JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
154,324 Commits 1 Branch 0 Tags 12 GiB
64d02660cb
Commit Graph

154324 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Rammhold
64d02660cb
firefox-bin: 62.0.2 -> 62.0.3 [critical security fixes] 
This update bumps the package to the latest stable version containing a
few security fixes:

- CVE-2018-12386: Type confusion in JavaScript
  A vulnerability in register allocation in JavaScript can lead to type
  confusion, allowing for an arbitrary read and write. This leads to
  remote code execution inside the sandboxed content process when
  triggered.

- CVE-2018-12387
  A vulnerability where the JavaScript JIT compiler inlines
  Array.prototype.push with multiple arguments that results in the stack
  pointer being off by 8 bytes after a bailout. This leaks a memory
  address to the calling function which can be used as part of an
  exploit inside the sandboxed content process.

Source: https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/
 2018-10-03 09:35:54 +02:00
Matthew Bauer
a88b8da554
Merge pull request #47676 from matthewbauer/security-mojave-fix 
haskell: fix x509-system on mojave
 2018-10-02 15:18:39 -05:00
Matthew Bauer
300ff965ae haskell: fix x509-system on mojave 
darwin.security_tool is currently broken in Mojave. See issue #45042
for more info. Our security_tool stuff comes from 10.9 so I suspect
that it needs an update.

Here I am putting in a hack to get things working again. This uses the
system provided security binary at /usr/bin/security to avoid the
issue in Haskell’s x509-system package. Unfortunately, this will break
with the sandbox. I am also working on a proper fix, but this requires
updating lots of Apple stuff (and also copumpkin’s new CF). You can
follow the progress on this branch:

  https://github.com/matthewbauer/nixpkgs/tree/xcode-security

This commit should be backported to release-18.03 and release-18.09.

/cc @copumpkin @lnl7 @pikajude
 2018-10-02 15:14:11 -05:00
Jörg Thalheim
1643967b8d
Merge pull request #47668 from jluttine/syncthing-0.14.51 
syncthing: 0.14.50 -> 0.14.51
 2018-10-02 20:19:55 +01:00
Jörg Thalheim
83f6cf82c5
Merge pull request #47656 from plapadoo/jetbrains-libnotify 
jetbrains: add libnotify to wrapper to enable notifications
 2018-10-02 20:11:42 +01:00
Jörg Thalheim
67c86d8bc2
Merge pull request #47673 from dysinger/feature/dysinger 
added dysinger as a maintainer
 2018-10-02 20:10:52 +01:00
Peter Simons
a4badb243c hledger: fix build of new version 1.11 2018-10-02 21:08:48 +02:00
Peter Simons
8f400527a7 haskell-hspec: update ghc-8.6.x overrides for version 2.5.8 2018-10-02 21:08:47 +02:00
Peter Simons
8841b09c0f haskell-doctest: drop obsolete override for ghc-8.6.x 2018-10-02 21:08:47 +02:00
Peter Simons
ab1a64fe6a hackage-packages.nix: automatic Haskell package set update 
This update was generated by hackage2nix v2.11.1 from Hackage revision
8d7d987c0d.
 2018-10-02 21:08:42 +02:00
Peter Simons
d072586714 LTS Haskell 12.11 2018-10-02 21:07:59 +02:00
Jörg Thalheim
1de4ebdf9a
Merge pull request #47675 from kalbasit/nixpkgs_update-twa 
twa: 1.3.1 -> 1.5.1
 2018-10-02 20:07:03 +01:00
Patrick Hilhorst
fbf55e95dc i3lock-color: 2.11-c -> 2.12.c (#47674) 
Note the change in naming scheme, this is intentional
(https://github.com/PandorasFox/i3lock-color/issues/92)
 2018-10-02 21:03:41 +02:00
Wael M. Nasreddine
9b08685e96
twa: set meta.platforms to platforms.unix 2018-10-02 11:30:55 -07:00
Jörg Thalheim
4c5b6d6e53
Merge pull request #47666 from plapadoo/jshint-phantomjs 
jshint: depend on phantomjs2
 2018-10-02 19:25:23 +01:00
Jörg Thalheim
b12c759f76
Merge pull request #47563 from jameysharp/unscripted 
Replace several activation script snippets with declarative configuration
 2018-10-02 19:21:34 +01:00
Wael M. Nasreddine
82b5887cab
twa: 1.3.1 -> 1.5.1 2018-10-02 11:10:58 -07:00
Frederik Rietdijk
4d1abc4419
Merge pull request #47604 from NixOS/staging-next 
Staging next
 2018-10-02 18:22:18 +02:00
Jaakko Luttinen
2671acc471
syncthing: 0.14.50 -> 0.14.51 2018-10-02 19:20:13 +03:00
Philipp Middendorf
22e9c0a6fa jshint: depend on phantomjs2 2018-10-02 18:06:55 +02:00
Patrick Hilhorst
fbc1fb78e3 wmfocus: init at 1.0.2 (#47662) 
* wmfocus: init at 1.0.2
* wmfocus: fix buildInputs
 2018-10-02 18:01:42 +02:00
R. RyanTM
609f9198f2 verilator: 3.926 -> 4.002 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/verilator/versions
 2018-10-02 09:56:10 -05:00
Léo Gaspard
5f5905e30e jetbrains.idea-community: add IntelliJ keyword to the longDescription (#47650) 
This should make it easier to find the package under the name
IntelliJ in eg. [1]

[1] https://nixos.org/nixos/packages.html#intellij
 2018-10-02 16:03:18 +02:00
Vincent Demeester
624b5c14c0 traefik: 1.7.0 -> 1.7.1 (#47660) 
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
 2018-10-02 15:58:43 +02:00
Felix Richter
3790cf7345 csv2svn: 2.4.0 -> 2.5.0 (#47635) 
use buildPythonApplication instead of manual setup.py call
 2018-10-02 15:52:22 +02:00
José Romildo Malaquias
b810cdc090 theme-obsidian2: fix theme name in index.theme (#47661) 2018-10-02 15:51:47 +02:00
Peter Simons
1af8f3a980 nixos: include system-level dconf resources in GDM's profile 
This is necessary when system-wide dconf settings must be configured, i.e. to
disable GDM's auto-suspending of the machine when no user is logged in.

Related to https://github.com/NixOS/nixpkgs/issues/42053.
 2018-10-02 13:27:59 +02:00
Josef Kemetmüller
aeee761aba libcanberra: fix darwin build (#47634) 2018-10-02 12:55:57 +02:00
catern
9ac7893042 pythonPackages.trio: 0.6.0 -> 0.7.0 (#47638) 2018-10-02 12:52:58 +02:00
Sebastien Maret
34ac35dfc6 gildas: 20180901_a -> 20181001_a (#47657) 
- Update gildas to the latest version
 - Remove a patch that has been applied upstream
 2018-10-02 12:49:33 +02:00
Felix Richter
ee3c0cf534 gen-oath-safe: 2017-06-30 -> 0.11.0 (#47633) 2018-10-02 12:47:56 +02:00
Vladimír Čunát
fe970a82ec
firefox: drop patch that's applied already 
It's a bit weird that noone's noticed,
but I guess it's because of a merge or rebase.
 2018-10-02 12:43:55 +02:00
nyanloutre
c254feb860 jackett: 0.10.198 -> 0.10.250 2018-10-02 12:29:39 +02:00
nyanloutre
967baedc2a youtube-dl: 2018.09.18 -> 2018.09.26 2018-10-02 12:29:24 +02:00
Bruno Bieth
e9fbc7ce3f autorandr: 1.6 -> 1.7 2018-10-02 12:28:32 +02:00
Philipp Middendorf
0b2f2f3d96 jetbrains: add libnotify to wrapper to enable notifications 2018-10-02 11:38:30 +02:00
Vladimír Čunát
56621c016d
ffmpeg: unbreak build of older versions after #46078 
As in the other cases, I didn't care about passing the dependency
if unused...
 2018-10-02 11:18:20 +02:00
Eelco Dolstra
2c9265c950
nix: 2.1.2 -> 2.1.3 2018-10-02 11:07:48 +02:00
Yurii Rashkovskii
34f20090d3 nwjs-sdk: init at 0.33.4 (#45320) 2018-10-02 10:24:05 +02:00
Sarah Brofeldt
baacbcd2a0
Merge pull request #47565 from mpickering/gdal-2.3.2 
gdal: 2.3.1 -> 2.3.2
 2018-10-02 09:09:26 +02:00
Sarah Brofeldt
c7102408f3
Merge pull request #47641 from romildo/upd.onestepback 
onestepback: 0.98 -> 0.991
 2018-10-02 09:06:22 +02:00
John Ericson
e1605d9b21
Merge pull request #47647 from obsidiansystems/ghc-8.2.2-change-patch 
ghc-8.2.2: Oops, added adjacent patch to the one I wanted for master
 2018-10-02 01:47:53 -04:00
John Ericson
bfef8113f6 ghc-8.2.2: Oops, added adjacent patch the one I wanted 2018-10-02 05:41:54 +00:00
Matthew Bauer
ea857466e1
Merge pull request #47642 from enumatech/buildApp-meta 
xcodeenv.buildApp: inherit meta
 2018-10-02 00:41:06 -05:00
Peter Hoeg
3916f71a16
Merge pull request #47166 from peterhoeg/u/crystal 
crystal: 0.26.1 and introduce 0.25.1
 2018-10-02 13:29:22 +08:00
John Ericson
e231a374b8
Merge pull request #47644 from obsidiansystems/ghc-8.2-hsc2hs 
ghc-8.2.2: Fix which hsc2hs is installed on cross
 2018-10-02 01:10:47 -04:00
John Ericson
4f5d9996a6 ghc-8.2.2: Fix which hsc2hs is installed on cross 
These commits all ended up on later GHCs, and are already being patched
in for ghc-8.4.3 in nixpkgs.
 2018-10-02 00:33:30 -04:00
Lionello Lunesu
132ed23f35
xcodeenv.buildApp: inherit meta 
Without `inherit meta;` there was no easy way for XCode packages to
set meta information of the final derivation.
 2018-10-02 12:01:22 +08:00
José Romildo Malaquias
2041c535f2 onestepback: 0.98 -> 0.991 
- Update to version 0.991
- Add color variants of the theme
- Change home page
 2018-10-02 00:49:21 -03:00
Austin Seipp
5a179ffb01 perlPackages.Mojolicious: 8.0 -> 8.01 
Signed-off-by: Austin Seipp <aseipp@pobox.com>
 2018-10-01 22:32:55 -05:00