nixpkgs/pkgs/tools/security
Anders Kaseorg 3cd8ce3bce treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH
Naive concatenation of $LD_LIBRARY_PATH can result in an empty
colon-delimited segment; this tells glibc to load libraries from the
current directory, which is definitely wrong, and may be a security
vulnerability if the current directory is untrusted.  (See #67234, for
example.)  Fix this throughout the tree.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-01-15 09:47:03 +01:00
..
2fa treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
acsccid treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
aespipe aespipe: 2.4e -> 2.4f (#70547) 2019-10-09 13:42:10 +02:00
afl afl: 2.52b -> 2.56b 2019-12-30 10:21:19 -06:00
age age: init at v1.0.0-beta2 2019-12-28 16:20:40 +01:00
aide treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
apg apg: Widen meta.platforms from linux to unix 2018-04-05 22:35:09 +09:00
asc-key-to-qr-code-gif zbar: Split to multiple outputs 2019-09-10 01:34:50 +02:00
aws-iam-authenticator aws-iam-authenticator 2018-07-29 -> 0.4.0 2019-05-05 12:14:54 -05:00
aws-okta aws-okta: 0.20.1 -> 0.26.3 (#72761) 2020-01-04 11:06:07 -08:00
b2sum treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
bash-supergenpass treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
bettercap bettercap: 2.24 -> 2.26.1 2019-11-10 13:22:29 +01:00
bitwarden bitwarden: 1.16.4 -> 1.16.6 2019-10-21 09:13:42 +02:00
bitwarden_rs bitwarden_rs-vault: 2.11.0 -> 2.12.0 2019-10-21 09:13:58 +02:00
bmrsa treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
browserpass treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
bruteforce-luks bruteforce-luks: 1.3.2 -> 1.4.0 2019-12-09 07:48:00 +01:00
bundler-audit bundlerUpdateScript: init and use (#64822) 2019-07-22 12:02:47 +00:00
ccid Merge master into staging-next 2019-08-18 12:53:44 +02:00
ccrypt ccrypt: 1.10 -> 1.11 2018-08-08 18:59:31 -07:00
certmgr treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
certstrap treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
cfssl treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
chaps treewide: fetchgit -> fetchFromGitiles 2019-12-02 22:45:06 +00:00
chipsec chipsec: 1.4.0 -> 1.4.1 2019-09-13 14:30:58 +02:00
chkrootkit chkrootkit: 0.52 -> 0.53 2019-03-21 01:21:14 -07:00
chntpw treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
chrome-token-signing treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
cipherscan treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
clamav clamav: 0.102.0 -> 0.102.1 2019-11-25 08:27:30 -08:00
cowpatty treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
crackxls treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
crunch treewide: replace make/build/configure/patchFlags with nix lists 2019-12-30 12:58:11 +01:00
ctmg treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
diceware diceware: pythonPackages -> python3Packages 2020-01-11 17:10:51 -05:00
dirmngr dirmngr: add license 2018-08-05 16:27:34 +02:00
dnsenum treewide: update globin's maintained drvs 2019-08-20 19:36:05 +02:00
dnsrecon treewide: update globin's maintained drvs 2019-08-20 19:36:05 +02:00
doas treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
duo-unix duo-unix: 1.11.2 -> 1.11.3 2019-10-21 08:53:30 -07:00
ecdsautils treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
ecryptfs treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
efitools efitools: fix build with gnu-efi >= 3.0.11 2019-11-16 15:27:38 +01:00
eid-mw treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
enchive enchive: 3.4 -> 3.5 2019-12-08 00:02:16 -08:00
encryptr treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
enpass treewide: Get rid of libGLU_combined 2019-11-18 20:10:43 +00:00
eschalot treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
fail2ban fail2ban: fix work with python3 2020-01-02 12:52:32 +03:00
fcrackzip treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
fido2luks fido2luks: init at 0.2.2 2020-01-11 17:23:00 +01:00
fierce fierce: 1.3.0 -> 1.4.0 2019-11-11 14:14:24 +01:00
fpm2 treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
fprintd Added support for libfprint 1.90 2019-12-01 10:42:16 +01:00
fprot treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
fwknop treewide: fix types for mkDerivation params 2019-12-31 01:23:19 +01:00
gen-oath-safe treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
gencfsm treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
ghidra ghidra: 9.04 -> 9.1 2019-12-07 19:46:14 +01:00
gnome-keysign gnome-keysign: stop requiring lxml 2019-11-27 22:33:24 +01:00
gnu-pw-mgr treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
gnupg gnupg: 2.2.18 -> 2.2.19 2019-12-10 18:56:32 +01:00
gnupg-pkcs11-scd gnupg-pkcs11-scd: add @lschuermann as maintainer 2019-10-28 20:57:49 +00:00
gobuster gobuster: init at 3.0.1 (#75902) 2019-12-20 10:28:15 +01:00
gopass gopass: fix build on darwin (#66244) 2019-08-07 10:33:07 +01:00
gorilla-bin treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
gpgstats treewide: NIX_*_FLAGS -> string 2019-12-31 00:15:46 +01:00
haka haka: restrict to x86 linux platforms 2019-11-16 16:08:22 +01:00
hash-slinger treewide: remove redundant quotes 2019-09-08 23:38:31 +00:00
hash_extender treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
hashcash more idiomatic nix 2019-01-07 21:06:09 -05:00
hashcat hashcat: 5.0.0 -> 5.1.0 2019-05-28 11:51:43 +03:00
hashcat-utils hashcat-utils: init at 1.9 2019-05-27 11:02:56 +00:00
haveged treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
hcxtools hcxtools: 5.2.2 -> 5.3.0 2019-12-23 06:03:24 -08:00
hologram pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
ibm-sw-tpm2 ibm-sw-tpm2: 1332 -> 1563 2020-01-06 10:03:46 -08:00
ifdnfc treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
ipscan ipscan: init at 3.6.2 (#74209) 2019-11-26 00:56:29 +01:00
jd-gui jd-gui: 1.6.5 -> 1.6.6 2020-01-10 04:21:18 +01:00
john Merge pull request #75107 from matthewbauer/disable-native-tests-john 2019-12-06 15:32:04 -05:00
jwt-cli jwt-cli: fix build on Darwin 2020-01-12 15:11:17 +01:00
keybase kbfs: don't use store path for fusermount 2019-12-08 22:52:08 +01:00
keycard-cli keycard-cli: embed version 2019-10-08 17:47:34 +02:00
knockknock
kpcli Merge branch 'master' into staging-next 2019-08-24 08:55:37 +02:00
krunner-pass krunner-pass: fix the build 2019-05-03 15:48:54 +08:00
kwalletcli pinentry: change attributes to dashes, alias old ones 2019-10-16 20:30:58 -04:00
lastpass-cli lastpass-cli: 1.3.2 -> 1.3.3 2019-04-16 10:34:01 +01:00
lesspass-cli lesspass: fix src 2019-09-11 23:16:36 -04:00
libacr38u treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
libmodsecurity treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
logkeys treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
lynis treewide: remove redundant quotes 2019-09-08 23:38:31 +00:00
masscan treewide: remove redundant quotes 2019-09-08 23:38:31 +00:00
mbox treewide: mark some broken packages as broken 2019-10-08 17:14:26 +02:00
meo treewide: replace make/build/configure/patchFlags with nix lists 2019-12-30 12:58:11 +01:00
metasploit Merge pull request #68512 from nspin/pr/stdenv-spelling 2019-09-12 17:04:49 +08:00
mfcuk treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
mfoc mfoc: 0.10.6 -> 0.10.7 2019-04-28 17:32:00 +02:00
minisign treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
mkp224o treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
mkpasswd mkpasswd: fix cross compilation 2018-11-27 17:04:40 +01:00
mkrand treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
mktemp mktemp: update meta data 2018-08-17 23:44:13 +02:00
modsecurity treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
monkeysphere monkeysphere: *Flags are lists 2019-12-30 12:16:17 +01:00
mpw mpw: point upgrade and minor cleanups 2019-03-18 11:56:58 +08:00
munge treewide: remove redundant quotes 2019-09-08 23:38:31 +00:00
nasty treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
neopg treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 2020-01-15 09:47:03 +01:00
nitrokey-app treewide: replace make/build/configure/patchFlags with nix lists 2019-12-30 12:58:11 +01:00
nmap Merge branch 'master' into staging-next 2019-08-25 14:57:11 +02:00
notary treewide: update which packages I'm currently maintaining 2019-12-26 15:27:47 +01:00
nsjail nsjail: 2.8 -> 2.9 2019-09-16 10:04:09 -05:00
nwipe nwipe: 0.25 -> 0.26 2019-09-27 14:29:12 -07:00
oath-toolkit treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
omapd treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
onioncircuits treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
open-ecard pcsclite: split package 2018-06-29 04:40:54 +02:00
opencryptoki treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
opensc opensc: 0.19.0 -> 0.20.0 (#76666) 2019-12-30 19:50:44 -05:00
ossec Treewide: fix URL permanent redirects 2019-11-16 01:41:23 +01:00
p0f treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
pamtester
paperkey treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
pass Disable further pass tests that end up relying on gpg-agent on… (#77634) 2020-01-14 13:54:44 -08:00
passff-host passff-host: fix native messaging manifest path 2019-07-31 07:26:30 -07:00
pbis pbis-open: fix build with gcc9 2019-12-26 16:52:02 +01:00
pcsc-cyberjack treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
pcsc-scm-scl011 treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
pcsclite pcsclite: 1.8.25 -> 1.8.26 2020-01-15 09:41:28 +01:00
pcsctools pcsctools: 1.5.4 -> 1.5.5 2020-01-06 21:35:17 -08:00
pdfcrack pdfcrack: 0.17 -> 0.18 2019-09-27 16:23:25 -07:00
pgpdump treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
phrasendrescher treewide: replace make/build/configure/patchFlags with nix lists 2019-12-30 12:58:11 +01:00
pinentry pinentry: build with multiple outputs in single drv 2019-10-16 20:30:52 -04:00
pius Remove myself (fuuzetsu) from maintainer lists 2019-12-05 16:29:48 +09:00
polkit-gnome treewide: Update meta of packages hosted on gnome 2019-05-13 03:01:25 -04:00
prey treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
proxmark3 proxmark3: refactor & init unstable at 2019-12-28 2020-01-01 20:13:58 +01:00
pwgen
pwgen-secure pwgen-secure: init at 0.9.1 2019-07-31 15:16:18 +08:00
qdigidoc treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
qesteidutil treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
radamsa radamsa: 0.5 -> 0.6 2019-06-04 15:28:15 -05:00
rarcrack treewide: installFlags is a list 2019-12-30 13:22:43 +01:00
rhash rhash: 1.3.8 -> 1.3.9 2019-12-30 16:22:40 +01:00
ripasso ripasso-cursive: unstable-2019-08-27 -> 0.3.0 2019-12-02 13:40:46 +01:00
rng-tools rng-tools: 6.8 -> 6.9 2019-12-24 07:10:44 -08:00
saml2aws saml2aws: 2.10.0 -> 2.15.0 2019-07-11 10:39:42 +02:00
sbsigntool treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
scallion treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
scrypt scrypt: 1.2.1 -> 1.3.0 2019-10-01 21:08:24 -05:00
seccure treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
secp256k1 treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
sedutil treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
sequoia sequoia: 0.10.0 -> 0.11.0 2019-11-19 23:56:04 +02:00
sha1collisiondetection treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
shc treewide: remove redundant quotes 2019-09-08 23:38:31 +00:00
signify treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
signing-party treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
simple-tpm-pk11 treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
softhsm treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
sops sops: 3.4.0 -> 3.5.0 2019-11-22 04:20:00 -05:00
spectre-meltdown-checker spectre-meltdown-checker: 0.42 -> 0.43 2019-12-24 10:41:17 -08:00
srm Allow some packages to build on darwin as well 2018-03-30 15:39:25 -07:00
ssdeep treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
ssh-audit ssh-audit: init at 1.7.0 2019-05-02 04:35:06 +09:00
sshguard treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
sshuttle treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
sslscan treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
ssss treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
steghide treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
step-ca step-ca: init at 0.13.3 2019-12-16 13:25:55 +11:00
step-cli step-cli: init at 0.13.3 2019-10-12 09:56:35 +02:00
stoken Remove myself (fuuzetsu) from maintainer lists 2019-12-05 16:29:48 +09:00
stricat treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
su-exec treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
sudo sudo: 1.8.29 -> 1.8.30 2020-01-02 21:38:33 +01:00
sudolikeaboss treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
super treewide: installFlags is a list 2019-12-30 13:22:43 +01:00
tboot Merge gcc-9 into staging (#68029) 2019-12-30 16:38:38 +01:00
tcpcrypt treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
thc-hydra Merge branch 'master' into staging-next 2019-09-25 19:21:46 -04:00
theharvester theharvester: 3.0.6 -> 3.1 2019-11-04 19:41:24 +01:00
tor tor: patchShebangs script, fix build 2020-01-08 15:55:09 -06:00
tpm-luks treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
tpm-quote-tools maintainer-list.nix: remove ndowens 2019-12-26 16:47:41 -05:00
tpm-tools Merge branch 'master' into staging-next 2019-08-24 08:55:37 +02:00
tpm2-abrmd tpm2-abrmd: init at 2.2.0 2019-10-26 14:47:20 +02:00
tpm2-tools tpm2-tools: 4.0.1 -> 4.1 2019-12-09 14:15:23 -08:00
trousers trousers: 0.3.13 -> 0.3.14 2019-11-11 19:43:14 +01:00
trufflehog trufflehog: 2.0.91 -> 2.0.97 2018-10-25 23:54:28 -07:00
vault vault: 1.3.0 -> 1.3.1 2019-12-18 22:54:45 -08:00
verifpal verifpal: 0.2.0 → 0.7.5 (#72026) 2019-10-27 13:40:31 +01:00
volatility treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
vulnix vulnix: 1.9.2 -> 1.9.4 2019-12-11 19:44:48 +01:00
wipe treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
wpscan wpscan: 3.5.3 -> 3.7.5 (#75580) 2019-12-14 15:55:33 +01:00
yara yara: 3.10.0 -> 3.11.0, fix build 2019-11-12 16:08:46 +02:00
zmap zmap: init at 2.1.1 2019-05-10 07:50:25 +02:00
zzuf zzuf: init at 0.15 2019-04-01 15:43:32 +07:00
default.nix treewide: remove redundant rec 2019-08-28 11:07:32 +00:00