Matthew Bauer
673a63875d
Merge pull request #47593 from e-user/pkgs/snyk-1.99.1
...
snyk: init at 1.99.1
2018-10-05 22:33:02 -05:00
Florian Klink
02b0836d42
ghostscript: update hash ( #47946 )
...
I previously didn't update the hash, so was still building ghostscript-9.24
(which explained why docs were still from 9.24)
The ICC profile validation patch from #47937 is included in 9.25, so we
can strip it from the list of patches.
cc @xeji
2018-10-06 01:54:26 +02:00
Andreas Rammhold
938d98ebd5
Merge pull request #47937 from flokli/ghostscript-icc-profile-validation
...
ghostscript: include icc profile validation patch
2018-10-06 00:47:49 +02:00
Florian Klink
3f65f10982
ghostscript: 9.24 -> 9.25 ( #47934 )
...
Highlights in this release include:
This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional security issues over the recent 9.24 release.
CVE-2018-16802
CVE-2018-17183
Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources.
Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits.
PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid these issues.
As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files.
IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available as its own package separately from Ghostscript (and MuPDF).
The usual round of bug fixes, compatibility changes, and incremental improvements.
2018-10-06 00:47:08 +02:00
Philip Nelson
3a0fbe3cbe
youtube-dl: 2018.09.26 -> 2018.10.05 ( #47940 )
2018-10-06 00:36:03 +02:00
Samuel Dionne-Riel
82d1bf9691
nixos/doc: Updates release date for 18.09
2018-10-05 18:32:42 -04:00
Ben Gamari
58a02af417
qpdf: Drop CVE-2018-9918.patch ( #47935 )
...
This has been merged upstream in 8.2.1.
2018-10-06 00:30:49 +02:00
Samuel Dionne-Riel
29b479eb72
README: 18.03 -> 18.09
2018-10-05 18:23:57 -04:00
Samuel Dionne-Riel
31b1553880
Merge pull request #47575 from samueldr/1809/release-notes
...
Updates 18.09 release notes for release.
2018-10-05 18:17:04 -04:00
Edmund Wu
9a57e00a36
ghostscript: include icc profile validation patch
...
See https://github.com/apple/cups/issues/5394
closes #47193 , #46216
source url
http://git.ghostscript.com/?p=ghostpdl.git;a=patch;h=bc3df0773fcc
contains invalid characters, which is why we don't fetchpatch.
(cherry picked from commit 2aa750694e2e0d77bf14e3145c4999b6bcee25b0)
2018-10-05 23:20:00 +02:00
Andreas Rammhold
5acda907bb
Merge pull request #47924 from edef1c/git-2.19.1
...
git: 2.19.0 -> 2.19.1 (CVE-2018-17456)
2018-10-05 22:11:11 +02:00
edef
5cdecca8b7
git: 2.19.0 -> 2.19.1 (CVE-2018-17456)
2018-10-05 18:36:08 +00:00
Jörg Thalheim
5bba9f3906
Merge pull request #47908 from dywedir/uutils-coreutils
...
uutils-coreutils: 2018-02-09 -> 2018-09-30
2018-10-05 19:35:13 +01:00
Jörg Thalheim
c65da8b511
Merge pull request #47913 from cryptix/addVimVue
...
misc/vim-plugins: add posva/vim-vue
2018-10-05 18:28:21 +01:00
Jörg Thalheim
5694f1e1a9
Merge pull request #47519 from aneeshusa/vagrant-remove-unused-Gemfile
...
vagrant: remove unused vendored Gemfile{,.lock}
2018-10-05 18:25:01 +01:00
Graham Christensen
b4755393cc
Merge pull request #47920 from grahamc/link-to-definition
...
docs: Link to Definition
2018-10-05 13:13:15 -04:00
Timo Kaufmann
3f98dd18ca
Merge pull request #47906 from nyanloutre/emby-bin-name-fix
...
nixos/emby: fix use of outdated binary name changed by #47659
2018-10-05 17:39:28 +02:00
Markus Kowalewski
76b97596c0
rtl-sdr: 0.5.4 -> 0.6.0
2018-10-05 17:24:55 +02:00
Graham Christensen
5daee73ce4
Generate links to function definitions
...
Hydra passes the full revision in to the input, which we pass through.
If we don't get this ,we try to get it from other sources, or default to
master which should have the definition in a close-ish location.
All published docs should have theURL resolve properly, only local
hackers will have the link break.
2018-10-05 11:20:46 -04:00
Graham Christensen
4312cfdbda
version.nix: extract revision-fetching function
2018-10-05 11:06:28 -04:00
Graham Christensen
730dac1d7b
Merge pull request #47837 from grahamc/doc-lib-funcs
...
nixpkgs: Start documenting library functions in XML
2018-10-05 10:18:47 -04:00
Graham Christensen
f835f77e02
nixpkgs: Start documenting library functions in XML
...
Covers assert functions and about half of the attrsets functions.
Some internal consistency around IDs could be improved.
2018-10-05 10:06:08 -04:00
Timo Kaufmann
a00b7de165
Merge pull request #47915 from timokau/zn_poly-update
...
zn_poly: 0.9 -> 0.9.1
2018-10-05 16:05:24 +02:00
Vincent Laporte
9db397351a
unoconv: fix reference to libreoffice ( #47847 )
2018-10-05 16:03:20 +02:00
Timo Kaufmann
65589faa2f
zn_poly: 0.9 -> 0.9.1
...
Sage has taken over maintenance since the original author no longer
maintains the project.
2018-10-05 15:50:30 +02:00
Vladyslav M
a5d6705e20
imagemagick7: 7.0.8-6 -> 7.0.8-12 ( #47851 )
2018-10-05 15:48:38 +02:00
qolii
03d770c0ee
linux-hardkernel: 4.14.69-148 -> 4.14.73-149 ( #47896 )
2018-10-05 15:48:07 +02:00
tv
4b613137e4
sec: 2.8.0 -> 2.8.1 ( #47857 )
2018-10-05 15:32:51 +02:00
R. RyanTM
360054f417
brogue: 1.7.4 -> 1.7.5 ( #47830 )
...
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/brogue/versions
2018-10-05 15:15:13 +02:00
R. RyanTM
75e4fcf267
containerd: 1.1.2 -> 1.1.4 ( #47807 )
...
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/containerd/versions
2018-10-05 15:14:50 +02:00
R. RyanTM
b49c4d2b2e
eid-mw: 4.4.7 -> 4.4.8 ( #47816 )
...
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/eid-mw/versions
2018-10-05 15:14:31 +02:00
Henry
388adf92a1
misc/vim-plugins: add posva/vim-vue
2018-10-05 14:54:39 +02:00
Orivej Desh
dbc4ee75a2
psi-plus: 1.3.410 -> 1.3.422
2018-10-05 12:08:16 +00:00
Austin Seipp
778dc453b6
perlPackages.CryptEd25519: init at 1.04
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-10-05 06:04:08 -05:00
Austin Seipp
20c7b61963
perlPackages.Mojolicious: 8.01 -> 8.02
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-10-05 06:04:08 -05:00
Justin Humm
bea3f18185
notmuch: use test-database in checkPhase
...
for running all tests, notmuch requires a database file, which can be
downloaded at https://notmuchmail.org/releases/test-databases/
See test/README in notmuch sources for further info.
2018-10-05 12:36:12 +02:00
Marco Maggesi
eae1bd0958
Merge pull request #47805 from r-ryantm/auto-update/fossil
...
fossil: 2.6 -> 2.7
2018-10-05 12:32:14 +02:00
Sarah Brofeldt
6540a480b4
Merge pull request #47880 from pacien/patch-6
...
matrix-synapse: 0.33.5 -> 0.33.6
2018-10-05 10:32:59 +02:00
Vladyslav Mykhailichenko
1e02a2c063
uutils-coreutils: 2018-02-09 -> 2018-09-30
2018-10-05 10:50:19 +03:00
nyanloutre
bb06b5b442
nixos/emby: fixes binary name change introduced by #47659
2018-10-05 09:25:39 +02:00
lewo
8c0d32f8e7
Merge pull request #47693 from nicknovitski/envsubst-init
...
envsubst: init at 1.1.0
2018-10-05 09:00:33 +02:00
lewo
96ad503163
Merge pull request #47692 from nicknovitski/kubeval-init
...
kubeval: init at 0.7.3
2018-10-05 08:41:41 +02:00
Gabriel Ebner
e1738bf1a2
whipper: add cddb dependency
2018-10-05 08:22:26 +02:00
Jan Tojnar
89beaef64d
Merge pull request #47786 from r-ryantm/auto-update/ibus-typing-booster
...
ibus-engines.typing-booster-unwrapped: 2.1.1 -> 2.1.2
2018-10-05 06:46:25 +02:00
Peter Hoeg
78289fc6f8
Merge pull request #47842 from peterhoeg/f/activation
...
nixos system-activation: support activation scripts run in a user context
2018-10-05 11:22:33 +08:00
Peter Hoeg
be27131c06
Merge pull request #47694 from magnetophon/lsp-plugins
...
lsp-plugins: init at 1.1.4
2018-10-05 10:43:00 +08:00
Peter Hoeg
c81d370bb9
Merge branch 'master' into f/activation
2018-10-05 10:08:56 +08:00
Peter Hoeg
4dada63a17
plasma5: run kbuildsycoca5 in the user context
2018-10-05 10:06:40 +08:00
Peter Hoeg
8118d6eb2e
switch-to-configuration.pl: activate the nixos-activation.service user service
2018-10-05 10:06:40 +08:00
Peter Hoeg
1353ba2678
system-activation: support script fragments to run in a user context
2018-10-05 10:06:40 +08:00