nixpkgs/pkgs
worldofpeace 02ea0d3959 gvfs: fix CVE-2019-1244{7.8.9}
This is a version of #63481 for master.

CVE-2019-12447:
daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is
not used.

CVE-2019-12448:
daemon/gvfsbackendadmin.c has race conditions because the admin backend
doesn't implement query_info_on_read/write.

CVE-2019-12449:
daemon/gvfsbackendadmin.c mishandles a file's user and group ownership
during move (and copy with G_FILE_COPY_ALL_METADATA) operations
from admin:// to file:// URIs, because root privileges are unavailable.

Upstream MR: https://gitlab.gnome.org/GNOME/gvfs/merge_requests/48
2019-06-18 19:48:47 -04:00
..
applications Merge pull request #63455 from r-ryantm/auto-update/vlc 2019-06-18 17:33:07 -04:00
build-support Merge pull request #63349 from seppeljordan/update-nix-prefetch-github 2019-06-18 18:11:58 -04:00
common-updater common-updater-scripts: simplify fetchgit fix 2019-06-02 09:31:51 +02:00
data Merge pull request #63249 from r-ryantm/auto-update/spleen 2019-06-17 20:47:33 -05:00
desktops epiphany: 3.32.2 -> 3.32.3 (#63244) 2019-06-17 00:47:36 +02:00
development gvfs: fix CVE-2019-1244{7.8.9} 2019-06-18 19:48:47 -04:00
games Merge pull request #63263 from r-ryantm/auto-update/gzdoom 2019-06-17 05:52:32 -07:00
misc Merge pull request #63044 from JohnAZoidberg/wine-fonts 2019-06-17 19:39:52 +00:00
os-specific treewide: fixup evaluation of updater scripts 2019-06-18 13:10:23 +02:00
servers Merge pull request #63436 from r-ryantm/auto-update/squid 2019-06-18 19:56:54 +00:00
shells treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
stdenv treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
test treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
tools Merge pull request #63460 from r-ryantm/auto-update/whois 2019-06-18 17:30:55 -04:00
top-level freecad: python3, qt5, occt7 (#63348) 2019-06-18 22:00:23 +02:00