In particular, this contains Firefox-related and libgcrypt updates.
Other larger rebuilds would apparently need lots of time to catch up
on Hydra, due to nontrivial rebuilds in other branches than staging.
We already did them on non-mass-rebuild llvm 6. Also, this allows
simplifying the stdenv booting.
We were missing the libcxxabi dep in compile-rt in llvm 6, so fixed that
too.
The prebuilt was previously broken in building GMP. We add a
--disable-assembly flag to put get GMP to avoid pulling in assembly
stuff that breaks.
/cc @ericson2314
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/conan/versions.
These checks were done:
- built on NixOS
- Warning: no invocation of /nix/store/pdza6q7n1rywgra2022zvbi05fj47kjy-conan-1.4.4/bin/.conan_server-wrapped had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/pdza6q7n1rywgra2022zvbi05fj47kjy-conan-1.4.4/bin/conan_server had a zero exit code or showed the expected version
- /nix/store/pdza6q7n1rywgra2022zvbi05fj47kjy-conan-1.4.4/bin/.conan_build_info-wrapped passed the binary check.
- /nix/store/pdza6q7n1rywgra2022zvbi05fj47kjy-conan-1.4.4/bin/conan_build_info passed the binary check.
- Warning: no invocation of /nix/store/pdza6q7n1rywgra2022zvbi05fj47kjy-conan-1.4.4/bin/.conan-wrapped had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/pdza6q7n1rywgra2022zvbi05fj47kjy-conan-1.4.4/bin/conan had a zero exit code or showed the expected version
- 2 of 6 passed binary check by having a zero exit code.
- 0 of 6 passed binary check by having the new version present in output.
- found 1.4.4 with grep in /nix/store/pdza6q7n1rywgra2022zvbi05fj47kjy-conan-1.4.4
- directory tree listing: https://gist.github.com/0da299922c958da51520fdd195a2d369
- du listing: https://gist.github.com/7e5d6a9b06f35b233151c026f6dd089b
This is needed for some cabal2nix stuff in getting the version.
Previously we had left out the version but apparently this can cause
problems in some scenarios.
/cc @elvishjerricco @peti @ericson2314
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/cppcheck/versions.
These checks were done:
- built on NixOS
- Warning: no invocation of /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/cert.py had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/cppcheckdata.py had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/findcasts.py had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/misc.py had a zero exit code or showed the expected version
- /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/misra.py passed the binary check.
- /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/naming.py passed the binary check.
- Warning: no invocation of /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/threadsafety.py had a zero exit code or showed the expected version
- /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/y2038.py passed the binary check.
- Warning: no invocation of /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/cppcheck-htmlreport had a zero exit code or showed the expected version
- /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84/bin/cppcheck passed the binary check.
- 4 of 10 passed binary check by having a zero exit code.
- 1 of 10 passed binary check by having the new version present in output.
- found 1.84 with grep in /nix/store/59sw6pav9ij3f3y94pw66r8g5z96gr3a-cppcheck-1.84
- directory tree listing: https://gist.github.com/a464c9319c013b54fa8dad97171e724d
- du listing: https://gist.github.com/11c40551fbcd2a67342269599eecbb76
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/go/versions.
These checks were done:
- built on NixOS
- Warning: no invocation of /nix/store/sz746n0jm0n8dnv47d7cqvwny8ncfbi4-go-1.10.3/bin/gofmt had a zero exit code or showed the expected version
- /nix/store/sz746n0jm0n8dnv47d7cqvwny8ncfbi4-go-1.10.3/bin/.go-wrapped passed the binary check.
- /nix/store/sz746n0jm0n8dnv47d7cqvwny8ncfbi4-go-1.10.3/bin/go passed the binary check.
- 2 of 3 passed binary check by having a zero exit code.
- 0 of 3 passed binary check by having the new version present in output.
- found 1.10.3 with grep in /nix/store/sz746n0jm0n8dnv47d7cqvwny8ncfbi4-go-1.10.3
- directory tree listing: https://gist.github.com/499abd38cfb9318ba6bbcd885951c6b8
- du listing: https://gist.github.com/04fbe15eac23c814fa6b313c8e543e4c
This fixes cross compiling to android that is currently broken. The
asm symlink needs to be set on versions /newer/ than 10e not the other
way around. We also need to use hostInfo’s triple here because ...
/cc @ericson2314 @bkchr
* grab patches from gentoo to fix various 2-stage cross build system
bugs
* explicitly set CrossCompilePrefix to the expected targetPrefix
-- ensures everything has expected name and location
-- fixes lack of prefix'ing when doing glibc -> musl "cross"
* Stage1Only: only set if doing "true" cross
* don't try to specify include/lib dirs for ncurses on cross
-- only used by terminfo which actually removed the include option,
and the lib option doesn't seem to do anything other than
confuse the situation re:cross.
Fixes#37522
This reverts commit 819f47bb36 on staging to
prevent unneeded rebuild.
That change leaves the static library in two outputs, "out" and "static", and
has to be reimplemented and motivated.
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/yq/versions.
These checks were done:
- built on NixOS
- /nix/store/11iw84skak8ag78s93klhmn4mhz1v3qh-yq-2.6.0/bin/.xq-wrapped passed the binary check.
- /nix/store/11iw84skak8ag78s93klhmn4mhz1v3qh-yq-2.6.0/bin/xq passed the binary check.
- /nix/store/11iw84skak8ag78s93klhmn4mhz1v3qh-yq-2.6.0/bin/.yq-wrapped passed the binary check.
- /nix/store/11iw84skak8ag78s93klhmn4mhz1v3qh-yq-2.6.0/bin/yq passed the binary check.
- 4 of 4 passed binary check by having a zero exit code.
- 4 of 4 passed binary check by having the new version present in output.
- found 2.6.0 with grep in /nix/store/11iw84skak8ag78s93klhmn4mhz1v3qh-yq-2.6.0
- directory tree listing: https://gist.github.com/d6c1ce31dff71d43e23d27c6d98e1925
- du listing: https://gist.github.com/a08a8e4ca7caa376a53ad39da72ba921
This fails for me:
> compressed_output.cc:320:20: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
> gold_warning(_("not compressing section data: zlib error"));
> ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> ./system.h:40:20: note: expanded from macro '_'
> # define _(String) gettext (String)
> ^~~~~~~~~~~~~~~~
> compressed_output.cc:320:20: note: treat the string as an argument to avoid this
> gold_warning(_("not compressing section data: zlib error"));
> ^
> "%s",
> ./system.h:40:20: note: expanded from macro '_'
> # define _(String) gettext (String)
^
Disabling format hardening should hopefully be harmless here. If it's a problem we can also make it conditional.
/cc @Ericson2314
OPAE is a software toolchain and for integration and use of programmable
accelerators, currently supporting Intel Arria 10 and Stratix 10 FPGAs.
This package only contains the userspace software SDK tools and C
libraries -- not the OPAE Linux drivers.
Signed-off-by: Austin Seipp <aseipp@pobox.com>
We use MACOSX_DEPLOYMENT_TARGET=10.10 in nixpkgs and some darwin
packages like CoreFoundation are based on the 10.10 sources from
opensource.apple.com.
This is the first time since 5.9 that we also update `qtwebkit`.
`qtwebkit` is not maintained by Qt anymore and thus, we switch to the
community port as for example arch has done. To prevent pulling in
single patches, we just stick to the latest git version.
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/chromedriver/versions.
These checks were done:
- built on NixOS
- /nix/store/r7ai8p033gdhncxsfjjy3rb8qmcsvpqx-chromedriver-2.39/bin/chromedriver passed the binary check.
- Warning: no invocation of /nix/store/r7ai8p033gdhncxsfjjy3rb8qmcsvpqx-chromedriver-2.39/bin/.chromedriver-wrapped had a zero exit code or showed the expected version
- 1 of 2 passed binary check by having a zero exit code.
- 0 of 2 passed binary check by having the new version present in output.
- found 2.39 with grep in /nix/store/r7ai8p033gdhncxsfjjy3rb8qmcsvpqx-chromedriver-2.39
- directory tree listing: https://gist.github.com/ed47d14dfe1661b73d2d877b6e790579
- du listing: https://gist.github.com/63dc7bb82190375bce025de50ed2d6fa
storePropName will be jsseDefaultStore if the property isn't present, and
jsseDefaultStore is never null, so the branch to use the environment variable
would never be taken.
The env var is supposed to be preferred to jssecacerts, so we can use it as
the default in the call to System.getProperty, and use the null check to fall
back on jsseDefaultStore instead.
The fftw download page provides both an HTTP and FTP endpoint for downloading release tarballs:
http://fftw.org/download.html
Since some users may have difficulty fetching via FTP through corporate
firewalls, we should provide the option to get it over HTTP as well.
Without explicitly specifying that libsasl2 is part of the build, and
without explicitly making it part of pylibmc's linker flags for its
CPython extension, the cpython code enters a build state error where it
instead attempts to blindly `dlopen("libsasl2.so")` out of
$LD_LIBRARY_PATH; this fails as it can't be found in the store,
obviously.
The bigger problem with this is that it otherwise makes pylibmc
unusable, as it will try to immediately load libsasl2 at startup. This
means even using 'import pylibmc' at all will cause a failure.
Instead, add cyrus_sasl into the build closure of the library, and pass
an argument to the setup.py script to properly pass -lsasl2 to the C
extension. This causes a link to properly be formed.
Signed-off-by: Austin Seipp <aseipp@pobox.com>
CVE-2017-9935
CVE-2017-11613
CVE-2017-17095
CVE-2017-18013
CVE-2018-5784
CVE-2018-7456
Re #41748 (master)
Re #41749 (release-18.03 - needs to be cherry-picked)
Adds programs.mosh.withUtempter (default: true).
The option enables -with-utempter for mosh, allowing it to write to
/var/run/utmp and thus making connected sessions appear in the output
of `who -a`.
For that, a guid-wrapper is required. Also, the path to the `utempter` was
hardcoded in the resulting binary until now (so it could never been found),
thus, libutempter was patched accordingly to point to
/run/wrappers/bin/utempter which at least works when the wrapper is
configured.
Upstream changes:
* Record all SSL errors instead of only the first
* Pass arguments to plugin/plugout methods
* Allow the Roster to be initalized without requesting it from the
server
Tested by building and running Gajim 1.0.3.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @abbradar
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/mbedtls/versions.
These checks were done:
- built on NixOS
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_udp_proxy_wrapper.sh had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_aescrypt2 passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_crypt_and_hash had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_generic_sum had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_hello passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_dh_client had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_dh_genprime had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_dh_server had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_ecdh_curve25519 passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_ecdsa had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_gen_key had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_key_app passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_key_app_writer had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_mpi_demo passed the binary check.
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_pk_decrypt passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_pk_encrypt had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_pk_sign had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_pk_verify had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_rsa_decrypt had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_rsa_encrypt had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_rsa_genkey passed the binary check.
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_rsa_sign passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_rsa_sign_pss had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_rsa_verify had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_rsa_verify_pss had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_gen_entropy passed the binary check.
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_gen_random_ctr_drbg passed the binary check.
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_gen_random_havege passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_dtls_client had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_dtls_server had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_mini_client had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_ssl_client1 had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_ssl_client2 had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_ssl_fork_server had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_ssl_mail_client passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_ssl_server had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_ssl_server2 had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_benchmark passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_selftest had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_ssl_cert_test passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_udp_proxy had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_zeroize had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_pem2der passed the binary check.
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_strerror passed the binary check.
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_cert_app had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_cert_req had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_cert_write had a zero exit code or showed the expected version
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_crl_app passed the binary check.
- /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0/bin/mbedtls_req_app passed the binary check.
- 18 of 49 passed binary check by having a zero exit code.
- 0 of 49 passed binary check by having the new version present in output.
- found 2.10.0 with grep in /nix/store/q18bxf7hgbdqa9w5di6ndcf3xs28r6h5-mbedtls-2.10.0
- directory tree listing: https://gist.github.com/a14a6f7f932021b4c72aa2a56d3cafc8
- du listing: https://gist.github.com/d1d619564617178d839c99f546be2911
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/owl-lisp/versions.
These checks were done:
- built on NixOS
- /nix/store/w56xh2wbvj0f9f7cs7px7jrwkw6lcb9q-owl-lisp-0.1.16/bin/ol passed the binary check.
- Warning: no invocation of /nix/store/w56xh2wbvj0f9f7cs7px7jrwkw6lcb9q-owl-lisp-0.1.16/bin/ovm had a zero exit code or showed the expected version
- 1 of 2 passed binary check by having a zero exit code.
- 1 of 2 passed binary check by having the new version present in output.
- found 0.1.16 with grep in /nix/store/w56xh2wbvj0f9f7cs7px7jrwkw6lcb9q-owl-lisp-0.1.16
- directory tree listing: https://gist.github.com/b4c2aa74b73f2272f18b1a116c55897a
- du listing: https://gist.github.com/c130a766b1c674ed98f2f4e109186fe3
