x] [`#674836`](https://lwn.net/Vulnerabilities/674836/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: privilege escalation
  - [x] [`#674390`](https://lwn.net/Vulnerabilities/674390/) ([search](http://search.nix.gsc.io/?q=kernel&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=kernel+in%3Apath&type=Code))  kernel: denial of service
  ### krb5 (4 issues)
  - [x] [`#696074`](https://lwn.net/Vulnerabilities/696074/) ([search](http://search.nix.gsc.io/?q=krb5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=krb5+in%3Apath&type=Code))  krb5: denial of service
  - [x] [`#692925`](https://lwn.net/Vulnerabilities/692925/) ([search](http://search.nix.gsc.io/?q=krb5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=krb5+in%3Apath&type=Code))  krb5: buffer overflow
  - [x] [`#681100`](https://lwn.net/Vulnerabilities/681100/) ([search](http://search.nix.gsc.io/?q=krb5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=krb5+in%3Apath&type=Code))  krb5: null pointer dereference
  - [x] [`#674262`](https://lwn.net/Vulnerabilities/674262/) ([search](http://search.nix.gsc.io/?q=krb5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=krb5+in%3Apath&type=Code))  krb5: three vulnerabilities
  ### libarchive (9 issues)
  - [x] [`#700519`](https://lwn.net/Vulnerabilities/700519/) ([search](http://search.nix.gsc.io/?q=libarchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libarchive+in%3Apath&type=Code))  libarchive: file overwrite
  - [x] [`#700387`](https://lwn.net/Vulnerabilities/700387/) ([search](http://search.nix.gsc.io/?q=libarchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libarchive+in%3Apath&type=Code))  libarchive: two vulnerabilities
  - [x] [`#695689`](https://lwn.net/Vulnerabilities/695689/) ([search](http://search.nix.gsc.io/?q=libarchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libarchive+in%3Apath&type=Code))  libarchive: code execution
  - [x] [`#695807`](https://lwn.net/Vulnerabilities/695807/) ([search](http://search.nix.gsc.io/?q=libarchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libarchive+in%3Apath&type=Code))  libarchive: multiple vulnerabilities
  - [x] [`#694629`](https://lwn.net/Vulnerabilities/694629/) ([search](http://search.nix.gsc.io/?q=libarchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libarchive+in%3Apath&type=Code))  libarchive: multiple vulnerabilities
  - [x] [`#693575`](https://lwn.net/Vulnerabilities/693575/) ([search](http://search.nix.gsc.io/?q=libarchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libarchive+in%3Apath&type=Code))  libarchive: multiple vulnerabilities
  - [x] [`#687044`](https://lwn.net/Vulnerabilities/687044/) ([search](http://search.nix.gsc.io/?q=libarchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libarchive+in%3Apath&type=Code))  libarchive: code execution
  - [x] [`#692863`](https://lwn.net/Vulnerabilities/692863/) ([search](http://search.nix.gsc.io/?q=libarchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libarchive+in%3Apath&type=Code))  libarchive: denial of service
  - [x] [`#644037`](https://lwn.net/Vulnerabilities/644037/) ([search](http://search.nix.gsc.io/?q=libarchive&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libarchive+in%3Apath&type=Code))  libarchive: denial of service
  ### libav (4 issues)
  - [x] [`#692864`](https://lwn.net/Vulnerabilities/692864/) ([search](http://search.nix.gsc.io/?q=libav&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libav+in%3Apath&type=Code))  libav: denial of service
  - [x] [`#691269`](https://lwn.net/Vulnerabilities/691269/) ([search](http://search.nix.gsc.io/?q=libav&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libav+in%3Apath&type=Code))  libav: code execution
  - [x] [`#686864`](https://lwn.net/Vulnerabilities/686864/) ([search](http://search.nix.gsc.io/?q=libav&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libav+in%3Apath&type=Code))  libav: code execution
  - [x] [`#679124`](https://lwn.net/Vulnerabilities/679124/) ([search](http://search.nix.gsc.io/?q=libav&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libav+in%3Apath&type=Code))  ffmpeg: denial of service
  ### libebml (2 issues)
  - [x] [`#681990`](https://lwn.net/Vulnerabilities/681990/) ([search](http://search.nix.gsc.io/?q=libebml&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libebml+in%3Apath&type=Code))  libebml: use-after-free vulnerability
  - [x] [`#677964`](https://lwn.net/Vulnerabilities/677964/) ([search](http://search.nix.gsc.io/?q=libebml&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libebml+in%3Apath&type=Code))  libebml: two vulnerabilities
  ### libgd2 (5 issues)
  - [x] [`#694243`](https://lwn.net/Vulnerabilities/694243/) ([search](http://search.nix.gsc.io/?q=libgd2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libgd2+in%3Apath&type=Code))  libgd2: denial of service
  - [x] [`#694782`](https://lwn.net/Vulnerabilities/694782/) ([search](http://search.nix.gsc.io/?q=libgd2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libgd2+in%3Apath&type=Code))  libgd2: two vulnerabilities
  - [x] [`#688208`](https://lwn.net/Vulnerabilities/688208/) ([search](http://search.nix.gsc.io/?q=libgd2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libgd2+in%3Apath&type=Code))  libgd2: denial of service
  - [x] [`#688827`](https://lwn.net/Vulnerabilities/688827/) ([search](http://search.nix.gsc.io/?q=libgd2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libgd2+in%3Apath&type=Code))  libgd2: denial of service
  - [x] [`#685004`](https://lwn.net/Vulnerabilities/685004/) ([search](http://search.nix.gsc.io/?q=libgd2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libgd2+in%3Apath&type=Code))  libgd2: code execution
  ### libidn (2 issues)
  - [x] [`#695325`](https://lwn.net/Vulnerabilities/695325/) ([search](http://search.nix.gsc.io/?q=libidn&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libidn+in%3Apath&type=Code))  libidn: multiple vulnerabilities
  - [x] [`#651768`](https://lwn.net/Vulnerabilities/651768/) ([search](http://search.nix.gsc.io/?q=libidn&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libidn+in%3Apath&type=Code))  libidn: information disclosure
  ### libksba (5 issues)
  - [x] [`#699177`](https://lwn.net/Vulnerabilities/699177/) ([search](http://search.nix.gsc.io/?q=libksba&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libksba+in%3Apath&type=Code))  libksba: denial of service
  - [x] [`#687867`](https://lwn.net/Vulnerabilities/687867/) ([search](http://search.nix.gsc.io/?q=libksba&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libksba+in%3Apath&type=Code))  libksba: multiple vulnerabilities
  - [x] [`#687714`](https://lwn.net/Vulnerabilities/687714/) ([search](http://search.nix.gsc.io/?q=libksba&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libksba+in%3Apath&type=Code))  libksba: denial of service
  - [x] [`#687395`](https://lwn.net/Vulnerabilities/687395/) ([search](http://search.nix.gsc.io/?q=libksba&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libksba+in%3Apath&type=Code))  libksba: denial of service
  - [x] [`#685291`](https://lwn.net/Vulnerabilities/685291/) ([search](http://search.nix.gsc.io/?q=libksba&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libksba+in%3Apath&type=Code))  libksba: three vulnerabilities
  ### libreoffice (4 issues)
  - [x] [`#696552`](https://lwn.net/Vulnerabilities/696552/) ([search](http://search.nix.gsc.io/?q=libreoffice&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libreoffice+in%3Apath&type=Code))  libreoffice: code execution
  - [x] [`#693101`](https://lwn.net/Vulnerabilities/693101/) ([search](http://search.nix.gsc.io/?q=libreoffice&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libreoffice+in%3Apath&type=Code))  libreoffice: code execution
  - [x] [`#676108`](https://lwn.net/Vulnerabilities/676108/) ([search](http://search.nix.gsc.io/?q=libreoffice&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libreoffice+in%3Apath&type=Code))  libreoffice: code execution
  - [x] [`#686578`](https://lwn.net/Vulnerabilities/686578/) ([search](http://search.nix.gsc.io/?q=libreoffice&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libreoffice+in%3Apath&type=Code))  libreoffice: information leak
  ### libreswan (2 issues)
  - [x] [`#696217`](https://lwn.net/Vulnerabilities/696217/) ([search](http://search.nix.gsc.io/?q=libreswan&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libreswan+in%3Apath&type=Code))  libreswan: unspecified
  - [x] [`#683728`](https://lwn.net/Vulnerabilities/683728/) ([search](http://search.nix.gsc.io/?q=libreswan&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libreswan+in%3Apath&type=Code))  libreswan: denial of service
  ### librsvg (2 issues)
  - [x] [`#687861`](https://lwn.net/Vulnerabilities/687861/) ([search](http://search.nix.gsc.io/?q=librsvg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=librsvg+in%3Apath&type=Code))  librsvg: denial of service
  - [x] [`#672076`](https://lwn.net/Vulnerabilities/672076/) ([search](http://search.nix.gsc.io/?q=librsvg&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=librsvg+in%3Apath&type=Code))  librsvg: multiple vulnerabilities
  ### libtorrent-rasterbar (2 issues)
  - [x] [`#700649`](https://lwn.net/Vulnerabilities/700649/) ([search](http://search.nix.gsc.io/?q=libtorrent-rasterbar&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libtorrent-rasterbar+in%3Apath&type=Code))  libtorrent-rasterbar: denial of service
  - [x] [`#691093`](https://lwn.net/Vulnerabilities/691093/) ([search](http://search.nix.gsc.io/?q=libtorrent-rasterbar&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libtorrent-rasterbar+in%3Apath&type=Code))  libtorrent-rasterbar: denial of service
  ### libxml2 (5 issues)
  - [x] [`#689714`](https://lwn.net/Vulnerabilities/689714/) ([search](http://search.nix.gsc.io/?q=libxml2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libxml2+in%3Apath&type=Code))  libxml2: multiple vulnerabilities
  - [x] [`#689279`](https://lwn.net/Vulnerabilities/689279/) ([search](http://search.nix.gsc.io/?q=libxml2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libxml2+in%3Apath&type=Code))  libxml2: three vulnerabilities
  - [x] [`#688826`](https://lwn.net/Vulnerabilities/688826/) ([search](http://search.nix.gsc.io/?q=libxml2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libxml2+in%3Apath&type=Code))  libxml2: multiple vulnerabilities
  - [x] [`#688211`](https://lwn.net/Vulnerabilities/688211/) ([search](http://search.nix.gsc.io/?q=libxml2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libxml2+in%3Apath&type=Code))  libxml2: denial of service
  - [x] [`#687398`](https://lwn.net/Vulnerabilities/687398/) ([search](http://search.nix.gsc.io/?q=libxml2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=libxml2+in%3Apath&type=Code))  libxml2: denial of service
  ### mariadb (6 issues)
  - [x] [`#700833`](https://lwn.net/Vulnerabilities/700833/) ([search](http://search.nix.gsc.io/?q=mariadb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mariadb+in%3Apath&type=Code))  mariadb: access restriction bypass
  - [x] [`#700651`](https://lwn.net/Vulnerabilities/700651/) ([search](http://search.nix.gsc.io/?q=mariadb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mariadb+in%3Apath&type=Code))  mysql: SQL injection/privilege escalation
  - [x] [`#692523`](https://lwn.net/Vulnerabilities/692523/) ([search](http://search.nix.gsc.io/?q=mariadb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mariadb+in%3Apath&type=Code))  mariadb: unspecified vulnerability
  - [x] [`#695319`](https://lwn.net/Vulnerabilities/695319/) ([search](http://search.nix.gsc.io/?q=mariadb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mariadb+in%3Apath&type=Code))  mariadb: three unspecified vulnerabilities
  - [x] [`#676791`](https://lwn.net/Vulnerabilities/676791/) ([search](http://search.nix.gsc.io/?q=mariadb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mariadb+in%3Apath&type=Code))  mariadb: multiple vulnerabilities
  - [x] [`#674841`](https://lwn.net/Vulnerabilities/674841/) ([search](http://search.nix.gsc.io/?q=mariadb&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mariadb+in%3Apath&type=Code))  mariadb: information leak
  ### mbedtls (2 issues)
  - [x] [`#693476`](https://lwn.net/Vulnerabilities/693476/) ([search](http://search.nix.gsc.io/?q=mbedtls&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mbedtls+in%3Apath&type=Code))  mbedtls: three vulnerabilities
  - [x] [`#660894`](https://lwn.net/Vulnerabilities/660894/) ([search](http://search.nix.gsc.io/?q=mbedtls&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mbedtls+in%3Apath&type=Code))  mbedtls: code execution
  ### mediawiki (2 issues)
  - [x] [`#698335`](https://lwn.net/Vulnerabilities/698335/) ([search](http://search.nix.gsc.io/?q=mediawiki&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mediawiki+in%3Apath&type=Code))  mediawiki: multiple vulnerabilities
  - [x] [`#689273`](https://lwn.net/Vulnerabilities/689273/) ([search](http://search.nix.gsc.io/?q=mediawiki&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mediawiki+in%3Apath&type=Code))  mediawiki: multiple vulnerabilities
  ### mercurial (2 issues)
  - [x] [`#686084`](https://lwn.net/Vulnerabilities/686084/) ([search](http://search.nix.gsc.io/?q=mercurial&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mercurial+in%3Apath&type=Code))  mercurial: code execution
  - [x] [`#682389`](https://lwn.net/Vulnerabilities/682389/) ([search](http://search.nix.gsc.io/?q=mercurial&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mercurial+in%3Apath&type=Code))  mercurial: three vulnerabilities
  ### moodle (2 issues)
  - [x] [`#688054`](https://lwn.net/Vulnerabilities/688054/) ([search](http://search.nix.gsc.io/?q=moodle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=moodle+in%3Apath&type=Code))  moodle: multiple vulnerabilities
  - [x] [`#681393`](https://lwn.net/Vulnerabilities/681393/) ([search](http://search.nix.gsc.io/?q=moodle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=moodle+in%3Apath&type=Code))  moodle: multiple vulnerabilities
  ### mozilla (2 issues)
  - [x] [`#576777`](https://lwn.net/Vulnerabilities/576777/) ([search](http://search.nix.gsc.io/?q=mozilla&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mozilla+in%3Apath&type=Code))  mozilla: information leak
  - [x] [`#514067`](https://lwn.net/Vulnerabilities/514067/) ([search](http://search.nix.gsc.io/?q=mozilla&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mozilla+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  ### mozilla-nss (2 issues)
  - [x] [`#694515`](https://lwn.net/Vulnerabilities/694515/) ([search](http://search.nix.gsc.io/?q=mozilla-nss&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mozilla-nss+in%3Apath&type=Code))  firefox: code execution
  - [x] [`#669862`](https://lwn.net/Vulnerabilities/669862/) ([search](http://search.nix.gsc.io/?q=mozilla-nss&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mozilla-nss+in%3Apath&type=Code))  mozilla-nss: signature forgery
  ### mupdf (2 issues)
  - [x] [`#696697`](https://lwn.net/Vulnerabilities/696697/) ([search](http://search.nix.gsc.io/?q=mupdf&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mupdf+in%3Apath&type=Code))  mupdf: denial of service
  - [x] [`#695560`](https://lwn.net/Vulnerabilities/695560/) ([search](http://search.nix.gsc.io/?q=mupdf&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mupdf+in%3Apath&type=Code))  mupdf: denial of service
  ### mysql (5 issues)
  - [x] [`#700651`](https://lwn.net/Vulnerabilities/700651/) ([search](http://search.nix.gsc.io/?q=mysql&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql+in%3Apath&type=Code))  mysql: SQL injection/privilege escalation
  - [x] [`#695319`](https://lwn.net/Vulnerabilities/695319/) ([search](http://search.nix.gsc.io/?q=mysql&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql+in%3Apath&type=Code))  mariadb: three unspecified vulnerabilities
  - [x] [`#685013`](https://lwn.net/Vulnerabilities/685013/) ([search](http://search.nix.gsc.io/?q=mysql&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql+in%3Apath&type=Code))  mysql: multiple vulnerabilities
  - [x] [`#676791`](https://lwn.net/Vulnerabilities/676791/) ([search](http://search.nix.gsc.io/?q=mysql&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql+in%3Apath&type=Code))  mariadb: multiple vulnerabilities
  - [x] [`#674842`](https://lwn.net/Vulnerabilities/674842/) ([search](http://search.nix.gsc.io/?q=mysql&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql+in%3Apath&type=Code))  mysql: multiple vulnerabilities
  ### mysql-5.5 (4 issues)
  - [x] [`#695168`](https://lwn.net/Vulnerabilities/695168/) ([search](http://search.nix.gsc.io/?q=mysql-5.5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-5.5+in%3Apath&type=Code))  mysql: multiple unspecified vulnerabilities
  - [x] [`#695170`](https://lwn.net/Vulnerabilities/695170/) ([search](http://search.nix.gsc.io/?q=mysql-5.5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-5.5+in%3Apath&type=Code))  mysql: multiple unspecified vulnerabilities
  - [x] [`#684754`](https://lwn.net/Vulnerabilities/684754/) ([search](http://search.nix.gsc.io/?q=mysql-5.5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-5.5+in%3Apath&type=Code))  mysql: multiple vulnerabilities
  - [x] [`#662057`](https://lwn.net/Vulnerabilities/662057/) ([search](http://search.nix.gsc.io/?q=mysql-5.5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-5.5+in%3Apath&type=Code))  mysql: multiple vulnerabilities
  ### mysql-5.6 (2 issues)
  - [x] [`#695170`](https://lwn.net/Vulnerabilities/695170/) ([search](http://search.nix.gsc.io/?q=mysql-5.6&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-5.6+in%3Apath&type=Code))  mysql: multiple unspecified vulnerabilities
  - [x] [`#684754`](https://lwn.net/Vulnerabilities/684754/) ([search](http://search.nix.gsc.io/?q=mysql-5.6&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=mysql-5.6+in%3Apath&type=Code))  mysql: multiple vulnerabilities
  ### nettle (2 issues)
  - [x] [`#697140`](https://lwn.net/Vulnerabilities/697140/) ([search](http://search.nix.gsc.io/?q=nettle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nettle+in%3Apath&type=Code))  nettle: information leak
  - [x] [`#674493`](https://lwn.net/Vulnerabilities/674493/) ([search](http://search.nix.gsc.io/?q=nettle&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nettle+in%3Apath&type=Code))  nettle: improper cryptographic calculations
  ### nginx (2 issues)
  - [x] [`#691833`](https://lwn.net/Vulnerabilities/691833/) ([search](http://search.nix.gsc.io/?q=nginx&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nginx+in%3Apath&type=Code))  nginx: BREACH attack against HTTP compression
  - [x] [`#689576`](https://lwn.net/Vulnerabilities/689576/) ([search](http://search.nix.gsc.io/?q=nginx&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nginx+in%3Apath&type=Code))  nginx: denial of service
  ### nodejs (3 issues)
  - [x] [`#687394`](https://lwn.net/Vulnerabilities/687394/) ([search](http://search.nix.gsc.io/?q=nodejs&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nodejs+in%3Apath&type=Code))  chromium: multiple vulnerabilities
  - [x] [`#692926`](https://lwn.net/Vulnerabilities/692926/) ([search](http://search.nix.gsc.io/?q=nodejs&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nodejs+in%3Apath&type=Code))  nodejs: unspecified
  - [x] [`#675702`](https://lwn.net/Vulnerabilities/675702/) ([search](http://search.nix.gsc.io/?q=nodejs&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nodejs+in%3Apath&type=Code))  nodejs: two vulnerabilities
  ### nss (6 issues)
  - [x] [`#696551`](https://lwn.net/Vulnerabilities/696551/) ([search](http://search.nix.gsc.io/?q=nss&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nss+in%3Apath&type=Code))  Firefox: denial of service
  - [x] [`#689268`](https://lwn.net/Vulnerabilities/689268/) ([search](http://search.nix.gsc.io/?q=nss&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nss+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#646994`](https://lwn.net/Vulnerabilities/646994/) ([search](http://search.nix.gsc.io/?q=nss&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nss+in%3Apath&type=Code))  nss: cipher-downgrade attacks
  - [x] [`#692857`](https://lwn.net/Vulnerabilities/692857/) ([search](http://search.nix.gsc.io/?q=nss&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nss+in%3Apath&type=Code))  nss: denial of service
  - [x] [`#679401`](https://lwn.net/Vulnerabilities/679401/) ([search](http://search.nix.gsc.io/?q=nss&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nss+in%3Apath&type=Code))  nss: code execution
  - [x] [`#680044`](https://lwn.net/Vulnerabilities/680044/) ([search](http://search.nix.gsc.io/?q=nss&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=nss+in%3Apath&type=Code))  nss: denial of service
  ### ntp (5 issues)
  - [x] [`#580994`](https://lwn.net/Vulnerabilities/580994/) ([search](http://search.nix.gsc.io/?q=ntp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ntp+in%3Apath&type=Code))  ntp: denial of service
  - [x] [`#690012`](https://lwn.net/Vulnerabilities/690012/) ([search](http://search.nix.gsc.io/?q=ntp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ntp+in%3Apath&type=Code))  ntp: multiple vulnerabilities
  - [x] [`#685887`](https://lwn.net/Vulnerabilities/685887/) ([search](http://search.nix.gsc.io/?q=ntp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ntp+in%3Apath&type=Code))  ntp: multiple vulnerabilities
  - [x] [`#685493`](https://lwn.net/Vulnerabilities/685493/) ([search](http://search.nix.gsc.io/?q=ntp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ntp+in%3Apath&type=Code))  ntp: multiple vulnerabilities
  - [x] [`#677115`](https://lwn.net/Vulnerabilities/677115/) ([search](http://search.nix.gsc.io/?q=ntp&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=ntp+in%3Apath&type=Code))  ntp: three vulnerabilities
  ### openjpeg2 (3 issues)
  - [x] [`#700384`](https://lwn.net/Vulnerabilities/700384/) ([search](http://search.nix.gsc.io/?q=openjpeg2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openjpeg2+in%3Apath&type=Code))  openjpeg2: two vulnerabilities
  - [x] [`#694625`](https://lwn.net/Vulnerabilities/694625/) ([search](http://search.nix.gsc.io/?q=openjpeg2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openjpeg2+in%3Apath&type=Code))  openjpeg2: multiple vulnerabilities
  - [x] [`#659043`](https://lwn.net/Vulnerabilities/659043/) ([search](http://search.nix.gsc.io/?q=openjpeg2&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openjpeg2+in%3Apath&type=Code))  openjpeg2: use-after-free vulnerability
  ### openshift (2 issues)
  - [x] [`#687397`](https://lwn.net/Vulnerabilities/687397/) ([search](http://search.nix.gsc.io/?q=openshift&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openshift+in%3Apath&type=Code))  openshift: multiple vulnerabilities
  - [x] [`#687039`](https://lwn.net/Vulnerabilities/687039/) ([search](http://search.nix.gsc.io/?q=openshift&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openshift+in%3Apath&type=Code))  openshift: information disclosure
  ### openssh (5 issues)
  - [x] [`#696931`](https://lwn.net/Vulnerabilities/696931/) ([search](http://search.nix.gsc.io/?q=openssh&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssh+in%3Apath&type=Code))  openssh: denial of service
  - [x] [`#695098`](https://lwn.net/Vulnerabilities/695098/) ([search](http://search.nix.gsc.io/?q=openssh&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssh+in%3Apath&type=Code))  openssh: user enumeration via timing side-channel
  - [x] [`#684235`](https://lwn.net/Vulnerabilities/684235/) ([search](http://search.nix.gsc.io/?q=openssh&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssh+in%3Apath&type=Code))  openssh: privilege escalation
  - [x] [`#679761`](https://lwn.net/Vulnerabilities/679761/) ([search](http://search.nix.gsc.io/?q=openssh&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssh+in%3Apath&type=Code))  openssh: command injection
  - [x] [`#537753`](https://lwn.net/Vulnerabilities/537753/) ([search](http://search.nix.gsc.io/?q=openssh&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssh+in%3Apath&type=Code))  openssh: denial of service
  ### openssl (9 issues)
  - [x] [`#701627`](https://lwn.net/Vulnerabilities/701627/) ([search](http://search.nix.gsc.io/?q=openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssl+in%3Apath&type=Code))  openssl: multiple vulnerabilities
  - [x] [`#686085`](https://lwn.net/Vulnerabilities/686085/) ([search](http://search.nix.gsc.io/?q=openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssl+in%3Apath&type=Code))  openssl: multiple vulnerabilities
  - [x] [`#686288`](https://lwn.net/Vulnerabilities/686288/) ([search](http://search.nix.gsc.io/?q=openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssl+in%3Apath&type=Code))  openssl: information leak
  - [x] [`#686747`](https://lwn.net/Vulnerabilities/686747/) ([search](http://search.nix.gsc.io/?q=openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssl+in%3Apath&type=Code))  openssl: denial of service
  - [x] [`#678143`](https://lwn.net/Vulnerabilities/678143/) ([search](http://search.nix.gsc.io/?q=openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssl+in%3Apath&type=Code))  openssl: multiple vulnerabilities
  - [x] [`#678387`](https://lwn.net/Vulnerabilities/678387/) ([search](http://search.nix.gsc.io/?q=openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssl+in%3Apath&type=Code))  openssl: two vulnerabilities
  - [x] [`#678156`](https://lwn.net/Vulnerabilities/678156/) ([search](http://search.nix.gsc.io/?q=openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssl+in%3Apath&type=Code))  openssl: cross-protocol attack
  - [x] [`#674068`](https://lwn.net/Vulnerabilities/674068/) ([search](http://search.nix.gsc.io/?q=openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssl+in%3Apath&type=Code))  openssl: multiple vulnerabilities
  - [x] [`#616446`](https://lwn.net/Vulnerabilities/616446/) ([search](http://search.nix.gsc.io/?q=openssl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openssl+in%3Apath&type=Code))  openssl: multiple vulnerabilities
  ### openstack-swift (2 issues)
  - [x] [`#674833`](https://lwn.net/Vulnerabilities/674833/) ([search](http://search.nix.gsc.io/?q=openstack-swift&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openstack-swift+in%3Apath&type=Code))  openstack-swift: denial of service
  - [x] [`#674495`](https://lwn.net/Vulnerabilities/674495/) ([search](http://search.nix.gsc.io/?q=openstack-swift&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openstack-swift+in%3Apath&type=Code))  openstack-swift: denial of service
  ### openvpn (3 issues)
  - [x] [`#698339`](https://lwn.net/Vulnerabilities/698339/) ([search](http://search.nix.gsc.io/?q=openvpn&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openvpn+in%3Apath&type=Code))  openvpn: information disclosure
  - [x] [`#687599`](https://lwn.net/Vulnerabilities/687599/) ([search](http://search.nix.gsc.io/?q=openvpn&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openvpn+in%3Apath&type=Code))  openvpn: multiple vulnerabilities
  - [x] [`#669524`](https://lwn.net/Vulnerabilities/669524/) ([search](http://search.nix.gsc.io/?q=openvpn&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=openvpn+in%3Apath&type=Code))  openvpn: information disclosure
  ### optipng (3 issues)
  - [x] [`#682567`](https://lwn.net/Vulnerabilities/682567/) ([search](http://search.nix.gsc.io/?q=optipng&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=optipng+in%3Apath&type=Code))  optipng: code execution
  - [x] [`#684236`](https://lwn.net/Vulnerabilities/684236/) ([search](http://search.nix.gsc.io/?q=optipng&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=optipng+in%3Apath&type=Code))  optipng: code execution
  - [x] [`#683844`](https://lwn.net/Vulnerabilities/683844/) ([search](http://search.nix.gsc.io/?q=optipng&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=optipng+in%3Apath&type=Code))  optipng: denial of service
  ### pagure (2 issues)
  - [x] [`#698055`](https://lwn.net/Vulnerabilities/698055/) ([search](http://search.nix.gsc.io/?q=pagure&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pagure+in%3Apath&type=Code))  pagure: cross-site scripting
  - [x] [`#694871`](https://lwn.net/Vulnerabilities/694871/) ([search](http://search.nix.gsc.io/?q=pagure&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pagure+in%3Apath&type=Code))  pagure: unspecified
  ### pcre (3 issues)
  - [x] [`#678389`](https://lwn.net/Vulnerabilities/678389/) ([search](http://search.nix.gsc.io/?q=pcre&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pcre+in%3Apath&type=Code))  pcre: denial of service
  - [x] [`#687040`](https://lwn.net/Vulnerabilities/687040/) ([search](http://search.nix.gsc.io/?q=pcre&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pcre+in%3Apath&type=Code))  pcre: stack overflow
  - [x] [`#676094`](https://lwn.net/Vulnerabilities/676094/) ([search](http://search.nix.gsc.io/?q=pcre&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pcre+in%3Apath&type=Code))  pcre: multiple vulnerabilities
  ### pcre3 (2 issues)
  - [x] [`#681755`](https://lwn.net/Vulnerabilities/681755/) ([search](http://search.nix.gsc.io/?q=pcre3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pcre3+in%3Apath&type=Code))  pcre: multiple vulnerabilities
  - [x] [`#677970`](https://lwn.net/Vulnerabilities/677970/) ([search](http://search.nix.gsc.io/?q=pcre3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pcre3+in%3Apath&type=Code))  pcre3: code execution
  ### pdns (3 issues)
  - [x] [`#700386`](https://lwn.net/Vulnerabilities/700386/) ([search](http://search.nix.gsc.io/?q=pdns&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pdns+in%3Apath&type=Code))  pdns: denial of service
  - [x] [`#696813`](https://lwn.net/Vulnerabilities/696813/) ([search](http://search.nix.gsc.io/?q=pdns&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pdns+in%3Apath&type=Code))  pdns: denial of service
  - [x] [`#689251`](https://lwn.net/Vulnerabilities/689251/) ([search](http://search.nix.gsc.io/?q=pdns&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pdns+in%3Apath&type=Code))  pdns: insecure database permissions
  ### perl (4 issues)
  - [x] [`#694785`](https://lwn.net/Vulnerabilities/694785/) ([search](http://search.nix.gsc.io/?q=perl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=perl+in%3Apath&type=Code))  perl: code execution
  - [x] [`#695321`](https://lwn.net/Vulnerabilities/695321/) ([search](http://search.nix.gsc.io/?q=perl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=perl+in%3Apath&type=Code))  perl: privilege escalation
  - [x] [`#686754`](https://lwn.net/Vulnerabilities/686754/) ([search](http://search.nix.gsc.io/?q=perl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=perl+in%3Apath&type=Code))  perl: denial of service
  - [x] [`#678148`](https://lwn.net/Vulnerabilities/678148/) ([search](http://search.nix.gsc.io/?q=perl&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=perl+in%3Apath&type=Code))  perl: ambiguous environment
  ### pgpdump (2 issues)
  - [x] [`#689717`](https://lwn.net/Vulnerabilities/689717/) ([search](http://search.nix.gsc.io/?q=pgpdump&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pgpdump+in%3Apath&type=Code))  pgpdump: buffer overrun
  - [x] [`#685000`](https://lwn.net/Vulnerabilities/685000/) ([search](http://search.nix.gsc.io/?q=pgpdump&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=pgpdump+in%3Apath&type=Code))  pgpdump: denial of service
  ### php (13 issues)
  - [x] [`#701138`](https://lwn.net/Vulnerabilities/701138/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: multiple vulnerabilities
  - [x] [`#700115`](https://lwn.net/Vulnerabilities/700115/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: multiple vulnerabilities
  - [x] [`#698797`](https://lwn.net/Vulnerabilities/698797/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: multiple vulnerabilities
  - [x] [`#695167`](https://lwn.net/Vulnerabilities/695167/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  drupal: proxy injection
  - [x] [`#695169`](https://lwn.net/Vulnerabilities/695169/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: denial of service
  - [x] [`#692867`](https://lwn.net/Vulnerabilities/692867/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: multiple vulnerabilities
  - [x] [`#690015`](https://lwn.net/Vulnerabilities/690015/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: integer overflow
  - [x] [`#689260`](https://lwn.net/Vulnerabilities/689260/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: two vulnerabilities
  - [x] [`#689280`](https://lwn.net/Vulnerabilities/689280/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: integer overflow
  - [x] [`#685885`](https://lwn.net/Vulnerabilities/685885/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: multiple vulnerabilities
  - [x] [`#682390`](https://lwn.net/Vulnerabilities/682390/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: multiple vulnerabilities
  - [x] [`#679764`](https://lwn.net/Vulnerabilities/679764/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: multiple vulnerabilities
  - [x] [`#674929`](https://lwn.net/Vulnerabilities/674929/) ([search](http://search.nix.gsc.io/?q=php&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php+in%3Apath&type=Code))  php: multiple vulnerabilities
  ### php-ZendFramework (2 issues)
  - [x] [`#696219`](https://lwn.net/Vulnerabilities/696219/) ([search](http://search.nix.gsc.io/?q=php-ZendFramework&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-ZendFramework+in%3Apath&type=Code))  php-ZendFramework: SQL injection
  - [x] [`#685886`](https://lwn.net/Vulnerabilities/685886/) ([search](http://search.nix.gsc.io/?q=php-ZendFramework&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php-ZendFramework+in%3Apath&type=Code))  php-ZendFramework: multiple vulnerabilities
  ### php5 (12 issues)
  - [x] [`#701140`](https://lwn.net/Vulnerabilities/701140/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php5: invalid free
  - [x] [`#697264`](https://lwn.net/Vulnerabilities/697264/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php: denial of service
  - [x] [`#695556`](https://lwn.net/Vulnerabilities/695556/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php: multiple vulnerabilities
  - [x] [`#693866`](https://lwn.net/Vulnerabilities/693866/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php5: cross-site scripting
  - [x] [`#691103`](https://lwn.net/Vulnerabilities/691103/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php5: three vulnerabilities
  - [x] [`#690420`](https://lwn.net/Vulnerabilities/690420/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php: two vulnerabilities
  - [x] [`#689381`](https://lwn.net/Vulnerabilities/689381/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php: two vulnerabilities
  - [x] [`#688597`](https://lwn.net/Vulnerabilities/688597/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php: two vulnerabilities
  - [x] [`#688055`](https://lwn.net/Vulnerabilities/688055/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php5: three vulnerabilities
  - [x] [`#687049`](https://lwn.net/Vulnerabilities/687049/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php: two vulnerabilities
  - [x] [`#684755`](https://lwn.net/Vulnerabilities/684755/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php5: multiple vulnerabilities
  - [x] [`#679620`](https://lwn.net/Vulnerabilities/679620/) ([search](http://search.nix.gsc.io/?q=php5&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=php5+in%3Apath&type=Code))  php5: stack overflow
  ### phpMyAdmin (3 issues)
  - [x] [`#698492`](https://lwn.net/Vulnerabilities/698492/) ([search](http://search.nix.gsc.io/?q=phpMyAdmin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=phpMyAdmin+in%3Apath&type=Code))  phpMyAdmin: multiple vulnerabilities
  - [x] [`#693478`](https://lwn.net/Vulnerabilities/693478/) ([search](http://search.nix.gsc.io/?q=phpMyAdmin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=phpMyAdmin+in%3Apath&type=Code))  phpMyAdmin: code execution
  - [x] [`#689583`](https://lwn.net/Vulnerabilities/689583/) ([search](http://search.nix.gsc.io/?q=phpMyAdmin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=phpMyAdmin+in%3Apath&type=Code))  phpmyadmin: two vulnerabilities
  ### phpmyadmin (3 issues)
  - [x] [`#692853`](https://lwn.net/Vulnerabilities/692853/) ([search](http://search.nix.gsc.io/?q=phpmyadmin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=phpmyadmin+in%3Apath&type=Code))  phpmyadmin: multiple vulnerabilities
  - [x] [`#689274`](https://lwn.net/Vulnerabilities/689274/) ([search](http://search.nix.gsc.io/?q=phpmyadmin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=phpmyadmin+in%3Apath&type=Code))  phpmyadmin: cross-site scripting
  - [x] [`#678631`](https://lwn.net/Vulnerabilities/678631/) ([search](http://search.nix.gsc.io/?q=phpmyadmin&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=phpmyadmin+in%3Apath&type=Code))  phpmyadmin: cross-site scripting
  ### postgresql-9.1 (3 issues)
  - [x] [`#697020`](https://lwn.net/Vulnerabilities/697020/) ([search](http://search.nix.gsc.io/?q=postgresql-9.1&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=postgresql-9.1+in%3Apath&type=Code))  postgresql: two vulnerabilities
  - [x] [`#689252`](https://lwn.net/Vulnerabilities/689252/) ([search](http://search.nix.gsc.io/?q=postgresql-9.1&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=postgresql-9.1+in%3Apath&type=Code))  postgresql: multiple vulnerabilities
  - [x] [`#675372`](https://lwn.net/Vulnerabilities/675372/) ([search](http://search.nix.gsc.io/?q=postgresql-9.1&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=postgresql-9.1+in%3Apath&type=Code))  postgresql: two vulnerabilities
  ### python-django (3 issues)
  - [x] [`#694868`](https://lwn.net/Vulnerabilities/694868/) ([search](http://search.nix.gsc.io/?q=python-django&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-django+in%3Apath&type=Code))  python-django: cross-site scripting
  - [x] [`#678395`](https://lwn.net/Vulnerabilities/678395/) ([search](http://search.nix.gsc.io/?q=python-django&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-django+in%3Apath&type=Code))  python-django: two vulnerabilities
  - [x] [`#665808`](https://lwn.net/Vulnerabilities/665808/) ([search](http://search.nix.gsc.io/?q=python-django&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-django+in%3Apath&type=Code))  python-django: information disclosure
  ### python-pillow (2 issues)
  - [x] [`#683316`](https://lwn.net/Vulnerabilities/683316/) ([search](http://search.nix.gsc.io/?q=python-pillow&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-pillow+in%3Apath&type=Code))  python-pillow: buffer overflow
  - [x] [`#675049`](https://lwn.net/Vulnerabilities/675049/) ([search](http://search.nix.gsc.io/?q=python-pillow&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=python-pillow+in%3Apath&type=Code))  python-pillow: denial of service
  ### qemu (12 issues)
  - [x] [`#700388`](https://lwn.net/Vulnerabilities/700388/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: directory/path traversal
  - [x] [`#692861`](https://lwn.net/Vulnerabilities/692861/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: multiple vulnerabilities
  - [x] [`#695959`](https://lwn.net/Vulnerabilities/695959/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: two vulnerabilities
  - [x] [`#691104`](https://lwn.net/Vulnerabilities/691104/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: denial of service
  - [x] [`#690402`](https://lwn.net/Vulnerabilities/690402/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: denial of service
  - [x] [`#689261`](https://lwn.net/Vulnerabilities/689261/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: two vulnerabilities
  - [x] [`#687235`](https://lwn.net/Vulnerabilities/687235/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: information leak
  - [x] [`#686861`](https://lwn.net/Vulnerabilities/686861/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: denial of service
  - [x] [`#680800`](https://lwn.net/Vulnerabilities/680800/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  xen: multiple denial of service vulnerabilities
  - [x] [`#666755`](https://lwn.net/Vulnerabilities/666755/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: three vulnerabilities
  - [x] [`#674609`](https://lwn.net/Vulnerabilities/674609/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: privilege escalation
  - [x] [`#674496`](https://lwn.net/Vulnerabilities/674496/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: multiple vulnerabilities
  ### qemu-kvm (4 issues)
  - [x] [`#686857`](https://lwn.net/Vulnerabilities/686857/) ([search](http://search.nix.gsc.io/?q=qemu-kvm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu-kvm+in%3Apath&type=Code))  qemu-kvm: code execution
  - [x] [`#687235`](https://lwn.net/Vulnerabilities/687235/) ([search](http://search.nix.gsc.io/?q=qemu-kvm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu-kvm+in%3Apath&type=Code))  qemu: information leak
  - [x] [`#666755`](https://lwn.net/Vulnerabilities/666755/) ([search](http://search.nix.gsc.io/?q=qemu-kvm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu-kvm+in%3Apath&type=Code))  qemu: three vulnerabilities
  - [x] [`#674496`](https://lwn.net/Vulnerabilities/674496/) ([search](http://search.nix.gsc.io/?q=qemu-kvm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu-kvm+in%3Apath&type=Code))  qemu: multiple vulnerabilities
  ### quagga (4 issues)
  - [x] [`#698337`](https://lwn.net/Vulnerabilities/698337/) ([search](http://search.nix.gsc.io/?q=quagga&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=quagga+in%3Apath&type=Code))  quagga: information disclosure
  - [x] [`#686580`](https://lwn.net/Vulnerabilities/686580/) ([search](http://search.nix.gsc.io/?q=quagga&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=quagga+in%3Apath&type=Code))  quagga: denial of service
  - [x] [`#683859`](https://lwn.net/Vulnerabilities/683859/) ([search](http://search.nix.gsc.io/?q=quagga&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=quagga+in%3Apath&type=Code))  quagga: password disclosure
  - [x] [`#681279`](https://lwn.net/Vulnerabilities/681279/) ([search](http://search.nix.gsc.io/?q=quagga&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=quagga+in%3Apath&type=Code))  quagga: code execution
  ### rails (3 issues)
  - [x] [`#698338`](https://lwn.net/Vulnerabilities/698338/) ([search](http://search.nix.gsc.io/?q=rails&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=rails+in%3Apath&type=Code))  rails: cross-site scripting
  - [x] [`#674257`](https://lwn.net/Vulnerabilities/674257/) ([search](http://search.nix.gsc.io/?q=rails&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=rails+in%3Apath&type=Code))  rails: multiple vulnerabilities
  - [x] [`#679617`](https://lwn.net/Vulnerabilities/679617/) ([search](http://search.nix.gsc.io/?q=rails&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=rails+in%3Apath&type=Code))  rails: multiple vulnerabilities
  ### redis (2 issues)
  - [x] [`#695958`](https://lwn.net/Vulnerabilities/695958/) ([search](http://search.nix.gsc.io/?q=redis&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=redis+in%3Apath&type=Code))  redis: information leak
  - [x] [`#666890`](https://lwn.net/Vulnerabilities/666890/) ([search](http://search.nix.gsc.io/?q=redis&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=redis+in%3Apath&type=Code))  redis: denial of service
  ### roundcubemail (5 issues)
  - [x] [`#690017`](https://lwn.net/Vulnerabilities/690017/) ([search](http://search.nix.gsc.io/?q=roundcubemail&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=roundcubemail+in%3Apath&type=Code))  roundcubemail: cross-site scripting
  - [x] [`#685881`](https://lwn.net/Vulnerabilities/685881/) ([search](http://search.nix.gsc.io/?q=roundcubemail&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=roundcubemail+in%3Apath&type=Code))  roundcubemail: three vulnerabilities
  - [x] [`#649716`](https://lwn.net/Vulnerabilities/649716/) ([search](http://search.nix.gsc.io/?q=roundcubemail&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=roundcubemail+in%3Apath&type=Code))  roundcubemail: two vulnerabilities
  - [x] [`#672317`](https://lwn.net/Vulnerabilities/672317/) ([search](http://search.nix.gsc.io/?q=roundcubemail&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=roundcubemail+in%3Apath&type=Code))  roundcubemail: code execution
  - [x] [`#663069`](https://lwn.net/Vulnerabilities/663069/) ([search](http://search.nix.gsc.io/?q=roundcubemail&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=roundcubemail+in%3Apath&type=Code))  roundcubemail: two vulnerabilities
  ### samba (4 issues)
  - [x] [`#693867`](https://lwn.net/Vulnerabilities/693867/) ([search](http://search.nix.gsc.io/?q=samba&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=samba+in%3Apath&type=Code))  samba: crypto downgrade
  - [x] [`#683716`](https://lwn.net/Vulnerabilities/683716/) ([search](http://search.nix.gsc.io/?q=samba&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=samba+in%3Apath&type=Code))  samba: multiple vulnerabilities
  - [x] [`#679264`](https://lwn.net/Vulnerabilities/679264/) ([search](http://search.nix.gsc.io/?q=samba&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=samba+in%3Apath&type=Code))  samba: two vulnerabilities
  - [x] [`#536068`](https://lwn.net/Vulnerabilities/536068/) ([search](http://search.nix.gsc.io/?q=samba&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=samba+in%3Apath&type=Code))  samba: multiple vulnerabilities in SWAT
  ### seamonkey (9 issues)
  - [x] [`#696206`](https://lwn.net/Vulnerabilities/696206/) ([search](http://search.nix.gsc.io/?q=seamonkey&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=seamonkey+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#690400`](https://lwn.net/Vulnerabilities/690400/) ([search](http://search.nix.gsc.io/?q=seamonkey&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=seamonkey+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#685285`](https://lwn.net/Vulnerabilities/685285/) ([search](http://search.nix.gsc.io/?q=seamonkey&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=seamonkey+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#685294`](https://lwn.net/Vulnerabilities/685294/) ([search](http://search.nix.gsc.io/?q=seamonkey&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=seamonkey+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#668127`](https://lwn.net/Vulnerabilities/668127/) ([search](http://search.nix.gsc.io/?q=seamonkey&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=seamonkey+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#679400`](https://lwn.net/Vulnerabilities/679400/) ([search](http://search.nix.gsc.io/?q=seamonkey&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=seamonkey+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#514067`](https://lwn.net/Vulnerabilities/514067/) ([search](http://search.nix.gsc.io/?q=seamonkey&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=seamonkey+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#673782`](https://lwn.net/Vulnerabilities/673782/) ([search](http://search.nix.gsc.io/?q=seamonkey&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=seamonkey+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#673772`](https://lwn.net/Vulnerabilities/673772/) ([search](http://search.nix.gsc.io/?q=seamonkey&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=seamonkey+in%3Apath&type=Code))  mozilla: code execution
  ### squid (8 issues)
  - [x] [`#696413`](https://lwn.net/Vulnerabilities/696413/) ([search](http://search.nix.gsc.io/?q=squid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid+in%3Apath&type=Code))  squid: code execution
  - [x] [`#685002`](https://lwn.net/Vulnerabilities/685002/) ([search](http://search.nix.gsc.io/?q=squid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid+in%3Apath&type=Code))  squid: multiple vulnerabilities
  - [x] [`#687043`](https://lwn.net/Vulnerabilities/687043/) ([search](http://search.nix.gsc.io/?q=squid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid+in%3Apath&type=Code))  squid: multiple vulnerabilities
  - [x] [`#687234`](https://lwn.net/Vulnerabilities/687234/) ([search](http://search.nix.gsc.io/?q=squid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid+in%3Apath&type=Code))  squid: cache poisoning
  - [x] [`#686751`](https://lwn.net/Vulnerabilities/686751/) ([search](http://search.nix.gsc.io/?q=squid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid+in%3Apath&type=Code))  libecap: denial  of service
  - [x] [`#682760`](https://lwn.net/Vulnerabilities/682760/) ([search](http://search.nix.gsc.io/?q=squid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid+in%3Apath&type=Code))  squid: denial of service
  - [x] [`#682384`](https://lwn.net/Vulnerabilities/682384/) ([search](http://search.nix.gsc.io/?q=squid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid+in%3Apath&type=Code))  squid: denial of service
  - [x] [`#679130`](https://lwn.net/Vulnerabilities/679130/) ([search](http://search.nix.gsc.io/?q=squid&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid+in%3Apath&type=Code))  squid: denial of service
  ### squid3 (2 issues)
  - [x] [`#697441`](https://lwn.net/Vulnerabilities/697441/) ([search](http://search.nix.gsc.io/?q=squid3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid3+in%3Apath&type=Code))  squid: denial of service
  - [x] [`#678151`](https://lwn.net/Vulnerabilities/678151/) ([search](http://search.nix.gsc.io/?q=squid3&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=squid3+in%3Apath&type=Code))  squid: denial of service
  ### struts (2 issues)
  - [x] [`#597671`](https://lwn.net/Vulnerabilities/597671/) ([search](http://search.nix.gsc.io/?q=struts&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=struts+in%3Apath&type=Code))  struts: code execution
  - [x] [`#693179`](https://lwn.net/Vulnerabilities/693179/) ([search](http://search.nix.gsc.io/?q=struts&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=struts+in%3Apath&type=Code))  struts: multiple vulnerabilities
  ### subversion (2 issues)
  - [x] [`#685491`](https://lwn.net/Vulnerabilities/685491/) ([search](http://search.nix.gsc.io/?q=subversion&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=subversion+in%3Apath&type=Code))  subversion: multiple vulnerabilities
  - [x] [`#668331`](https://lwn.net/Vulnerabilities/668331/) ([search](http://search.nix.gsc.io/?q=subversion&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=subversion+in%3Apath&type=Code))  subversion: code execution
  ### sudo (3 issues)
  - [x] [`#694789`](https://lwn.net/Vulnerabilities/694789/) ([search](http://search.nix.gsc.io/?q=sudo&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=sudo+in%3Apath&type=Code))  sudo: race condition
  - [x] [`#663793`](https://lwn.net/Vulnerabilities/663793/) ([search](http://search.nix.gsc.io/?q=sudo&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=sudo+in%3Apath&type=Code))  sudo: privilege escalation
  - [x] [`#690019`](https://lwn.net/Vulnerabilities/690019/) ([search](http://search.nix.gsc.io/?q=sudo&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=sudo+in%3Apath&type=Code))  sudo: information leak
  ### thunderbird (10 issues)
  - [x] [`#696206`](https://lwn.net/Vulnerabilities/696206/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#696551`](https://lwn.net/Vulnerabilities/696551/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  Firefox: denial of service
  - [x] [`#690400`](https://lwn.net/Vulnerabilities/690400/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#685285`](https://lwn.net/Vulnerabilities/685285/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#685008`](https://lwn.net/Vulnerabilities/685008/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#668127`](https://lwn.net/Vulnerabilities/668127/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#514067`](https://lwn.net/Vulnerabilities/514067/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#675698`](https://lwn.net/Vulnerabilities/675698/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  mozilla: denial of service
  - [x] [`#673782`](https://lwn.net/Vulnerabilities/673782/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  mozilla: multiple vulnerabilities
  - [x] [`#673772`](https://lwn.net/Vulnerabilities/673772/) ([search](http://search.nix.gsc.io/?q=thunderbird&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=thunderbird+in%3Apath&type=Code))  mozilla: code execution
  ### tiff (4 issues)
  - [x] [`#698795`](https://lwn.net/Vulnerabilities/698795/) ([search](http://search.nix.gsc.io/?q=tiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tiff+in%3Apath&type=Code))  tiff: multiple vulnerabilities
  - [x] [`#695692`](https://lwn.net/Vulnerabilities/695692/) ([search](http://search.nix.gsc.io/?q=tiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tiff+in%3Apath&type=Code))  tiff: multiple vulnerabilities
  - [x] [`#684237`](https://lwn.net/Vulnerabilities/684237/) ([search](http://search.nix.gsc.io/?q=tiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tiff+in%3Apath&type=Code))  tiff: denial of service
  - [x] [`#674260`](https://lwn.net/Vulnerabilities/674260/) ([search](http://search.nix.gsc.io/?q=tiff&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tiff+in%3Apath&type=Code))  tiff: multiple vulnerabilities
  ### tomcat (4 issues)
  - [x] [`#699807`](https://lwn.net/Vulnerabilities/699807/) ([search](http://search.nix.gsc.io/?q=tomcat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tomcat+in%3Apath&type=Code))  tomcat: redirect HTTP traffic
  - [x] [`#700837`](https://lwn.net/Vulnerabilities/700837/) ([search](http://search.nix.gsc.io/?q=tomcat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tomcat+in%3Apath&type=Code))  tomcat: privilege escalation
  - [x] [`#677975`](https://lwn.net/Vulnerabilities/677975/) ([search](http://search.nix.gsc.io/?q=tomcat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tomcat+in%3Apath&type=Code))  tomcat: multiple vulnerabilities
  - [x] [`#678633`](https://lwn.net/Vulnerabilities/678633/) ([search](http://search.nix.gsc.io/?q=tomcat&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=tomcat+in%3Apath&type=Code))  tomcat: session hijacking
  ### virtualbox (3 issues)
  - [x] [`#700840`](https://lwn.net/Vulnerabilities/700840/) ([search](http://search.nix.gsc.io/?q=virtualbox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=virtualbox+in%3Apath&type=Code))  virtualbox: unspecified vulnerability
  - [x] [`#695561`](https://lwn.net/Vulnerabilities/695561/) ([search](http://search.nix.gsc.io/?q=virtualbox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=virtualbox+in%3Apath&type=Code))  virtualbox: unspecified vulnerability
  - [x] [`#689384`](https://lwn.net/Vulnerabilities/689384/) ([search](http://search.nix.gsc.io/?q=virtualbox&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=virtualbox+in%3Apath&type=Code))  virtualbox: unspecified
  ### vlc (7 issues)
  - [x] [`#690409`](https://lwn.net/Vulnerabilities/690409/) ([search](http://search.nix.gsc.io/?q=vlc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=vlc+in%3Apath&type=Code))  vlc: code execution
  - [x] [`#692381`](https://lwn.net/Vulnerabilities/692381/) ([search](http://search.nix.gsc.io/?q=vlc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=vlc+in%3Apath&type=Code))  vlc: denial of service
  - [x] [`#692380`](https://lwn.net/Vulnerabilities/692380/) ([search](http://search.nix.gsc.io/?q=vlc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=vlc+in%3Apath&type=Code))  vlc: two vulnerabilities
  - [x] [`#686756`](https://lwn.net/Vulnerabilities/686756/) ([search](http://search.nix.gsc.io/?q=vlc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=vlc+in%3Apath&type=Code))  vlc: multiple vulnerabilities
  - [x] [`#680041`](https://lwn.net/Vulnerabilities/680041/) ([search](http://search.nix.gsc.io/?q=vlc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=vlc+in%3Apath&type=Code))  vlc: multiple vulnerabilities
  - [x] [`#677984`](https://lwn.net/Vulnerabilities/677984/) ([search](http://search.nix.gsc.io/?q=vlc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=vlc+in%3Apath&type=Code))  vlc: multiple vulnerabilities
  - [x] [`#655117`](https://lwn.net/Vulnerabilities/655117/) ([search](http://search.nix.gsc.io/?q=vlc&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=vlc+in%3Apath&type=Code))  vlc: code execution
  ### webkitgtk4 (6 issues)
  - [x] [`#698490`](https://lwn.net/Vulnerabilities/698490/) ([search](http://search.nix.gsc.io/?q=webkitgtk4&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkitgtk4+in%3Apath&type=Code))  webkitgtk4: multiple vulnerabilities
  - [x] [`#689263`](https://lwn.net/Vulnerabilities/689263/) ([search](http://search.nix.gsc.io/?q=webkitgtk4&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkitgtk4+in%3Apath&type=Code))  webkitgtk4: two vulnerabilities
  - [x] [`#685010`](https://lwn.net/Vulnerabilities/685010/) ([search](http://search.nix.gsc.io/?q=webkitgtk4&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkitgtk4+in%3Apath&type=Code))  webkitgtk4: multiple vulnerabilities
  - [x] [`#674266`](https://lwn.net/Vulnerabilities/674266/) ([search](http://search.nix.gsc.io/?q=webkitgtk4&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkitgtk4+in%3Apath&type=Code))  webkitgtk4: multiple vulnerabilities
  - [x] [`#681103`](https://lwn.net/Vulnerabilities/681103/) ([search](http://search.nix.gsc.io/?q=webkitgtk4&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkitgtk4+in%3Apath&type=Code))  webkitgtk4: denial of service
  - [x] [`#674707`](https://lwn.net/Vulnerabilities/674707/) ([search](http://search.nix.gsc.io/?q=webkitgtk4&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=webkitgtk4+in%3Apath&type=Code))  webkitgtk4: multiple vulnerabilities
  ### websvn (2 issues)
  - [x] [`#686863`](https://lwn.net/Vulnerabilities/686863/) ([search](http://search.nix.gsc.io/?q=websvn&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=websvn+in%3Apath&type=Code))  websvn: cross-site scripting
  - [x] [`#677103`](https://lwn.net/Vulnerabilities/677103/) ([search](http://search.nix.gsc.io/?q=websvn&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=websvn+in%3Apath&type=Code))  websvn: cross-site scripting
  ### wget (2 issues)
  - [x] [`#700395`](https://lwn.net/Vulnerabilities/700395/) ([search](http://search.nix.gsc.io/?q=wget&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wget+in%3Apath&type=Code))  wget: race condition
  - [x] [`#692024`](https://lwn.net/Vulnerabilities/692024/) ([search](http://search.nix.gsc.io/?q=wget&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wget+in%3Apath&type=Code))  wget: code execution
  ### wireshark (10 issues)
  - [x] [`#701348`](https://lwn.net/Vulnerabilities/701348/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: multiple vulnerabilities
  - [x] [`#696829`](https://lwn.net/Vulnerabilities/696829/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: denial of service
  - [x] [`#696701`](https://lwn.net/Vulnerabilities/696701/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: denial of service
  - [x] [`#696077`](https://lwn.net/Vulnerabilities/696077/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: multiple vulnerabilities
  - [x] [`#691100`](https://lwn.net/Vulnerabilities/691100/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: multiple vulnerabilities
  - [x] [`#689254`](https://lwn.net/Vulnerabilities/689254/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: multiple vulnerabilities
  - [x] [`#688446`](https://lwn.net/Vulnerabilities/688446/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: denial of service
  - [x] [`#685293`](https://lwn.net/Vulnerabilities/685293/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: multiple vulnerabilities
  - [x] [`#678634`](https://lwn.net/Vulnerabilities/678634/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: multiple dissector crashes
  - [x] [`#671100`](https://lwn.net/Vulnerabilities/671100/) ([search](http://search.nix.gsc.io/?q=wireshark&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wireshark+in%3Apath&type=Code))  wireshark: multiple vulnerabilities
  ### wordpress (4 issues)
  - [x] [`#700105`](https://lwn.net/Vulnerabilities/700105/) ([search](http://search.nix.gsc.io/?q=wordpress&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wordpress+in%3Apath&type=Code))  wordpress: multiple vulnerabilities
  - [x] [`#693180`](https://lwn.net/Vulnerabilities/693180/) ([search](http://search.nix.gsc.io/?q=wordpress&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wordpress+in%3Apath&type=Code))  wordpress: multiple vulnerabilities
  - [x] [`#688454`](https://lwn.net/Vulnerabilities/688454/) ([search](http://search.nix.gsc.io/?q=wordpress&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wordpress+in%3Apath&type=Code))  wordpress: two cross-site scripting vulnerabilities
  - [x] [`#674928`](https://lwn.net/Vulnerabilities/674928/) ([search](http://search.nix.gsc.io/?q=wordpress&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=wordpress+in%3Apath&type=Code))  wordpress: two vulnerabilities
  ### xen (16 issues)
  - [x] [`#700653`](https://lwn.net/Vulnerabilities/700653/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: privilege escalation
  - [x] [`#700110`](https://lwn.net/Vulnerabilities/700110/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: multiple vulnerabilities
  - [x] [`#697571`](https://lwn.net/Vulnerabilities/697571/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: denial of service
  - [x] [`#696698`](https://lwn.net/Vulnerabilities/696698/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: denial of service
  - [x] [`#695684`](https://lwn.net/Vulnerabilities/695684/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: three vulnerabilities
  - [x] [`#692379`](https://lwn.net/Vulnerabilities/692379/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: two vulnerabilities
  - [x] [`#690023`](https://lwn.net/Vulnerabilities/690023/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: three vulnerabilities
  - [x] [`#689265`](https://lwn.net/Vulnerabilities/689265/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: privilege escalation
  - [x] [`#687862`](https://lwn.net/Vulnerabilities/687862/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: denial of service
  - [x] [`#685883`](https://lwn.net/Vulnerabilities/685883/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: three vulnerabilities
  - [x] [`#684752`](https://lwn.net/Vulnerabilities/684752/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: privilege escalation
  - [x] [`#683317`](https://lwn.net/Vulnerabilities/683317/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: information disclosure
  - [x] [`#680800`](https://lwn.net/Vulnerabilities/680800/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: multiple denial of service vulnerabilities
  - [x] [`#682571`](https://lwn.net/Vulnerabilities/682571/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: multiple vulnerabilities
  - [x] [`#679131`](https://lwn.net/Vulnerabilities/679131/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: denial of service
  - [x] [`#677982`](https://lwn.net/Vulnerabilities/677982/) ([search](http://search.nix.gsc.io/?q=xen&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xen+in%3Apath&type=Code))  xen: denial of service
  ### xerces-c (3 issues)
  - [x] [`#693102`](https://lwn.net/Vulnerabilities/693102/) ([search](http://search.nix.gsc.io/?q=xerces-c&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xerces-c+in%3Apath&type=Code))  xerces-c: denial of service
  - [x] [`#687229`](https://lwn.net/Vulnerabilities/687229/) ([search](http://search.nix.gsc.io/?q=xerces-c&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xerces-c+in%3Apath&type=Code))  xerces-c: code execution
  - [x] [`#677608`](https://lwn.net/Vulnerabilities/677608/) ([search](http://search.nix.gsc.io/?q=xerces-c&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=xerces-c+in%3Apath&type=Code))  xerces-c: code execution


  ## Total done: 849


state: closed
title: pythonPackages.cryptography{,_vectors}: 1.5 -> 1.5.1
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18857
updated_at: 2016-09-23 08:05:02
body:
  ###### Motivation for this change

  build was [broken](http://hydra.nixos.org/build/40934105)
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  fixes build after [update of openssl](https://github.com/NixOS/nixpkgs/commit/ac03df96ba2c32533ec67ee899b7bd903ac6205f)


state: closed
title: sudo: 1.8.17p1 -> 1.8.18
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18858
updated_at: 2016-09-23 11:25:45
body:
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  successfully built `nixos/tests/misc.nix` 
  cc @edolstra 


state: closed
title: Tomcat: 7.0.70 -> 7.0.72 for CVE (HTTPoxy)
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18859
updated_at: 2016-09-24 00:00:51
body:
  # Please backport to 16.09
  ###### Motivation for this change

  http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: php5: 5.6.25 -> 5.6.26 for CVEs
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18860
updated_at: 2016-09-23 11:15:53
body:
  # Please backport to 16.09.
  ###### Motivation for this change
  - http://www.php.net/ChangeLog-5.php#5.6.26
  - https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: Add AMDGPU-PRO driver
user_login: corngood
html_url: https://github.com/NixOS/nixpkgs/pull/18861
updated_at: 2016-10-12 07:49:26
body:
  ###### Motivation for this change

  This adds the latest [proprietary AMD gpu drivers](http://support.amd.com/en-us/kb-articles/Pages/AMD-Radeon-GPU-PRO-Linux-Beta-Driver%e2%80%93Release-Notes.aspx), which include a vulkan driver.  It's loosely based on the ati proprietary package.  The patches for the kernel module come from the gentoo/arch packages, and allow it to be built for linux 4.4-4.7.  It looks like 4.8 will require more patches.

  The driver can be activated by setting:

  ```
  services.xserver.videoDrivers = [ "amdgpu-pro" ];
  ```
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).
  - [x] Test 64-bit OpenGL
  - [x] Test 64-bit Vulkan
  - [ ] Test 64-bit OpenCL
  - [x] Test 64-bit vdpau
  - [x] 32-bit build
  - [x] Test 32-bit OpenGL
  - [x] Test 32-bit Vulkan
  - [ ] Test 32-bit OpenCL
  - [x] Test 32-bit vdpau

  ---


state: closed
title: calibre: 2.66.0 -> 2.68.0
user_login: cmfwyp
html_url: https://github.com/NixOS/nixpkgs/pull/18862
updated_at: 2016-09-23 23:34:08
body:
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of `calibre`
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: mlton: fix build with clang (darwin)
user_login: acowley
html_url: https://github.com/NixOS/nixpkgs/pull/18864
updated_at: 2016-09-23 18:18:25
body:
  ###### Motivation for this change

  Fix the mlton compiler on darwin.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [x] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  A minor tweak is necessary to avoid raising an error when building with
  clang. This gets mlton building on darwin.

  The patch is a `sed` on a few lines in a source file, but that source file is unpacked during the build process.


state: closed
title: example value for fileSystems is incorrect
user_login: nhooyr
html_url: https://github.com/NixOS/nixpkgs/issues/18865
updated_at: 2016-12-10 15:22:37
body:
  Search for "fileSystems" in https://nixos.org/nixos/options.html

  The example value is `{ / = { device = "/dev/hda1"; }; /bigdisk = { label = "bigdisk"; }; /data = { device = "/dev/hda2"; fsType = "ext3"; options = [ "data=journal" ]; }; }`

  However a path cannot be used as an attribute name which means the above is a syntax error.


state: closed
title: redprl: init at 2016-09-22
user_login: acowley
html_url: https://github.com/NixOS/nixpkgs/pull/18866
updated_at: 2016-09-24 13:51:54
body:
  ###### Motivation for this change

  Include the RedPRL proof assistant in nixpkgs.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [x] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ctrlp-cmatcher: init at 09-22-2016
user_login: carlsverre
html_url: https://github.com/NixOS/nixpkgs/pull/18867
updated_at: 2016-09-23 22:11:06
body:
  ###### Motivation for this change

  Want a faster matcher for ctrlp.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  Faster matcher for the ctrlp vim plugin.


state: closed
title: enpass: init at 5.3.0
user_login: RonnyPfannschmidt
html_url: https://github.com/NixOS/nixpkgs/pull/18868
updated_at: 2016-10-10 11:26:48
body:
  ###### Motivation for this change

  adds the enpass password manager
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: erlang: 19.0.2 -> 19.1
user_login: couchemar
html_url: https://github.com/NixOS/nixpkgs/pull/18869
updated_at: 2018-03-06 15:22:05
body:
  ###### Motivation for this change

  Erlang version is updated to 19.1, also removed obsolete patch, which not needed anymore 
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [x] OS X
    - [x] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: mkvtoolnix: qt5 development tools are not found
user_login: romildo
html_url: https://github.com/NixOS/nixpkgs/pull/18871
updated_at: 2016-09-24 09:31:06
body:
  ###### Motivation for this change

  In order to find QT5 at build time, the dependency `qt5.qtbase.dev` is needed instead of `qt5.qtbase`, because it looks for some binary tools like `moc`, `rcc` and `uic`.

  Fixes #18796.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: cockroachdb: build only on x86_64-linux
user_login: rushmorem
html_url: https://github.com/NixOS/nixpkgs/pull/18872
updated_at: 2016-09-23 10:33:52
body:
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  CockroachDB is failing to build on `x86_64-darwin` according to
  Hydra. I don't have a Mac or Windows machine to debug the builds
  on so I can't support those.


state: closed
title: configd is a propagatedBuildInput of Python 2.x
user_login: FRidh
html_url: https://github.com/NixOS/nixpkgs/issues/18873
updated_at: 2016-10-14 13:04:07
body:
  ## Issue description

  `configd` is a `propagatedBuildInput` of Python 2.x while it isn't with 3.x. I suppose that is not correct @copumpkin ?


state: closed
title: nginxMainline: 1.11.3 -> 1.11.4
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/18874
updated_at: 2016-09-23 12:37:28
body:
  ###### Motivation for this change

  Latest update / #18856
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: openjdk7: 1.7.0-91 -> 1.7.0-111
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/18875
updated_at: 2019-04-17 01:44:37
body:
  ###### Motivation for this change

  Update to latest version / #18856

  We are currently vulnerable to https://lwn.net/Alerts/682164/
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: harfbuzz: 1.2.7 -> 1.3.1
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18876
updated_at: 2016-09-28 19:21:27
body:
  ###### Motivation for this change

  new version
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: openvpn: 2.3.11 -> 2.3.12
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/18877
updated_at: 2016-09-23 16:06:19
body:
  ###### Motivation for this change

  Update to latest version / #18856
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---
  # BACKPORT ME TO 16.09


state: closed
title: Drop JDK 1.6 and 1.7
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/issues/18878
updated_at: 2016-09-29 12:53:05
body:
  ## Issue description

  Oracle's JDK for 1.6 and 1.7 is no longer receiving public security updates. We should probably drop them from nixpkgs.

  Reference:
  - https://github.com/NixOS/nixpkgs/issues/18856#issuecomment-249193199
  - https://github.com/NixOS/nixpkgs/issues/18856#issuecomment-249179789


state: closed
title: curl: 7.50.1 -> 7.50.3
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/18879
updated_at: 2016-09-24 12:15:37
body:
  ###### Motivation for this change

  Update to latest version, #18856 

  Fix for https://lwn.net/Vulnerabilities/700965/
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---
  # MERGE ME INTO 16.09


state: closed
title: bind: 9.10.4 -> 9.10.4-P2
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/18880
updated_at: 2016-09-23 23:57:24
body:
  ###### Motivation for this change

  Update to latest version / #18856 

  Fixes https://lwn.net/Vulnerabilities/695097/
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---
  # PORT ME INTO 16.09


state: closed
title: GitLab (and few others) use nix store to keep passwords
user_login: spinus
html_url: https://github.com/NixOS/nixpkgs/issues/18881
updated_at: 2017-11-15 18:14:11
body:
  ## Issue description

  As far as I understand, all of those settings
  https://github.com/NixOS/nixpkgs/blob/e330807e1fbd05828f5b905e9c356b803b04302e/nixos/modules/services/misc/gitlab.nix#L335 end up in nix store.
  ### Steps to reproduce
  1. Enable gitlab service in /etc/nixos/configuration.nix (`services.gitlab.enable=true`)
  2. Fill missing values to keep gitlab happy

  ```
      services.gitlab.databasePassword = "qqq";
      services.gitlab.secrets.secret ="Xxx";
      services.gitlab.secrets.otp ="Xxx";
      services.gitlab.secrets.db ="Xxx";

  ```
  1. cry

  Should we have clear way to handle that?
  Personally for own services I use paths to files with secrets (deployed usually with nixops, so it integrates nicely).

  Should choose some clear way to define secrets like that and update the docs?
  ## Technical details
  - System: since 2014
  - Nix version: not relevant
  - Nixpkgs version: since 2014 


state: closed
title: mariadb: 10.1.16 -> 10.1.17
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/18882
updated_at: 2019-04-17 01:44:37
body:
  ###### Motivation for this change

  Update / fix vulnerability / #18856 

  https://lwn.net/Vulnerabilities/700833/
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---
  # PORT ME TO 16.09


state: closed
title: mercurial: 3.8.2 -> 3.9.1
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/18883
updated_at: 2016-09-23 15:56:41
body:
  ###### Motivation for this change

  Update to latest version
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  This change updates mercurial and tortoisehg at the same time as per comment in code.


state: closed
title: mysql55: 5.5.50 -> 5.5.52
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/18884
updated_at: 2019-04-17 01:44:37
body:
  ###### Motivation for this change

  Update version / fix vulnerability / #18856 

  https://lwn.net/Vulnerabilities/700651/
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---
  # PORT ME TO 16.09


state: closed
title: hardeningEnable and hardeningDisable not documented
user_login: Profpatsch
html_url: https://github.com/NixOS/nixpkgs/issues/18887
updated_at: 2017-01-20 16:48:19
body:
  There is the `Hardening in Nixpgs` section in the manual and both variables are listed, but it is not explained what types they are or what the semantics are (I first I thought `hardeningDisable = true;` would have an effect).

  It gets worse because `mkDerivation` just forwards anything it gets and no error is thrown on wrong usage.

  cc @globin @fpletz 


state: closed
title: brogue: fix crash by stackprotector hardening
user_login: Profpatsch
html_url: https://github.com/NixOS/nixpkgs/pull/18888
updated_at: 2016-09-24 07:38:43
body:
  - [x] NixOS
  - [ ] OS X
  - [ ] Linux
  - [x] Tested execution of all binary files (usually in `./result/bin/`)


state: closed
title: perlPackages.WWWCurl: fix broken build after curl update
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18889
updated_at: 2016-09-24 01:03:17
body:
  ###### Motivation for this change

  [curl update](https://github.com/NixOS/nixpkgs/commit/057bfdb689748373a8514f1150e4787d6a1f0d7d) broke [WWWCurl build](http://hydra.nixos.org/build/41024856/nixlog/1/raw)
  ### **Please backport to 16.09**
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  upstream bugreport:
  https://rt.cpan.org/Public/Bug/Display.html?id=117793

  patch also taken from there


state: closed
title: Extract ocamlPackages into its own nix file
user_login: Profpatsch
html_url: https://github.com/NixOS/nixpkgs/issues/18890
updated_at: 2016-09-23 18:58:21
body:
  Language environments should have their own files outside of `all-packages.nix`, so that users aren’t confused about the current scope (e.g. `callPackage` is overridden).


state: closed
title: Having a swap file delays boot by 20 seconds
user_login: bjornfor
html_url: https://github.com/NixOS/nixpkgs/issues/18891
updated_at: 2016-09-24 10:16:49
body:
  ## Issue description

  If a configured swapDevice is a file (instead of a partition), NixOS stage-1 waits for the device for up to 20 seconds, then times out and continues the boot:

  ```
  $ journalctl -b
  [...]
  Sep 23 21:28:32 whitetip stage-1-init: waiting for device /var/swapfile to appear.......................
  ```

  (Each '.' after the first three represents one second. In total it waits 20 seconds.)

  I think the problem is related to resumeDevices, which, unless configured by the user, defaults to using swapDevice as resume device. And, AFAICT, dealing with resume devices is done before the root filesystem is mounted. So it is obvious that a swapfile in the rootfs isn't found.
  ### Steps to reproduce

  ```
    swapDevices = [
      { device = "/var/swapfile";
        size = 8192; # MiB
      }
    ];
  ```

  Reboot and see `stage-1-init: waiting for device /var/swapfile to appear...` for 20 seconds.
  ## Technical details
  - System: NixOS 16.09


state: closed
title: grsecurity vanilla doesn't support virtualbox guestadditions but nixos tries to install them anyway
user_login: matomer
html_url: https://github.com/NixOS/nixpkgs/issues/18892
updated_at: 2016-09-26 13:44:32
body:
  ## Issue description

  When grsec is enabled and the machine is a virtualbox VM, nixos tries to build the guestadditions against a grsec kernel that isn't compiled with virtualization. This results in strange build failures for GuestAdditions.

  The issue is a bit more complicated because the virtualisation is enabled in the hardware-config file and then grsec is enabled in the regular config file, which cause nixos-rebuild to succeed to build the grsec kernel but to fail to build the virtualbox guest additions.
  ### Steps to reproduce
  1. Setup virtualbox VM (optional, this would probably work on any host)
  2. Set 'virtualisation.virtualbox.guest.enable = true;'
  3. Set 'security.grsecurity.enable = true;'
  4. Rebuild (nixos-rebuild switch)
  ## Technical details
  - System: NixOS: 16.09beta335.7617e7e
  - Nix version: 1.11.4
  - Nixpkgs version: 16.09beta335.7617e7e


state: closed
title: ocaml_4_02 : Fix src
user_login: regnat
html_url: https://github.com/NixOS/nixpkgs/pull/18893
updated_at: 2016-09-23 20:18:27
body:
  Commit 08b85f5f9917cad708faab7fc81b1c155d478328 introduced a wrong src url for ocaml 4.02 (and thus
    broke a lot of stuff),
    This restores the correct url.


state: closed
title: Add ripgrep package
user_login: tailhook
html_url: https://github.com/NixOS/nixpkgs/pull/18894
updated_at: 2016-09-25 12:28:29
body:
  ###### Motivation for this change

  This is a great and fast text search utility written in rust.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: kernel build error: "code model kernel does not support PIC mode"
user_login: bjornfor
html_url: https://github.com/NixOS/nixpkgs/issues/18895
updated_at: 2016-09-30 16:48:24
body:
  ## Issue description

  In NixOS 16.03, plain GCC can be used to _manually_ build a kernel:

  ```
  $ wget https://cdn.kernel.org/pub/linux/kernel/v4.x/linux-4.4.21.tar.xz
  $ tar xvf linux-4.4.21.tar.xz
  $ cd linux-*
  $ export NIX_PATH=nixpkgs=/path/to/nixpkgs-16.03
  $ nix-shell -p pkgconfig flex bison which ncurses lzop bc gcc --run "make defconfig"
  $ nix-shell -p pkgconfig flex bison which ncurses lzop bc gcc --run "make"
  [...]
  Kernel: arch/x86/boot/bzImage is ready  (#1)
    Building modules, stage 2.
    MODPOST 18 modules
  ```

  But now in NixOS 16.09:

  ```
  [...]
  $ export NIX_PATH=nixpkgs=/path/to/nixpkgs-16.09
  $ nix-shell -p pkgconfig flex bison which ncurses lzop bc gcc --run "make"
  [...]
    CHK     include/generated/utsrelease.h
    CC      kernel/bounds.s
  kernel/bounds.c:1:0: error: code model kernel does not support PIC mode
   /*
   ^
  make[1]: *** [Kbuild:46: kernel/bounds.s] Error 1
  ```

  Is this due to the recent hardening flags change? Or?
  ## Technical details
  - System: NixOS 16.09


state: closed
title: dockerTools: Fix layer redundancy.
user_login: tboettch
html_url: https://github.com/NixOS/nixpkgs/pull/18896
updated_at: 2016-09-25 14:35:06
body:
  ###### Motivation for this change

  When building an image with multiple layers, files already included in an underlying layer are supposed to be excluded from the current layer. However, some subtleties in the way filepaths are compared seem to be blocking this.

  For instance, consider this image composition:

  ``` nix
  {dockerTools, coreutils, bash}:

  let
      coreutilsImage = dockerTools.buildImage {
          name = "coreutils-image";
          contents = coreutils;
      };

      bashImage = dockerTools.buildImage {
          name = "bash-image";
          contents = bash;
          fromImage = coreutilsImage;
      };
  in
      bashImage
  ```

  In the resulting image, the same version of glibc is present in both layers.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [x] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).
  ###### Testing

  I've tested locally with some private packages that build a chain of images. The resulting tar file is able to be loaded and run by Docker 1.12.0, and I've manually verified that duplication is no longer present.

  Are there any further tests that would be appropriate? I wasn't able to find anything relying on this package in nixpkgs.


state: closed
title: Backport "Fix #18316 - Revert #14398, Using self prevent aliasing overriden packages"
user_login: bjornfor
html_url: https://github.com/NixOS/nixpkgs/pull/18897
updated_at: 2016-10-31 18:44:21
body:
  ###### Motivation for this change

  Fixes #18316 and https://github.com/NixOS/nixpkgs/issues/17989 (on the release-16.09 branch).

  There were some conflicts, I fixed and checked the result with `nix-env -f . -qa '*' --meta --xml --drv-path --show-trace`.

  cc @nbp, @vcunat.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: gradle: 3.0 -> 3.1
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/pull/18898
updated_at: 2016-09-23 22:57:09
body:
  ###### Motivation for this change

  Update version
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ikiwiki: 3.20150614 -> 3.20160905
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18899
updated_at: 2016-09-25 11:19:22
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/686749/
  #18856
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: mailman: 2.1.18 -> 2.1.23
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18900
updated_at: 2016-09-25 11:19:46
body:
  ###### Motivation for this change

  https://lwn.net/Alerts/700805/
  https://github.com/NixOS/nixpkgs/issues/18856

  Note that mailman3  is out too, but this is still up to date.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: .github/CONTRIBUTING.md has a broken link
user_login: winksaville
html_url: https://github.com/NixOS/nixpkgs/issues/18901
updated_at: 2016-09-24 06:05:37
body:
  ## Issue description

  The link to the Submitting Changes was returning 404
  ### Steps to reproduce

  Click on the link in the last sentence in CONTRIBUTING.md:
  See the nixpkgs manual for more details on how to Submit changes to nixpkgs.
  ## Technical details

  The link is pointing at a page in hydra which doesn't exist, fixed by pointing to the manual
  https://nixos.org/nixpkgs/manual/#chap-submitting-changes
  - System: NixOS: 16.09beta264.aadcffc (Flounder)
  - Nix version: nix-env (Nix) 1.11.4
  - Nixpkgs version: 17.03pre-git


state: closed
title: Update broken link in CONTRIBUTING.md
user_login: winksaville
html_url: https://github.com/NixOS/nixpkgs/pull/18902
updated_at: 2016-09-24 06:05:38
body:
  ###### Motivation for this change

  Fix #18901 
  ###### Things done

  Changed the file and clicked on the link, it no longer is broken.
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  The current link returns a 404 error


state: closed
title: bind: split out dnsutils & host binaries
user_login: fpletz
html_url: https://github.com/NixOS/nixpkgs/pull/18903
updated_at: 2016-10-08 14:01:15
body:
  ###### Motivation for this change

  These tools are commonly used but don't require the other bind binaries. Bind's libs are used, so they've also been split into an extra output.

  The old version of host isn't maintained anymore and was removed from Debian back in 2009: https://packages.qa.debian.org/h/host.html
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: as31: Apply Debian patch for CVE-2012-0808
user_login: aneeshusa
html_url: https://github.com/NixOS/nixpkgs/pull/18904
updated_at: 2016-09-24 01:54:53
body:
  ###### Motivation for this change

  Fix CVE-2012-0808. Patch is from Debian (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655496).
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  Shoutout to #18856, due to which I just discovered monitor.nixos.org despite using Nix for quite a while now, which let me know of this vulnerability in the packages I maintain.


state: closed
title: ffmpeg: 2.8.7 -> 2.8.8
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18905
updated_at: 2019-04-17 01:44:37
body:
  ###### Motivation for this change

  https://github.com/NixOS/nixpkgs/issues/18856
  https://lwn.net/Vulnerabilities/675050/
  ~~https://lwn.net/Vulnerabilities/676796/~~
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Update salt to 2016.3.3
user_login: aneeshusa
html_url: https://github.com/NixOS/nixpkgs/pull/18906
updated_at: 2016-09-24 13:02:10
body:
  ###### Motivation for this change

  2016.3.3 is the latest version.
  Salt no longer depends on SaltTesting, but I updated that as well for good measure.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: llvm_39: fix on darwin
user_login: acowley
html_url: https://github.com/NixOS/nixpkgs/pull/18907
updated_at: 2016-09-29 18:04:51
body:
  ###### Motivation for this change
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [x] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  We need xpc, to pin down which libtool to use (to avoid an Xcode
  dependency), and ensure that the build does not try to produce i386
  binaries.


state: closed
title: jq: Fix CVE-2015-8863 and CVE-2016-4074
user_login: aneeshusa
html_url: https://github.com/NixOS/nixpkgs/pull/18908
updated_at: 2018-07-17 21:53:30
body:
  ###### Motivation for this change

  Part of #18856.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  jq has not had a release since August 2015, so use the latest version
  from git. CVE-2015-8863 has a fix committed to the current master, while
  CVE-2016-4074 has not had a fix committed to master, so add a separate
  patch for that.

  I manually confirmed that the CVEs are fixed in the resulting binary.


state: closed
title: flex: 2.6.0 -> 2.6.1
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18909
updated_at: 2016-09-27 20:50:08
body:
  ###### Motivation for this change

  https://github.com/NixOS/nixpkgs/issues/18856
  https://lwn.net/Vulnerabilities/696808/
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: lighttpd: 1.4.40 -> 1.4.41
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18910
updated_at: 2016-09-25 11:32:56
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/696215/
  https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: giflib: 5.1.0 -> 5.1.4
user_login: RamKromberg
html_url: https://github.com/NixOS/nixpkgs/pull/18911
updated_at: 2016-09-27 06:11:04
body:
  had some strange deadlocks with an off-nixpkgs math lib. this fixed them.

  only tested against sxiv.

  ```
  Version 5.1.4
  =============

  Code Fixes
  ----------

  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.

  * Fix SF Bug #92: Fix buffer overread in gifbuild.

  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path

  * Fix SF Bug #89: Fix buffer overread in gifbuild.

  Version 5.1.3
  =============

  As of this version the library and code has been seriously abused by fuzzers,
  smoking out crash bugs (now fixed) induced by various kinds of severely
  malformed GIF.

  Code Fixes
  ----------

  * Prevent malloc randomess from causing the header output routine to emit
    a GIF89 version string even when no GIF89 features are present. Only
    breaks tests, not production code, but it's odd this wasn't caught sooner.

  * Prevent malloc randomess from producing sporadic failures by causing
    sanity checks added in 5.1.2 to misfire.

  * Bulletproof gif2rgb against 0-height images. Addressed SF bug #78:
    Heap overflow in gif2rgb with images of size 0, also SF bug #82.

  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes SF bug #83
    introduced in 5.1.2.

  * Fix SF Bug #84: incorrect return of DGifSlurp().

  Version 5.1.2
  =============

  Code Fixes
  ----------

  * Code hardening using reallocarray() from OpenBSD.

  * Sanity check in giffilter catches files with malformed extension records
    Fixes SourceForge bug #63: malformed gif causes segfault in giffilter.

  * Inexpensive sanity check in DGifSlurp() catches malformed files with
    no image descriptor. Fixes SourceForge bug #64: malformed gif causes
    crash in giftool.

  * Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying constant input
    parameter.

  * Bail out of GIF read on invalid pixel width. Addresses Savannah bug
    #67: invalid shift in dgif_lib.c

  * Fix SourceForge bug #69: #69 Malformed: Gif file with no extension
    block after a GRAPHICS_EXT_FUNC_CODE extension causes segfault (in
    giftext).

  * Fix SourceForge bug #71: Buffer overwrite when giffixing a malformed gif.

  * Fix SourceForge bug #73: Null pointer deference in gifclrmap (only
    reachable with malformed GIF).

  * Fix SourceForge bug #74: Double free in gifsponge under 5.1.1,
    for any valid gif image.

  * Fix SourceForge bug #75: GAGetArgs overflows due to uncounted use of va_arg.

  * Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error


  Version 5.1.1
  =============

  Code Fixes
  ----------

  * Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.

  * Fix SourceForge bug #59: DGifOpen can segfault if DGifGetScreenDesc fails.

  * SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.

  * Fix SourceForge bug #61 Leak in gifsponge.

  Build Fixes
  ----------

  * glibtoolize port fix for OS X.
  ```


state: closed
title: stunnel: 5.31 -> 5.36
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18912
updated_at: 2016-09-24 21:05:31
body:
  ###### Motivation for this change

  Somewhat out of date.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: tinc: 20160511 -> 20160924
user_login: robbinch
html_url: https://github.com/NixOS/nixpkgs/pull/18913
updated_at: 2016-09-28 14:17:28
body:
  ###### Motivation for this change

  Fix broken build for haskellPackages.tinc.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: containers: fix dynamic hash lookup
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/18915
updated_at: 2016-09-27 22:19:30
body:
  ###### Motivation for this change

  we want the content of attribute as a key:
  b9df84cd4f6b70bdfa395a91dbf3d712adc7e18d broke this
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: monit: 5.10 -> 5.19.0
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/18916
updated_at: 2016-09-25 00:10:03
body:
  ###### Motivation for this change

  monit disables SSLv23 now by default, see
  - https://mmonit.com/monit/changes/
  - https://lwn.net/Vulnerabilities/691497/

  also related to https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Python: remove 2.6 and 3.3
user_login: FRidh
html_url: https://github.com/NixOS/nixpkgs/pull/18917
updated_at: 2016-10-10 06:58:43
body:
  ###### Motivation for this change

  The last maintenance release of Python 2.6 was almost 3 years ago, and that of 3.3 close to 2 years.
  A 3.3.7 was planned for February but hasn't seen the light yet.

  Since we have 2.7, 3.4, 3.5 and a pre-release of 3.6 I think it is time to move on and get rid of these old versions.


state: closed
title: Android SDK packages could contain JARs with sources
user_login: michalrus
html_url: https://github.com/NixOS/nixpkgs/issues/18918
updated_at: 2016-10-12 20:37:36
body:
  ## Issue description

  Currently, our Android SDK derivations contain only binary files. This is unfortunate during development, when one wants to jump to a definition of a particular symbol in the SDK and it is not found.

  For comparison, ArchLinux is doing this in their `android-sources-##` packages, e.g. https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=android-sources-16:

  ``` bash
  source=("http://dl-ssl.google.com/android/repository/sources-16_r02.zip")

  mkdir -p "${pkgdir}/opt/android-sdk/sources/"
  mv "${srcdir}/src" "${pkgdir}/opt/android-sdk/sources/android-16"
  ```
  ## Technical details
  - System: 16.09pre-git (Flounder)
  - Nix version: nix-env (Nix) 1.11.4
  - Nixpkgs version: "16.09beta335.7617e7e"

  ---

  /cc @svanderburg @taku0  


state: closed
title: fcgi: Patch to protect against stack smashing
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18919
updated_at: 2016-09-25 18:34:12
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/642646/
  https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: bundler: 1.12.5 -> 1.13.1
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/18920
updated_at: 2016-09-24 12:41:17
body:
  ###### Motivation for this change

  Really doesn't make sense not to be on the latest version of bundler.
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Spice: Upgrade all the spice packages
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18921
updated_at: 2016-09-27 12:18:42
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/690141/ spice has a vulnerability in everything below 0.12.7. I'm not sure if you can backport that change without the rest. Maybe a maintainer will know :)
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  Somewhat related to https://github.com/NixOS/nixpkgs/issues/18856


state: closed
title: Functions to change and merge module options
user_login: ericsagnes
html_url: https://github.com/NixOS/nixpkgs/pull/18922
updated_at: 2016-10-01 16:01:57
body:
  ###### Motivation for this change

  Adds two functions to enlarge the toolset of module options deprecation functions:
  - `mkMergedOptionModule`: Enable to merge multiple removed options into a new one, and set the new value according to a function that can use the removed option values.
  - `mkChangedOptionModule`: A single from version of `mkMergedOptionModule`; A `mkRenamedOptionModule` that can change the value.

  This should bring more flexibility and backward compatibility for module options change.
  ###### Things done
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  cc @edolstra 


state: closed
title: davfs2: 1.5.2 -> 1.5.3
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18923
updated_at: 2016-09-25 11:35:58
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/694102/
  https://github.com/NixOS/nixpkgs/issues/18856

  stack smashing bug 
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: mysql_jdbc: 5.1.38 -> 5.1.39
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18924
updated_at: 2016-09-25 11:36:20
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/646898/
  https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: nettle: 3.1.1 -> 3.2
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18925
updated_at: 2016-09-25 11:43:16
body:
  ###### Motivation for this change

  https://github.com/NixOS/nixpkgs/issues/18856
  https://lwn.net/Vulnerabilities/674493/

  ```
  - CVE-2015-8803 CVE-2015-8804 CVE-2015-8805
    (improper cryptographic calculations)

  It has been discovered that multiple carry propagation bugs are
  producing wrong results in calculations. They affect the NIST P-256 and
  P-384 curves. The P-256 bug is in the C code and affects multiple
  architectures. The P-384 bug is in the assembly code and only affects 64
  bit x86. The computation compiles a certain curve point with 1, which
  should not change the coordinates, however it does.

  Impact
  ======

  The impact is currently unclear, but miscalculations in cryptographic
  functions are classified as security issues.
  ```
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: vcsh: 1.20141026-1 -> 1.20151229-1
user_login: PierreR
html_url: https://github.com/NixOS/nixpkgs/pull/18926
updated_at: 2016-09-24 15:10:24
body:
  ###### Motivation for this change

  Version out-of-dated for more than one year. New version haven't been updated for one year.

  So I expect the new version to be better choice.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: owncloud: update minor versions, init 9.1.1
user_login: schneefux
html_url: https://github.com/NixOS/nixpkgs/pull/18927
updated_at: 2016-09-26 00:42:27
body:
  ###### Motivation for this change

  Updated minor Owncloud releases 7 to 9 and added 9.1. Fixes security issues, related to #18856.
  I did not test the output files, I just updated the hashes and confirmed that the build does not fail.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [x] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: Create top-level fonts namespace
user_login: chris-martin
html_url: https://github.com/NixOS/nixpkgs/pull/18928
updated_at: 2016-11-29 01:49:01
body:
  ###### Motivation for this change
  #18855
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: pass: broken in Darwin
user_login: sorpaas
html_url: https://github.com/NixOS/nixpkgs/issues/18929
updated_at: 2016-10-02 16:57:42
body:
  ## Issue description

  The new `pass` dependency `procps` apparently doesn't build on Darwin.

  ```
  Undefined symbols for architecture x86_64:
    "_sched_setscheduler", referenced from:
        _main in test-schedbatch.o
  ld: symbol(s) not found for architecture x86_64
  clang-3.7: error: linker command failed with exit code 1 (use -v to see invocation)
  make[2]: *** [Makefile:429: test-schedbatch] Error 1
  make[2]: Leaving directory '/private/var/folders/9b/v666t1m950qbvs8_jtd1mh680000gn/T/nix-build-procps-3.3.11.drv-0/procps-ng-3.3.11/testsuite'
  make[1]: *** [Makefile:1468: all-recursive] Error 1
  make[1]: Leaving directory '/private/var/folders/9b/v666t1m950qbvs8_jtd1mh680000gn/T/nix-build-procps-3.3.11.drv-0/procps-ng-3.3.11'
  make: *** [Makefile:765: all] Error 2
  builder for ‘/nix/store/97v57jlbmrdvb2qlgjycz29ifbq9rdp7-procps-3.3.11.drv’ failed with exit code 2
  cannot build derivation ‘/nix/store/fkr1gy9wlv6gfckpraln61bmagwibphr-password-store-1.6.5.drv’: 1 dependencies couldn't be built
  ```
  ### Steps to reproduce

  `nix-env -iA pkgs.pass`
  ## Technical details
  - System: Mac OS X 10.11.6
  - Nix version: nix-env (Nix) 1.11.4
  - Nixpkgs version: 17.03pre91860.124f25b


state: closed
title: mlton: darwin bootstrap fixes
user_login: acowley
html_url: https://github.com/NixOS/nixpkgs/pull/18930
updated_at: 2016-09-26 21:06:41
body:
  ###### Motivation for this change
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [x] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  Allow mlton to compile in a more barren sandbox. The bootstrapping
  binaries for darwin have dynamic linking dependencies outside of the nix
  store. This patch shifts them to point to the appropriate library within
  the nix store.


state: closed
title: libupnp: 1.6.19 -> 1.6.20 for CVE-2016-6255
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18931
updated_at: 2016-09-26 21:27:27
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/695558/
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6255
  https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: haskellPackages.hasql-transaction: disable failing test suite
user_login: rvl
html_url: https://github.com/NixOS/nixpkgs/pull/18932
updated_at: 2016-09-24 21:01:25
body:
  ###### Motivation for this change

  Trying to build a project with cabal2nix and hasql-transaction is a dependency.
  But the tests wanted to connect to a postgresql server at localhost:5432.
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [X] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: sbcl: 1.3.8 -> 1.3.9
user_login: tohl
html_url: https://github.com/NixOS/nixpkgs/pull/18933
updated_at: 2016-09-26 07:52:57
body:
  ###### Motivation for this change

  update sbcl
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Removing generated Emacs packages
user_login: ttuegel
html_url: https://github.com/NixOS/nixpkgs/issues/18934
updated_at: 2017-05-15 16:05:58
body:
  Due to the significant improvements in package management in Emacs 25.1, I do not think there is any reason to continue maintaining the generated Emacs package sets in Nixpkgs. The combination of
  - `package-archive-priorities`,
  - individual package pinning, and
  - declarative package management with `use-package`

  can take the place of any Emacs+Nixpkgs configuration today. I think it is only sensible to keep around packages that have Nixpkgs-specific patches or that need to integrate with other packages.

  I intend to remove the generated packages from master 14 days from today, on 8 October 2016. If anyone cannot live without them and would like to take over maintaining them, I'm happy to do that instead. Of course, this would not affect any stable branch or any package that isn't generated by emacs2nix.

  Attn. @chaoflow @lovek323 @peti @the-kenny @jwiegley (Emacs maintainers)
  Attn. @oxij (melpa2nix)


state: closed
title: radicale: break into own package
user_login: rycee
html_url: https://github.com/NixOS/nixpkgs/pull/18935
updated_at: 2016-09-26 20:14:42
body:
  ###### Motivation for this change

  Since Radicale is a piece of server software it makes sense for it to reside in the servers hierarchy of Nixpkgs. This PR pulls out the Radicale expression from `perlPackages` to its own package definition.
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: jq: fix cve-2015-8863
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/18936
updated_at: 2016-09-25 06:16:43
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/686291/
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: openshift: 1.0.1 -> 1.3.0
user_login: bachp
html_url: https://github.com/NixOS/nixpkgs/pull/18937
updated_at: 2016-09-24 23:57:36
body:
  ###### Motivation for this change

  The current openshift package was broken and outdated.
  This package contains both the client `oc` and the server `openshift`.
  The client is usable and tested.
  The server part runs but I didn't setup a cluster with it so I'm not sure everything works.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: ipxe: 20141124 -> 20160831
user_login: bachp
html_url: https://github.com/NixOS/nixpkgs/pull/18938
updated_at: 2016-09-25 02:35:46
body:
  ###### Motivation for this change

  The ipxe version was almost 2 years old and it didn't support HTTPS, so booting some images from netboot.xyz was not possible.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Slow boot after "openssl: 1.0.1t -> 1.0.1u, 1.0.2h -> 1.0.2i, 1.1.0 -> 1.1.0a"
user_login: bjornfor
html_url: https://github.com/NixOS/nixpkgs/issues/18939
updated_at: 2016-09-29 16:30:17
body:
  ## Issue description

  Since the most recent openssl upgrade, "openssl: 1.0.1t -> 1.0.1u, 1.0.2h -> 1.0.2i, 1.1.0 -> 1.1.0a", (on release-16.09: f155746efdbea659e4916a6fbecaa02b6eba8e56, but in reality 2a67ff421ac343be7638f84a2441d2709c4ad136 as ``pythonPackages.cryptography` doesn't build at the commit that does the upgrade), NixOS boot really slowed down between the "after exiting GRUB menu" and "actually having loaded the kernel" (AFAICT).

  The first text seen on the display after exiting the GRUB boot menu is:

  ```
  early console in decompress_kernel
  input_data: 0x0000....
  input_len: 0x0000...
  output: 0x0000...
  output_len: 0x0000...
  run_size: 0x0000...
  KASLR disabled by default...
  ```

  With a pre openssl upgrade boot, this text appears instantly. However, _after_ the upgrade, I can see the addresses being printed one character at a time, overall quite slow. In total, I think the extra wait is about 20 seconds.

  See the following videos comparison of boot time:

  Normal boot: https://bforsman.name/nextcloud/index.php/s/ObtD4pJd60hOtO4
  Slow boot (after openssl upgrade): https://bforsman.name/nextcloud/index.php/s/RvmW2ybMJVA7kZm

  Why does this happen? Can we do anything about it? Is it just my hardware?
  ### Steps to reproduce

  Build NixOS 16.09 from 3faa03f87fb9b82b0b5b8b93d5c009a81130d535 as a reference (pre openssl upgrade / normal boot speed). Then build 2a67ff421ac343be7638f84a2441d2709c4ad136 and watch how slow the boot is between exiting the GRUB menu and seeing the `<<< NixOS Stage 1 >>>` header.


state: closed
title: stack_1_2_0 fails to build on OSX
user_login: ElvishJerricco
html_url: https://github.com/NixOS/nixpkgs/issues/18942
updated_at: 2016-10-20 11:34:23
body:
  ## Issue description

  Trying to build `stack v1.2.0` from `nixpkgs/master` results in the following error.

  ```
  Building stack-1.2.0...
  Preprocessing library stack-1.2.0...
  [ 1 of 96] Compiling Text.PrettyPrint.Leijen.Extended ( src/Text/PrettyPrint/Leijen/Extended.hs, dist/build/Text/PrettyPrint/Leijen/Extended.o )
  [ 2 of 96] Compiling Stack.Ghci.Script ( src/Stack/Ghci/Script.hs, dist/build/Stack/Ghci/Script.o )
  [ 3 of 96] Compiling Stack.FileWatch  ( src/Stack/FileWatch.hs, dist/build/Stack/FileWatch.o )
  [ 4 of 96] Compiling System.Process.PagerEditor ( src/System/Process/PagerEditor.hs, dist/build/System/Process/PagerEditor.o )
  [ 5 of 96] Compiling System.Process.Log ( src/System/Process/Log.hs, dist/build/System/Process/Log.o )
  [ 6 of 96] Compiling Paths_stack      ( dist/build/autogen/Paths_stack.hs, dist/build/Paths_stack.o )
  [ 7 of 96] Compiling Path.Find        ( src/Path/Find.hs, dist/build/Path/Find.o )
  [ 8 of 96] Compiling Path.Extra       ( src/Path/Extra.hs, dist/build/Path/Extra.o )
  [ 9 of 96] Compiling System.Process.Read ( src/System/Process/Read.hs, dist/build/System/Process/Read.o )
  [10 of 96] Compiling System.Process.Run ( src/System/Process/Run.hs, dist/build/System/Process/Run.o )
  [11 of 96] Compiling Options.Applicative.Complicated ( src/Options/Applicative/Complicated.hs, dist/build/Options/Applicative/Complicated.o )

  src/Options/Applicative/Complicated.hs:145:31: error:
      • Couldn't match expected type ‘(t, t1, t2)’
                    with actual type ‘([String], String -> Maybe (ParserInfo a))’
      • In the expression: mkCommand m
        In a pattern binding: (groupName, cmds, subs) = mkCommand m
        In an equation for ‘hsubparser'’:
            hsubparser' m
              = mkParser d g rdr
              where
                  Mod _ d g = metavar "COMMAND|FILE" `mappend` m
                  (groupName, cmds, subs) = mkCommand m
                  rdr = CmdReader groupName cmds (fmap add_helper . subs)
                  add_helper pinfo
                    = pinfo {infoParser = infoParser pinfo <**> helpOption}
      • Relevant bindings include
          groupName :: t
            (bound at src/Options/Applicative/Complicated.hs:145:6)
          cmds :: t1 (bound at src/Options/Applicative/Complicated.hs:145:17)
          subs :: t2 (bound at src/Options/Applicative/Complicated.hs:145:23)
          m :: Mod CommandFields a
            (bound at src/Options/Applicative/Complicated.hs:142:13)
          hsubparser' :: Mod CommandFields a -> Parser a
            (bound at src/Options/Applicative/Complicated.hs:142:1)

  src/Options/Applicative/Complicated.hs:146:11: error:
      • Couldn't match expected type ‘(a1 -> f0 (ParserInfo a2)) -> t’
                    with actual type ‘OptReader a0’
      • The function ‘CmdReader’ is applied to three arguments,
        but its type ‘[String]
                      -> (String -> Maybe (ParserInfo a0)) -> OptReader a0’
        has only two
        In the expression:
          CmdReader groupName cmds (fmap add_helper . subs)
        In an equation for ‘rdr’:
            rdr = CmdReader groupName cmds (fmap add_helper . subs)
      • Relevant bindings include
          rdr :: t (bound at src/Options/Applicative/Complicated.hs:146:5)
  builder for ‘/nix/store/vc08sacfgc4nrpcbgdpg5rawdiq28ib6-stack-1.2.0.drv’ failed with exit code 1
  error: build of ‘/nix/store/vc08sacfgc4nrpcbgdpg5rawdiq28ib6-stack-1.2.0.drv’ failed
  ```
  ### Steps to reproduce

  ``` bash
  $ git clone https://github.com/nixos/nixpkgs
  $ cd nixpkgs
  $ nix-env -f . -iA haskellPackages.stack_1_2_0
  ```
  ## Technical details
  - System: OS X 10.11.6 (darwin-15.6.0)
  - Nix version: nix-env (Nix) 1.11.3
  - Nixpkgs version: commit: 912e26b


state: closed
title: busybox: 1.23.2 -> 1.24.2
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/18943
updated_at: 2016-09-27 12:21:37
body:
  ###### Motivation for this change

  fixes https://lwn.net/Vulnerabilities/696815/
  related to https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: eog: 3.20.3 -> 3.20.4
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/18944
updated_at: 2016-09-25 08:39:42
body:
  ###### Motivation for this change

  previously version number did not match with source
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: python35Packages.breathe fails to build
user_login: siddharthist
html_url: https://github.com/NixOS/nixpkgs/issues/18945
updated_at: 2016-09-25 21:24:29
body:
  ## Issue description

  I get a traceback when installing `python35Packages.breathe`:

  ```
  creating /tmp/nix-build-python3.5-breathe-4.2.0.drv-0/breathe-4.2.0/build/lib/breathe.egg-info
  writing entry points to /tmp/nix-build-python3.5-breathe-4.2.0.drv-0/breathe-4.2.0/build/lib/breathe.egg-info/entry_points.txt
  writing top-level names to /tmp/nix-build-python3.5-breathe-4.2.0.drv-0/breathe-4.2.0/build/lib/breathe.egg-info/top_level.txt
  writing dependency_links to /tmp/nix-build-python3.5-breathe-4.2.0.drv-0/breathe-4.2.0/build/lib/breathe.egg-info/dependency_links.txt
  writing requirements to /tmp/nix-build-python3.5-breathe-4.2.0.drv-0/breathe-4.2.0/build/lib/breathe.egg-info/requires.txt
  writing /tmp/nix-build-python3.5-breathe-4.2.0.drv-0/breathe-4.2.0/build/lib/breathe.egg-info/PKG-INFO
  writing manifest file '/tmp/nix-build-python3.5-breathe-4.2.0.drv-0/breathe-4.2.0/build/lib/breathe.egg-info/SOURCES.txt'
  reading manifest file '/tmp/nix-build-python3.5-breathe-4.2.0.drv-0/breathe-4.2.0/build/lib/breathe.egg-info/SOURCES.txt'
  writing manifest file '/tmp/nix-build-python3.5-breathe-4.2.0.drv-0/breathe-4.2.0/build/lib/breathe.egg-info/SOURCES.txt'
  running build_ext
  Traceback (most recent call last):
    File "nix_run_setup.py", line 8, in <module>
      exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace('\\r\\n', '\\n'), __file__, 'exec'))
    File "setup.py", line 79, in <module>
      use_2to3=True,
    File "/nix/store/52racbzwanwjdy256i0vjy2w1q0cr9lh-python3-3.5.2/lib/python3.5/distutils/core.py", line 148, in setup
      dist.run_commands()
    File "/nix/store/52racbzwanwjdy256i0vjy2w1q0cr9lh-python3-3.5.2/lib/python3.5/distutils/dist.py", line 955, in run_commands
      self.run_command(cmd)
    File "/nix/store/52racbzwanwjdy256i0vjy2w1q0cr9lh-python3-3.5.2/lib/python3.5/distutils/dist.py", line 974, in run_command
      cmd_obj.run()
    File "/nix/store/71cymngy86w0ml5ywj8vkbirlvwxai2d-python-3.5.2-bootstrapped-pip-8.1.2/lib/python3.5/site-packages/setuptools/command/test.py", line 172, in run
      self.run_tests()
    File "/nix/store/71cymngy86w0ml5ywj8vkbirlvwxai2d-python-3.5.2-bootstrapped-pip-8.1.2/lib/python3.5/site-packages/setuptools/command/test.py", line 179, in run_tests
      module = self.test_suite.split('.')[0]
  AttributeError: 'NoneType' object has no attribute 'split'
  builder for ‘/nix/store/np00d5xhazvma9ikpbmm6zh3afdf5bm0-python3.5-breathe-4.2.0.drv’ failed with exit code 1
  error: build of ‘/nix/store/np00d5xhazvma9ikpbmm6zh3afdf5bm0-python3.5-breathe-4.2.0.drv’ failed
  ```

  The issue is not present with `python27Packages.breathe`. 
  ### Steps to reproduce

  ```
  nix-env -f '<nixpkgs>' -iA python35Packages.breathe
  ```
  ## Technical details
  - System: 17.03.git.da514a2 (Gorilla)
  - Nix version: nix-env (Nix) 1.11.4
  - Nixpkgs version: 17.03.git.da514a2M


state: closed
title: $PATH is incorrect when running fish in a nix-shell
user_login: yacinehmito
html_url: https://github.com/NixOS/nixpkgs/issues/18946
updated_at: 2018-09-06 18:45:55
body:
  ## Issue description

  When starting a fish shell after dropping in a nix-shell, the `PATH` environment variable is improperly set. This makes fish unusable for my use case with nix-shell.
  ### Steps to reproduce

  Say I have the following `default.nix` file in directory :

  ``` nix
  with import <nixpkgs> {};
  stdenv.mkDerivation {
    name = "whatever";
    buildInputs = [
      whatever-dependency
    ];
  }
  ```

  In the same directory, if I do `nix-shell`, I drop into a bash shell where the bin path of `whatever-dependency` is added to the `PATH` environment variable (if applicable).
  However, if I start a fish shell from this bash instance, the `PATH` variable reverts to its default value.
  The problem is the same when doing directly `nix-shell --run fish` or `nix-shell --command fish`. This doesn't cause any issue with zsh.

  In the fish instance, other environment variables are properly updated. The `IN_NIX_SHELL` variable is indeed set to 1 and if you add some `shellPrompt` code in the derivation, you do inherit the proper environment. The `PATH` variable seems to be the only one affected.

  I suspect that somewhere in `fish-foreign-env` we recreate the `PATH` from scratch instead of using the value of the parent shell. I might be mistaken ; I just tried fish on NixOS today and don't know much.
  ## Technical details
  - System: 17.03.git.2b0eace (Gorilla)
  - Nix version: nix-env (Nix) 1.11.4
  - Nixpkgs version: "17.03.git.2b0eace"


state: closed
title: exa: lock down zoneinfo-compiled dependency
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/18947
updated_at: 2016-09-25 09:40:23
body:
  ###### Motivation for this change
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS) <- this breaks! see comment 
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: Fix building mumble without ice.
user_login: kevincox
html_url: https://github.com/NixOS/nixpkgs/pull/18948
updated_at: 2016-09-26 11:39:11
body:
  ###### Motivation for this change

  To allow building mumble without ICE support.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [x] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: openjpeg: 2.1.0 -> 2.1.1 for critical bugfixes and no ABI break
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18949
updated_at: 2016-09-26 11:23:40
body:
  ###### Motivation for this change

  See:

  https://github.com/uclouvain/openjpeg/blob/master/CHANGELOG.md
  https://lwn.net/Vulnerabilities/700384/
  https://lwn.net/Vulnerabilities/694625/
  https://lwn.net/Vulnerabilities/659043/
  https://github.com/NixOS/nixpkgs/issues/18856

  Also openjpeg moved to github. Since the build is so heavily parameterized, I updated all the builds to use github.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: lcms2: 2.7 -> 2.8
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/18950
updated_at: 2016-09-26 11:44:28
body:
  ###### Motivation for this change

  will cause rebuilds...
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: lcms: fix cve-2013-4276
user_login: Mic92
html_url: https://github.com/NixOS/nixpkgs/pull/18951
updated_at: 2016-09-26 12:11:15
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/561443/
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: Reorganize gnome package set
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/issues/18952
updated_at: 2017-12-14 14:11:03
body:
  ## Issue description

  We have packages that are part of the gnome package-set spread out over `nixpkgs`.
  For example:
  - clutter
  - gcab
  - glib
  - gtk
  - networkmanager
  - vala

  Imo these should be part of the gnome package set and only have top-level aliases.
  This would make the gnome set consistent with upstream and also make updating easier. Currently the maintainers script only picks up the stuff that is actually inside `pkgs/desktops/gnome-3/` and is limited to packages that follow the gnome release cycle versioning.
  If we stick to the gnome package layout for all packages we can check the `cache.json` for the relevant gnome version und pick up all version changes from [there](http://ftp.acc.umu.se/pub/GNOME/core/3.22/3.22.0/cache.json) 

  Just take a look at clutter and vala for examples of the problems this introduces into nixpkgs. 
  There are old unused derivations and the current versions use overrides to pick up correct dependencies.
  I'm working on cleaning up some of the cruft at the moment, but in the future I think this change will facilitate stuff greatly.

  Most if not all of these packages should probably be moved:

  ```
  ag --ignore 'gnome-*' mirror...gnome pkgs
  95
  ```

  CC
  gnome maintainers @DamienCassou @lethalman 
  glib maintainers @lovek323 raskin urkud
  gtk+ maintainers urkud raskin @vcunat @lethalman 
  vala maintainers @antono @lethalman 


state: closed
title: Update qemu (build without stack protection)
user_login: NeQuissimus
html_url: https://github.com/NixOS/nixpkgs/issues/18954
updated_at: 2016-09-27 12:22:11
body:
  ## Issue description

  As part of #18856, we will need to update qemu.
  qemu 2.7.0 cannot be built with stack protection (see https://mail-index.netbsd.org/pkgsrc-bugs/2016/09/16/msg060363.html)

  I do not know how to build without or how to circumvent this, so help would be appreciated :)
  ### Steps to reproduce
  - Change the `qemu/default.nix` to use 2.7.0, remove custom patches (they seem to all be included in 2.7.0 except for our `no-etc-install`, leave that in).
  - `nix-build -A qemu`

  Output ends with

  ```
    Building optionrom/linuxboot.img
    CC    qga/guest-agent-command-state.o
    Building optionrom/linuxboot_dma.img
  linuxboot_dma.o: In function `bios_cfg_read_entry':
  /tmp/nix-build-qemu-2.7.0.drv-0/qemu-2.7.0/pc-bios/optionrom/linuxboot_dma.c:181: undefined reference to `__stack_chk_fail_local'
  linuxboot_dma.o: In function `load_kernel':
  /tmp/nix-build-qemu-2.7.0.drv-0/qemu-2.7.0/pc-bios/optionrom/linuxboot_dma.c:298: undefined reference to `__stack_chk_fail_local'
  make[1]: *** [Makefile:49: linuxboot_dma.img] Error 1
  make: *** [Makefile:230: romsubdir-optionrom] Error 2
  make: *** Waiting for unfinished jobs....
  builder for ‘/nix/store/7d05cqywpk0h4bk5wyfv3325064dccaw-qemu-2.7.0.drv’ failed with exit code 2
  error: build of ‘/nix/store/7d05cqywpk0h4bk5wyfv3325064dccaw-qemu-2.7.0.drv’ failed
  ```
  ## Technical details
  - System: 17.03.git.455772e (Gorilla)
  - Nix version: nix-env (Nix) 1.11.4
  - Nixpkgs version: "16.09beta335.7617e7e"


state: closed
title: clutter*, cogl: remove unused versions
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18955
updated_at: 2016-09-25 16:36:09
body:
  ###### Motivation for this change

  This switches to the new versions as default and removes the (now) unused old versions to clean up the clutter (how fitting :laughing:)
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

   #18952 should have helped avoiding this....
  If you look at the changes, you'll see that I inherit from and to `all-packages` and `gnome3` in both directions which would be avoided by reorganizing..

  I'll look into cleaning the remaining stuff (clutter, cogl, eventually vala) when I find time.

  Note that I did not really change the `default.nix` files but rather did overwrite it with the newest version 

  CC @lethalman 


state: closed
title: collectd: patch deprecated usage of readdir_r()
user_login: MostAwesomeDude
html_url: https://github.com/NixOS/nixpkgs/pull/18956
updated_at: 2016-09-25 17:52:55
body:
  ###### Motivation for this change

  On a nixpkgs pulled yesterday, usage of `readdir_r()` in collectd was considered a compiler error, due to a combination of -Werror and the recent deprecation of `readdir_r()`.

  This patch refactors the call site to use `readdir()`.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  I have _not_ sent this patch upstream yet.


state: closed
title: vala_0_26: remove
user_login: groxxda
html_url: https://github.com/NixOS/nixpkgs/pull/18957
updated_at: 2016-09-25 18:31:28
body:
  ###### Motivation for this change

  get rid of old vala version
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  **imho it's very advisable to use all gnome packages from the same package set to ensure they are compatible and avoid depending on two different builds of the same package**

  when vanubi is updated to compile with a current vala, https://github.com/NixOS/nixpkgs/commit/c82b9738fbc747d55445b369177042f21918b472 should be reverted.

  @lethalman for vanubi


state: closed
title: pythonPackages.jsbeautifier: init at 1.6.4.0
user_login: apeyroux
html_url: https://github.com/NixOS/nixpkgs/pull/18958
updated_at: 2016-10-02 15:04:10
body:
  ###### Motivation for this change

  This little beautifier will reformat and reindent bookmarklets, ugly JavaScript, unpack scripts packed by Dean Edward’s popular packer, as well as deobfuscate scripts processed by javascriptobfuscator.com.

  https://github.com/beautify-web/js-beautify
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: qemu: 2.6.1 -> 2.7.0 for CVEs
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18959
updated_at: 2016-09-26 14:45:49
body:
  ###### Motivation for this change

  https://github.com/NixOS/nixpkgs/issues/18856
  ### qemu-kvm (4 issues)
  - [x] [`#686857`](https://lwn.net/Vulnerabilities/686857/) ([search](http://search.nix.gsc.io/?q=qemu-kvm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu-kvm+in%3Apath&type=Code))  qemu-kvm: code execution
  - [x] [`#687235`](https://lwn.net/Vulnerabilities/687235/) ([search](http://search.nix.gsc.io/?q=qemu-kvm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu-kvm+in%3Apath&type=Code))  qemu: information leak
  - [x] [`#666755`](https://lwn.net/Vulnerabilities/666755/) ([search](http://search.nix.gsc.io/?q=qemu-kvm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu-kvm+in%3Apath&type=Code))  qemu: three vulnerabilities
  - [x] [`#674496`](https://lwn.net/Vulnerabilities/674496/) ([search](http://search.nix.gsc.io/?q=qemu-kvm&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu-kvm+in%3Apath&type=Code))  qemu: multiple vulnerabilities
  ### qemu (12 issues)
  - [x] [`#700388`](https://lwn.net/Vulnerabilities/700388/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: directory/path traversal
  - [x] [`#692861`](https://lwn.net/Vulnerabilities/692861/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: multiple vulnerabilities
  - [x] [`#695959`](https://lwn.net/Vulnerabilities/695959/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: two vulnerabilities
  - [x] [`#691104`](https://lwn.net/Vulnerabilities/691104/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: denial of service
  - [x] [`#690402`](https://lwn.net/Vulnerabilities/690402/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: denial of service
  - [x] [`#689261`](https://lwn.net/Vulnerabilities/689261/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: two vulnerabilities
  - [x] [`#687235`](https://lwn.net/Vulnerabilities/687235/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: information leak
  - [x] [`#686861`](https://lwn.net/Vulnerabilities/686861/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: denial of service
  - [x] [`#680800`](https://lwn.net/Vulnerabilities/680800/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  xen: multiple denial of service vulnerabilities
  - [x] [`#666755`](https://lwn.net/Vulnerabilities/666755/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: three vulnerabilities
  - [x] [`#674609`](https://lwn.net/Vulnerabilities/674609/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: privilege escalation
  - [x] [`#674496`](https://lwn.net/Vulnerabilities/674496/) ([search](http://search.nix.gsc.io/?q=qemu&i=fosho&repos=nixos-nixpkgs), [files](https://github.com/NixOS/nixpkgs/search?utf8=%E2%9C%93&q=qemu+in%3Apath&type=Code))  qemu: multiple vulnerabilities
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [ ] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  Thanks to @NeQuissimus and @joachifm on this.


state: closed
title: Allow configuration of events{} block in nginx module
user_login: wlhlm
html_url: https://github.com/NixOS/nixpkgs/pull/18961
updated_at: 2016-09-26 12:41:55
body:
  Remove empty `events{}` block generation from nginx module.
  ###### Motivation for this change

  Always having an empty `events{}` block in the generated nginx configuration prevents the admin from setting a custom `events{}` configuration from `services.nginx.config`, since nginx only allows one block of this type and fails with:

  ```
  nginx: [emerg] "events" directive is duplicate in /nix/store/p7njvyi9i1crp7dl6wrnvi33yvm6fism-nginx.conf:13
  nginx.service: Main process exited, code=exited, status=1/FAILURE
  ```

  See https://github.com/NixOS/nixpkgs/commit/3cf5d5ebed8c7c20f0da1ec3bc66388f1886b8ec#commitcomment-19065789 for more info.

  I'm unaware of the reason of why this change was made in the first place. The original commit message does not contain any additional information and I have not found any problem in my testing after reverting the commit in question.
  ###### Things done
  - [x] Tested using `nixos-rebuild test`
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: systemd-networkd: Generated network configuration breaks resolved DBus API
user_login: tadfisher
html_url: https://github.com/NixOS/nixpkgs/issues/18962
updated_at: 2019-05-27 19:27:45
body:
  ## Issue description

  [`network-interfaces-systemd.nix`](https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/tasks/network-interfaces-systemd.nix) generates `/etc/systemd/network/99-main.network` which matches all network interfaces, in order to enforce the `networking.useDHCP` option. This has the effect of forcing all network interfaces to be "managed" by systemd-networkd.

  Upstream does not allow managed interfaces to be configured via the [`org.freedesktop.resolve1`](https://www.freedesktop.org/wiki/Software/systemd/resolved/) DBus API, as the following transcript demonstrates:

  ```
  $ busctl call org.freedesktop.resolve1 \
  > /org/freedesktop/resolve1 org.freedesktop.resolve1.Manager \
  > SetLinkDNS 'ia(iay)' 3 2 2 4 209 222 18 222 2 4 209 222 18 218
  Link tun0 is managed.

  $ dbus-send --print-reply --system --type=method_call --dest=org.freedesktop.resolve1 /org/freedesktop/resolve1/li
  nk/_33 org.freedesktop.DBus.Properties.GetAll string:''
  method return time=1474790774.718633 sender=:1.0 -> destination=:1.5 serial=6 reply_serial=2
     array [
        dict entry(
           string "ScopesMask"
           variant             uint64 0
        )
        dict entry(
           string "DNS"
           variant             array [
              ]
        )
  # -- snip --

  $ cat /run/systemd/netif/links/3
  # This is private data. Do not parse.
  ADMIN_STATE=configured
  OPER_STATE=routable
  NETWORK_FILE=/nix/store/dcn980w7p3vwg0jyhfvkbaczdl6kcf2i-network-units/99-main.network
  DNS=
  NTP=
  DOMAINS=
  ROUTE_DOMAINS=
  LLMNR=yes
  MDNS=no
  ADDRESSES=
  ROUTES=

  $ cat /etc/systemd/network/99-main.network
  [Match]

  [Network]
  DHCP=none
  ```

  Note that the primary motivation for using the `resolved` DBus API is to manage per-interface DNS, which I do not believe is possible via `openresolv`. Invoking this API is a clean way to prevent DNS leaks over `tun0` when connecting to an OpenVPN server, for example. In this example, `tun0` is not configured via `networking.interfaces."tun0"` and an explicitly-matching `.network` configuration does not exist.

  I've been able to work around this problem with the following in `configuration.nix`:

  ```
  # Prevent networkd from managing unconfigured links.                                                    
  systemd.network.networks."99-main".enable = false;
  ```

  A solution that seems reasonable to me would be to treat `networking.useDHCP = null;` differently from `true` or `false`, and refrain from generating a default `.network` configuration which matches all interfaces. However, this changes the semantics of that option when `networking.useNetworkd` is enabled.
  ### Steps to reproduce

  This can be demonstrated with the following configuration:

  ```
  networking.useNetworkd = true;
  services.resolved.enable = true;
  ```

  Then using `busctl` as shown above to attempt setting per-interface DNS or DOMAIN options on any interface which is _not_ configured via `networking.interfaces.<name>`.
  ## Technical details
  - System: 16.09beta430.c4469ed (Flounder)
  - Nix version: nix-env (Nix) 1.11.4
  - Nixpkgs version: "16.09beta430.c4469ed"


state: closed
title: Add xdxf2slob tool and dependencies
user_login: rycee
html_url: https://github.com/NixOS/nixpkgs/pull/18963
updated_at: 2016-09-29 07:09:44
body:
  ###### Motivation for this change

  To add the xdxf2slob tool which is used to convert dictionaries in the XDXF format to the SLOB format used by, e.g., the Aard Android dictionary app.

  To add the tool I also had to package two Python libraries, called `PyICU` and `slob`.
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [X] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: buku: 1.9 -> 2.4
user_login: guaraqe
html_url: https://github.com/NixOS/nixpkgs/pull/18964
updated_at: 2016-09-26 11:20:24
body:
  Updated buku from 1.9 to 2.4.

  There is no option for cryptography anymore, so it was removed.

  Tested it with in NixOS with nixpkgs-unstable, it builds and works as expected.


state: closed
title: webkitgtk: 2.12.4 -> 2.12.5
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18965
updated_at: 2016-09-26 14:45:18
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/700654/
  https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: file-roller: 3.20.2 -> 3.20.3
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18966
updated_at: 2016-09-26 11:24:51
body:
  ###### Motivation for this change

  https://github.com/NixOS/nixpkgs/issues/18856
  https://lwn.net/Vulnerabilities/700116/
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: mplayer: 1.1.1 -> 1.3.0
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18967
updated_at: 2016-09-26 12:19:19
body:
  ###### Motivation for this change

  https://lwn.net/Alerts/686424/
  https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [ ] NixOS
    - [ ] OS X
    - [ ] Linux
  - [x] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: libdwarf: 20121130 -> 20160613
user_login: grahamc
html_url: https://github.com/NixOS/nixpkgs/pull/18968
updated_at: 2016-09-26 13:59:24
body:
  ###### Motivation for this change

  https://lwn.net/Vulnerabilities/692849/
  https://github.com/NixOS/nixpkgs/issues/18856
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: libxml++: add 3.0.0
user_login: loskutov
html_url: https://github.com/NixOS/nixpkgs/pull/18969
updated_at: 2016-09-27 10:01:44
body:
  ###### Motivation for this change

  Version 3.0.0 of libxml++ has released and it's not yet available in nixpkgs. As it's a major release and it doesn't provide backwards compatibility with 2.\* releases, it's submitted as a new derivation.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: nix shell fails on borgbackup checkout - impure compile target?
user_login: RonnyPfannschmidt
html_url: https://github.com/NixOS/nixpkgs/issues/18970
updated_at: 2018-06-24 14:31:43
body:
  ## Issue description

  trying to run nix-shell on a birgbackup checkout
  ### Steps to reproduce

  `git clone  https://github.com/borgbackup/borg`

  ```
  {pkgs ? (import <nixpkgs> {})}:
  pkgs.borgbackup.overrideDerivation (old: {
    src=./.;
    BORG_OPENSSL_PREFIX = pkgs.buildEnv {
      name="openssl_libs";
      paths = [ pkgs.openssl.dev pkgs.openssl.out];
    };
    BORG_LZ4_PREFIX = pkgs.lz4.out;
  })
  ```

  errors with 

  ```
  Installing collected packages: borgbackup
    Running setup.py develop for borgbackup
      Complete output from command /nix/store/9812j39fwlgaxyzqwavjs0gv0zjhr0dx-python3-3.4.5/bin/python3.4m -c "import setuptools, tokenize;__file__='/home/ronny/Projects/personal/borg/setup.py';exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" develop --no-deps --prefix=/run/user/1000/tmp.XnN4gdnDO4:
      running develop
      running egg_info
      writing entry points to src/borgbackup.egg-info/entry_points.txt
      writing dependency_links to src/borgbackup.egg-info/dependency_links.txt
      writing top-level names to src/borgbackup.egg-info/top_level.txt
      writing src/borgbackup.egg-info/PKG-INFO
      writing requirements to src/borgbackup.egg-info/requires.txt
      warning: manifest_maker: standard file '-c' not found

      reading manifest template 'MANIFEST.in'
      warning: no previously-included files matching '*.pyc' found under directory 'src'
      warning: no previously-included files matching '*.pyo' found under directory 'src'
      warning: no previously-included files matching '*.pyc' found under directory 'docs'
      warning: no previously-included files matching '*.pyo' found under directory 'docs'
      no previously-included directories found matching 'docs/_build'
      writing manifest file 'src/borgbackup.egg-info/SOURCES.txt'
      running build_ext
      cythoning src/borg/compress.pyx to src/borg/compress.c
      building 'borg.compress' extension
      creating build
      creating build/temp.linux-x86_64-3.4
      creating build/temp.linux-x86_64-3.4/src
      creating build/temp.linux-x86_64-3.4/src/borg
      gcc -Wno-unused-result -DNDEBUG -g -fwrapv -O3 -Wall -Wstrict-prototypes -fPIC -I/nix/store/p70k0bhgb2h931wxb7jwgwjq8bzb27zf-openssl_libs/include -I/nix/store/y0wkcyxn9755p0bg9y8jn7hkxqzjx6nn-lz4-131/include -I/nix/store/9812j39fwlgaxyzqwavjs0gv0zjhr0dx-python3-3.4.5/include/python3.4m -c src/borg/compress.c -o build/temp.linux-x86_64-3.4/src/borg/compress.o
      gcc -pthread -shared -L/nix/store/wz7l2zqdsa78jxnzkigv5gy2c7hxnbxh-zlib-1.2.8/lib -L/nix/store/2rhp2bz6k3p1v5iia6myjlfzakignkky-bzip2-1.0.6.0.1/lib -L/nix/store/8jwqlpyxp5c2rl5g7yspdfbh58dsciwx-xz-5.2.2/lib -L/nix/store/lyn7xmn6f38ibhj2gf2hps9radks5sga-gdbm-1.12/lib -L/nix/store/vx2yggfjq5q6z64c4id6g3752042i054-sqlite-3.14.1/lib -L/nix/store/jxsilpm7abvmnc7s9rxxgjmp48wfcs64-db-5.3.28/lib -L/nix/store/c76krjqn24wcl4imsqcncym3amhr2sq2-readline-6.3p08/lib -L/nix/store/vikidvif1v7g7indxmbqyjdzq3q068nd-ncurses-6.0/lib -L/nix/store/zqga4hyvx8yc70rqp8nhfvfdgb491241-openssl-1.0.2i/lib -L/nix/store/sng5vpcvz53b7h9ai8aqfxj5gn2yg7ab-tcl-8.6.6/lib -L/nix/store/sx4phl176sv5g336l0s452d5sdndl7vq-tk-8.6.6/lib -L/nix/store/xgy1x7dd4z7r7iy3xmb5jlvwyyg5n6z4-libX11-1.6.3/lib -L/nix/store/45mj2a8ss0kjpfjl8whrj97n1hhs00gh-xproto-7.0.29/lib build/temp.linux-x86_64-3.4/src/borg/compress.o -L/nix/store/p70k0bhgb2h931wxb7jwgwjq8bzb27zf-openssl_libs/lib -L/nix/store/y0wkcyxn9755p0bg9y8jn7hkxqzjx6nn-lz4-131/lib -L/nix/store/9812j39fwlgaxyzqwavjs0gv0zjhr0dx-python3-3.4.5/lib -llz4 -lpython3.4m -o /home/ronny/Projects/personal/borg/src/borg/compress.cpython-34m.so
      impure path `/home/ronny/Projects/personal/borg/src/borg/compress.cpython-34m.so' used in link
      collect2: Fehler: ld gab 1 als Ende-Status zurück
      error: command 'gcc' failed with exit status 1

      ----------------------------------------
  Command "/nix/store/9812j39fwlgaxyzqwavjs0gv0zjhr0dx-python3-3.4.5/bin/python3.4m -c "import setuptools, tokenize;__file__='/home/ronny/Projects/personal/borg/setup.py';exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" develop --no-deps --prefix=/run/user/1000/tmp.XnN4gdnDO4" failed with error code 1 in /home/ronny/Projects/personal/borg/
  ```
  ## Technical details

  ```
  $ nix-env --version
  nix-env (Nix) 1.11.4
  $ nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion
  "16.09beta430.c4469ed"
  ```


state: closed
title: chibi-scheme: 0.7 -> 0.7.3
user_login: 8573
html_url: https://github.com/NixOS/nixpkgs/pull/18971
updated_at: 2016-09-26 21:23:42
body:
  Update the `chibi-scheme` (attribute `chibi`) package from version 0.7
  to version 0.7.3.

  The homepage listed for this package before this change,
  https://code.google.com/p/chibi-scheme/, now redirects to
  https://github.com/ashinn/chibi-scheme; this patch changes this
  package to use this GitHub version of the software.

  I have tested this change per nixpkgs manual section 10.1 ("Making
  patches").


state: closed
title: [WIP] nixos-doc: add reviewing contributions chapter
user_login: ericsagnes
html_url: https://github.com/NixOS/nixpkgs/pull/18972
updated_at: 2016-10-01 14:11:12
body:
  ###### Motivation for this change

  Improving reviewing process by making reviewing guidelines.
  This is an attemp to improve situation raised in #17407.

  Work in progress, polishing to come.
  (80 chars linewrap will be made when ready to merge)

  feedback is welcomed!

  At the moment I am especially interested to get feedback regarding if this is a step in the right direction or not.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [ ] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---

  cc @obadz @zimbatm @domenkozar 


state: closed
title: syncthing: use service files from upstream when possible
user_login: peterhoeg
html_url: https://github.com/NixOS/nixpkgs/pull/18973
updated_at: 2017-04-17 08:46:27
body:
  ###### Motivation for this change

  There are the following parts to this PR:

   1) Copy in the upstream unit files
   2) Make the nixos module use the definition from upstream
   3) Enable restarting of all instances (system and user) on resume
   4) Enable the ports required for discovery and transfer in the firewall

  Why? No point repeating ourselves when upstream is shipping perfectly good unit files.

  We are only doing this for the user services as NixOS handles the named system instances slightly differently.

  Apologies for the whitespace noise and the back and forth on this. Should be good now (turns out I had a local service definition that override this).

  Further to: #17320.

  Cc: @rnhmjoj @jokogr
  ###### Things done
  - [X] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [X] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [X] Tested execution of all binary files (usually in `./result/bin/`)
  - [X] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: closed
title: wiki: signup and password reset broken - PHP mail() error
user_login: brainrape
html_url: https://github.com/NixOS/nixpkgs/issues/18974
updated_at: 2016-09-26 11:51:16
body:
  ## Issue description

  Signup and Password Reset are broken on Nix Wiki.
  ### Steps to reproduce
  1. Try to sign up
  2. Get Error:

  > Nix Wiki could not send your confirmation mail. Please check your email address for invalid characters.
  > Mailer returned: Unknown error in PHP's mail() function.

  Account is created and you are logged in but after the validation period expires you are no longer able to log in. Password reset doesn't work because of the same error.


state: closed
title: 2 versions of `avy` in my Emacs load-path
user_login: DamienCassou
html_url: https://github.com/NixOS/nixpkgs/issues/18976
updated_at: 2016-09-26 13:46:34
body:
  ## Issue description

  If Emacs is built with `melpaStablePackages.avy`, the Emacs' load-path contains 2 versions of `avy`:
  - avy-3.0.0 (from https://github.com/NixOS/nixpkgs/blob/master/pkgs/top-level/emacs-packages.nix#L261)
  - avy-4.0.0 (from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/applications/editors/emacs-modes/melpa-stable-generated.nix)

  I don't understand the purpose of `emacs-packages.nix`, but removing the block defining `avy-3.0.0` solves the problem for me.
  ## Technical details
  - System: NixOS: `channels/16.09`

  /cc @ttuegel 


state: closed
title: Rethink httpd subservices
user_login: ericsagnes
html_url: https://github.com/NixOS/nixpkgs/issues/18977
updated_at: 2017-06-03 08:04:58
body:
  ## Issue description

  Apache httpd has a sub-services functionality that can be used to easily setup web applications.

  This is a very handy feature, but that have a few shortcomings that should be addressed:
  - Sub-services are tied to `httpd`, there is no way to use them with a different server.
  - The whole sub-service functionality is not well documented.
  - The sub-service code is slightly complicated and not well maintained.

  Also, sub-services have very few code that is `httpd` specific (mainly `extraConfig`).

  A way to address this problem could be:
  - untie sub-services from `httpd` and move them to `services` (or any other fitting namespace)
  - In case the configuration is non-trivial, server specific configurations could be added as options to the service (`services.mediawiki.httpdConfiguration`)

  Pseudo-code:

  ```
  services.mediawiki = {
    enable = true;
    # other settings...
  };

  services.httpd = {
    enable = true;
    enablePHP = true;
    extraConfig = ''
      # some configuration
      
      # optional, should only be provided if the configuration is non-trivial
      ${config.services.mediawiki.httpdConfig}
    '';
  };
  ```

  This could bring a few advantages:
  - sub-services becomes normal modules and can be used with any server.
  - server configuration is a normal option and can be overriden or not used according to the needs.


state: closed
title: gazebo still generate wrong cmake file
user_login: nico202
html_url: https://github.com/NixOS/nixpkgs/issues/18978
updated_at: 2016-09-27 14:32:33
body:
  ## Issue description

  Package that depends on gazebo fails finding it using cmake. (latest master)
  ## Technical details

  Piece of gazebo cmake file:

  ```
  set(GAZEBO_PLUGIN_PATH "/nix/store/9bavxdfavww2araaa9ykx60lxyvkv88z-gazebo-7.0.0//nix/store/9bavxdfavww2araaa9ykx60lxyvkv88z-gazebo-7.0.0/lib/gazebo-7/plugins")

  # The media path contains the location on disk where images,
  # materials scripts, shaders, and other related resources are stored.
  set(GAZEBO_MEDIA_PATH "/nix/store/9bavxdfavww2araaa9ykx60lxyvkv88z-gazebo-7.0.0/share/gazebo-7/media")

  set(GAZEBO_PLUGIN_PATH "/nix/store/9bavxdfavww2araaa9ykx60lxyvkv88z-gazebo-7.0.0//nix/store/9bavxdfavww2araaa9ykx60lxyvkv88z-gazebo-7.0.0/lib/gazebo-7.0/plugins")

  # The media path contains the location on disk where images,
  # materials scripts, shaders, and other related resources are stored.
  set(GAZEBO_MEDIA_PATH "/nix/store/9bavxdfavww2araaa9ykx60lxyvkv88z-gazebo-7.0.0/share/gazebo-7.0/media")
  ```


state: closed
title: gcsfuse: init at v0.19.0
user_login: MostAwesomeDude
html_url: https://github.com/NixOS/nixpkgs/pull/18980
updated_at: 2016-09-29 14:55:08
body:
  ###### Motivation for this change

  The gcsfuse tool mounts Google Cloud Storage buckets using FUSE. It is not included in the Google Cloud SDK, so it must be packaged separately.
  ###### Things done
  - [ ] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).

  ---


state: open
title: Laptop suspends again incorrectly after opening the lid
user_login: mikael-andersson
html_url: https://github.com/NixOS/nixpkgs/issues/18981
updated_at: 2018-06-24 12:31:16
body:
  ## Issue description

  After my laptop (Lenovo X1 Carbon) has been suspended by closing the lid, opening the lid wakes it up properly but instantly, I get to see the login screen shortly, suspends.

  I got this problem after upgrading from 16.03 to 16.09.

  If I suspend the laptop with 'systemctl suspend' first and then close the lid, opening the lid will wake up the laptop properly.
  ### Steps to reproduce

  Close lid and let it suspend. Open the lid and then laptop wakes up and after a second it will suspend.
  ## Technical details
  - System: (NixOS: `nixos-version`, Ubuntu/Fedora: `lsb_release -a`, ...)
    16.09beta430.c4469ed (Flounder)
  - Nix version: (run `nix-env --version`)
    nix-env (Nix) 1.11.4
  - Nixpkgs version: (run `nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion`)
    "16.09beta430.c4469ed"


state: closed
title: Pin packages to python2 part2
user_login: aneeshusa
html_url: https://github.com/NixOS/nixpkgs/pull/18982
updated_at: 2016-09-26 16:33:27
body:
  ###### Motivation for this change

  More preparation for #18185.
  ###### Things done
  - [x] Tested using sandboxing
    ([nix.useSandbox](http://nixos.org/nixos/manual/options.html#opt-nix.useSandbox) on NixOS,
      or option `build-use-sandbox` in [`nix.conf`](http://nixos.org/nix/manual/#sec-conf-file)
      on non-NixOS)
  - Built on platform(s)
    - [x] NixOS
    - [ ] OS X
    - [ ] Linux
  - [ ] Tested compilation of all pkgs that depend on this change using `nix-shell -p nox --run "nox-review wip"`
  - [x] Tested execution of all binary files (usually in `./result/bin/`)
  - [x] Fits [CONTRIBUTING.md](https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md).


state: closed
title: haskell.packages.ghc7103.cheapskate is broken
user_login: abuibrahim
html_url: https://github.com/NixOS/nixpkgs/issues/18983
updated_at: 2016-09-27 10:06:37
body:
  ## Issue description

  cheapskate is broken on GHC 7.10.3
  ### Steps to reproduce

  ```
  $ nix-build '<nixpkgs>' -A haskell.packages.ghc7103.cheapskate
  these derivations will be built:
    /nix/store/hrni0zn7l9sjgdz06f6i3s9diplirr15-cheapskate-0.1.0.5.drv
  building path(s) _/nix/store/2p78794zsi493c170550zx7qx2ngsmdx-cheapskate-0.1.0.5_
  setupCompilerEnvironmentPhase
  Build with /nix/store/ciz5l5c2v8xwvcp1fgmvlc2rwmw3mz93-ghc-7.10.3.
  unpacking sources
  unpacking source archive /nix/store/8jj1y68d02a15v0w5fizbay0kkyyj8ba-cheapskate-0.1.0.5.tar.gz
  source root is cheapskate-0.1.0.5
  setting SOURCE_DATE_EPOCH to timestamp 1461474791 of file cheapskate-0.1.0.5/Setup.hs
  patching sources
  Replace Cabal file with edited version from http://hackage.haskell.org/package/cheapskate-0.1.0.5/revision/1.cabal.
  compileBuildDriverPhase
  setupCompileFlags: -package-db=/tmp/nix-build-cheapskate-0.1.0.5.drv-0/package.conf.d -j48 -threaded
  [1 of 1] Compiling Main             ( Setup.hs, /tmp/nix-build-cheapskate-0.1.0.5.drv-0/Main.o )
  Linking Setup ...
  configuring
  configureFlags: --verbose --prefix=/nix/store/2p78794zsi493c170550zx7qx2ngsmdx-cheapskate-0.1.0.5 --libdir=$prefix/lib/$compiler --libsubdir=$pkgid --with-gcc=gcc --package-db=/tmp/nix-build-cheapskate-0.1.0.5.drv-0/package.conf.d --ghc-option=-optl=-Wl,-rpath=/nix/store/2p78794zsi493c170550zx7qx2ngsmdx-cheapskate-0.1.0.5/lib/ghc-7.10.3/cheapskate-0.1.0.5 --enable-split-objs --disable-library-profiling --disable-executable-profiling --enable-shared --enable-library-vanilla --enable-executable-dynamic --enable-tests
  Configuring cheapskate-0.1.0.5...
  Setup: At least the following dependencies are missing:
  aeson -any, http-types -any, wai >=0.3, wai-extra -any
  builder for _/nix/store/hrni0zn7l9sjgdz06f6i3s9diplirr15-cheapskate-0.1.0.5.drv_ failed with exit code 1
  error: build of _/nix/store/hrni0zn7l9sjgdz06f6i3s9diplirr15-cheapskate-0.1.0.5.drv_ failed
  ```
  ## Technical details
  - System: (Ubuntu 14.04.5 LTS)
  - Nix version: (1.11.4)
  - Nixpkgs version: (16.09beta430.c4469ed)


