Vulnerability roundup 52: openjpeg, php, exiv2

[ckauhaus]

Hi all,

another vulnerability roundup is on:

• Vulnerability roundup 52: openjpeg-2.3.0: 1 advisory · Issue #50367 · NixOS/nixpkgs · GitHub
• Vulnerability roundup 52: php-7.2.8: 1 advisory · Issue #50368 · NixOS/nixpkgs · GitHub
• Vulnerability roundup 52: exiv2-0.26: 3 advisories · Issue #50369 · NixOS/nixpkgs · GitHub

As always, we are glad for everyone who helps out to get rid of these security issues.

-Christian

[ekalosak]

@ckauhaus What do you use to scrape the security roundups? It’s not the NixOS/security repo’s scripting, I imagine…

[Mic92]

GitHub - nix-community/vulnix: Vulnerability (CVE) scanner for Nix/NixOS.

[ckauhaus]

The raw data is obtained by running vulnix against the top-level output derivation of nixos/release-combined.nix. There is also quite a bit of plumbing and driver code around that at GitHub - ckauhaus/nixos-vulnerability-roundup: Scripts and whitelists for the weekly NixOS vulnerability roundups.

HTH