Commit Graph

198462 Commits

Author SHA1 Message Date
Martin Milata
7263c895ed re2c: add patch for CVE-2020-11958
https://nvd.nist.gov/vuln/detail/CVE-2020-11958
2020-05-01 08:51:55 +02:00
Martin Milata
2e9c802cee re2c: 1.2.1 -> 1.3 2020-05-01 08:51:55 +02:00
Frederik Rietdijk
2da19f9483
Merge pull request #85653 from veprbl/pr/darwin_binutils_add_man
darwin.binutils: propagate man pages from darwin.cctools
2020-05-01 08:49:56 +02:00
Cole Helbling
90c503237a libvorbis: fix 404'ing patch
Also use full commit for the other patch, just in case there's ever a
collision, as unlikely as that may be.
2020-05-01 08:49:14 +02:00
Benno Fünfstück
ed2ac0dcfa llvm_10: mark as big-parallel
LLVM builds frequently time out on hydra at least on AArch64. Marking
big-parallel gives them more resources to finish quicker.
2020-05-01 08:48:41 +02:00
Benno Fünfstück
7c27e8749d llvm_9: mark as big-parallel
LLVM builds frequently time out on hydra at least on AArch64. Marking
big-parallel gives them more resources to finish quicker.
2020-05-01 08:48:41 +02:00
Benno Fünfstück
4b3c3e10a6 llvm_8: mark as big-parallel
LLVM builds frequently time out on hydra at least on AArch64. Marking
big-parallel gives them more resources to finish quicker.
2020-05-01 08:48:41 +02:00
Benno Fünfstück
8c880d9434 llvm_7: mark as big-parallel
LLVM builds frequently time out on hydra at least on AArch64. Marking
big-parallel gives them more resources to finish quicker.
2020-05-01 08:48:41 +02:00
Benno Fünfstück
fc6a4600f8 llvm_6: mark as big-parallel
LLVM builds frequently time out on hydra at least on AArch64. Marking
big-parallel gives them more resources to finish quicker.
2020-05-01 08:48:41 +02:00
Martin Milata
4ea28e76c2 cups: 2.3.1 -> 2.3.3
https://github.com/apple/cups/releases/tag/v2.3.3

Fixes:

https://nvd.nist.gov/vuln/detail/CVE-2019-8842
https://nvd.nist.gov/vuln/detail/CVE-2020-3898
2020-05-01 08:48:02 +02:00
Frederik Rietdijk
d09c1bc5b3 Merge staging-next into staging 2020-05-01 08:23:58 +02:00
Andreas Rammhold
bf3870a4c0
Merge pull request #86277 from mweinelt/dnsmasq/2.81
dnsmasq: 2.80 → 2.81
2020-05-01 03:50:57 +02:00
Jan Tojnar
083b0ba631
Merge pull request #86416 from jtojnar/gi-selfhook-fix 2020-04-30 22:42:36 +02:00
Jan Tojnar
8f7387f219
gobject-introspection: Ensure the giDiscoverSelf is run before gappsWrapperArgsHook
gappsWrapperArgsHook tries to collect GI_TYPELIB_PATH environment variable so if we want it to see the path giDiscoverSelf adds, we need to force the order.
2020-04-30 20:12:30 +02:00
Pavol Rusnak
b4a2689117
liberation_ttf_v2: 2.00.4 -> 2.1.0 2020-04-30 17:59:18 +02:00
Jan Tojnar
a60e61d6f1
Merge pull request #86318 from jtojnar/gtk-3.24.20
gtk3: 3.24.18 → 3.24.20
2020-04-30 08:11:46 +02:00
Florian Klink
8882516056
Merge pull request #86324 from flokli/staging-revert-binutils
staging: revert the binutils bump
2020-04-30 01:46:46 +02:00
Vladimír Čunát
4d9e007563
nettle: 3.5.1 -> 3.6
https://lists.lysator.liu.se/pipermail/nettle-bugs/2020/008967.html
Ed448 should now just work in knot-{dns,resolver}.
2020-04-29 23:08:15 +02:00
Florian Klink
237ef3095c Revert "libbfd: fix build"
This reverts commit 7550ab98b0.
2020-04-29 16:48:50 +02:00
John Ericson
e9d8303727
Merge pull request #86283 from Ericson2314/fix-mistakes
meson: Fix my mistakes
2020-04-29 10:02:54 -04:00
Florian Klink
607c4d8bb8 Revert "binutils: 2.31.1 -> 2.33.1"
This reverts commit efdb29597a.
2020-04-29 15:48:26 +02:00
Florian Klink
e30f1e3c80 Revert "coreutils: set ac_cv_func_lchmod=no"
This reverts commit c5e3472e20.
2020-04-29 15:48:25 +02:00
Florian Klink
ff76d777fb Revert "binutils: 2.33.1 -> 2.34"
This reverts commit c5f602f5b7.
2020-04-29 15:48:24 +02:00
Jan Tojnar
d518884d38
gtk3: 3.24.18 → 3.24.20
db39ce2b16/NEWS (L1-38)

Also switch to a merged pkg-config patch and add a patch comment.
2020-04-29 14:39:20 +02:00
Florian Klink
f046de4210
Merge pull request #86168 from lblasc/sof-firmware
Sound Open Firmware support, sof-firmware: init at 1.4.2, update kernel config
2020-04-29 12:36:53 +02:00
Florian Klink
fbc63c4a7b
Merge pull request #86208 from arianvp/fix-linux-systemd-dep
linux: do not depend on systemd indirectly
2020-04-29 11:56:51 +02:00
Luka Blaskovic
6fc9fd53db linux config: enable Sound Open Firmware support 2020-04-29 07:31:49 +00:00
Jan Tojnar
2874eebfd2
Merge branch 'staging-next' into staging 2020-04-29 08:35:47 +02:00
Jan Tojnar
f14021febf
Merge branch 'master' into staging-next 2020-04-29 08:35:23 +02:00
Jan Tojnar
2b5e2ffe0a
Merge pull request #86165 from jtojnar/libusb-compat-rename 2020-04-29 08:26:08 +02:00
Jörg Thalheim
6015d03ef1
Merge pull request #86037 from purcell/dotnet-arm64 2020-04-29 07:04:32 +01:00
Vladimír Čunát
1014c7cb42
Merge #86260: libbfd: fix patch to apply (into staging) 2020-04-29 07:44:21 +02:00
worldofpeace
d67d074ae6
Merge pull request #86285 from cole-h/fish
fish: 3.1.1 -> 3.1.2
2020-04-29 01:37:57 -04:00
jakobrs
d21cc14114 v4l2loopback: 0.12.4 -> 0.12.5 2020-04-29 07:19:01 +02:00
Vincent Laporte
95b35a2514 coqPackages.gappalib: 1.4.1 → 1.4.3 2020-04-29 06:56:14 +02:00
Cole Helbling
7a15b6037b
fish: 3.1.1 -> 3.1.2
https://github.com/fish-shell/fish-shell/compare/3.1.1...3.1.2

"This release of fish fixes a major issue discovered in fish 3.1.1:
Commands such as `fzf` and `enhancd`, when used with `eval`, would hang.
`eval` buffered output too aggressively, which has been fixed."
2020-04-28 21:26:50 -07:00
Pavel Goran
462fa8bbaf pykms: replace logging patch
The logging "sed-patch" that was introduced for version 20190611 worked poorly:
it was too intrusive (breaking the --logfile option), and it didn't prevent
using in-store file for logging by default. The new logging patch (an actual
"diff-patch") is less intrusive: it just changes the default log file's
location to be the current directory instead of the executable's directory.
2020-04-29 03:53:41 +00:00
John Ericson
05d26adb0a mkDerivation mesonFlags: Fix arm cpu families
In my haste to unbreak eval, I screwed up and got the bit-widths,
backwards.
2020-04-28 22:56:20 -04:00
John Ericson
38b084f621 meson: Fix cross
The old `CC=.. CXX= .. meson ...` env var hack I removed in
3c00ca03a2 had a side effect of ensuring
that Meson always had access to a native C compiler, which unforunately
it expects in most cases. Thankfully, that will be fixed soon.
2020-04-28 22:54:48 -04:00
Dave Nicponski
c3c3f68020 xcbuild: add compatibility support for exporting sdk info
"Real" xcodebuild allows using `xcodebuild -version -sdk` without
an sdk version argument, which will dump sdk info for all the
installed sdks.

Bazel"s "xcode cc toolchain setup on mac" process uses this
to determine which SDK version is actually installed.  This
change allows using a nix-supplied pinned compiler and build
system under bazel.
2020-04-28 22:49:53 -04:00
Mario Rodas
de71be7723
Merge pull request #86220 from avdv/wtf-0.29.0
wtf: 0.29.0 -> 0.29.0
2020-04-28 21:42:09 -05:00
Martin Weinelt
c9fef6230a dnsmasq: 2.80 → 2.81
Fixes: CVE-2019-14834

A vulnerability was found in dnsmasq before version 2.81, where the
memory leak allows remote attackers to cause a denial of service
(memory consumption) via vectors involving DHCP response creation.

Changelog:

version 2.81
	Improve cache behaviour for TCP connections. For ease of
	implementaion, dnsmasq has always forked a new process to handle
	each incoming TCP connection. A side-effect of this is that
	any DNS queries answered from TCP connections are not cached:
	when TCP connections were rare, this was not a problem.
	With the coming of DNSSEC, it is now the case that some
	DNSSEC queries have answers which spill to TCP, and if,
	for instance, this applies to the keys for the root, then
	those never get cached, and performance is very bad.
	This fix passes cache entries back from the TCP child process to
	the main server process, and fixes the problem.

	Remove the NO_FORK compile-time option, and support for uclinux.
	In an era where everything has an MMU, this looks like
	an anachronism, and it adds to (Ok, multiplies!) the
	combinatorial explosion of compile-time options. Thanks to
	Kevin Darbyshire-Bryant for the patch.

	Fix line-counting when reading /etc/hosts and friends; for
	correct error messages. Thanks to Christian Rosentreter
	for reporting this.

	Fix bug in DNS non-terminal code, added in 2.80, which could
	sometimes cause a NODATA rather than an NXDOMAIN reply.
	Thanks to Norman Rasmussen, Sven Mueller and Maciej Żenczykowski
	for spotting and diagnosing the bug and providing patches.

	Support TCP-fastopen (RFC-7413) on both incoming and
	outgoing TCP connections, if supported and enabled in the OS.

	Improve kernel-capability manipulation code under Linux. Dnsmasq
	now fails early if a required capability is not available, and
	tries not to request capabilities not required by its
	configuration.

	Add --shared-network config. This enables allocation of addresses
	by the DHCP server in subnets where the server (or relay) does not
	have an interface on the network in that subnet. Many thanks to
	kamp.de for sponsoring this feature.

	Fix broken contrib/lease_tools/dhcp_lease_time.c. A packet
	validation check got borked in commit 2b38e382 and release 2.80.
	Thanks to Tomasz Szajner for spotting this.

	Fix compilation against nettle version 3.5 and later.

	Fix spurious DNSSEC validation failures when the auth section
	of a reply contains unsigned RRs from a signed zone,
	with the exception that NSEC and NSEC3 RRs must always be signed.
        Thanks to Tore Anderson for spotting and diagnosing the bug.

	Add --dhcp-ignore-clid. This disables reading of DHCP client
	identifier option (option 61), so clients are only identified by
	MAC addresses.

	Fix a bug which stopped --dhcp-name-match from working when a hostname
	is supplied in --dhcp-host. Thanks to James Feeney for spotting this.

	Fix bug which caused very rarely caused zero-length DHCPv6 packets.
	Thanks to Dereck Higgins for spotting this.

	Add --tftp-single-port option.

	Enhance --conf-dir to load files in a deterministic order. Thanks to
	Evgenii Seliavka for the suggestion and initial patch.

	In the router advert code, handle case where we have two
	different interfaces on the same IPv6 net, and we are doing
	RA/DHCP service on only one of them. Thanks to NIIBE Yutaka
	for spotting this case and making the initial patch.

	Support prefixed ranges of ipv6 addresses in dhcp-host.
	This eases problems chain-netbooting, where each link in the
	chain requests an address using a different UID. With a single
	address, only one gets the "static" address, but with this
	fix, enough addresses can be reserved for all the stages of the
	boot. Many thanks to Harald Jensås for his work on this idea and
	earlier patches.

	Add filtering by tag of --dhcp-host directives. Based on a patch
	by Harald Jensås.

	Allow empty server spec in --rev-server, to match --server.

	Remove DSA signature verification from DNSSEC, as specified in
	RFC 8624. Thanks to Loganaden Velvindron for the original patch.

	Add --script-on-renewal option.
2020-04-29 04:22:08 +02:00
worldofpeace
b7f80f00ef
Merge pull request #86150 from ceedubs/unison-ucm-M1l
unison-ucm: 1.0.M1j-alpha -> 1.0.M1l-alpha
2020-04-28 21:49:49 -04:00
worldofpeace
7679b8edae
Merge pull request #86241 from glittershark/openexr-cmake
openexr: Switch to cmake-based build
2020-04-28 21:43:12 -04:00
Mario Rodas
af6f00d552
Merge pull request #86211 from marsam/update-nodejs-12_x
nodejs-12_x: 12.16.2 -> 12.16.3
2020-04-28 20:41:35 -05:00
Jaka Hudoklin
d3ef0655d4
Merge pull request #86233 from prusnak/remove-amd-legacy
amdadl-sdk, amdapp-sdk: remove
2020-04-29 01:31:31 +00:00
adisbladis
50950bda13
Merge pull request #86262 from zowoq/podman
podman: 1.9.0 -> 1.9.1
2020-04-29 03:00:47 +02:00
Mario Rodas
002817019b
Merge pull request #86224 from bbigras/starship
starship: 0.40.1 -> 0.41.0
2020-04-28 19:37:12 -05:00
Colin
4007ceb6af
treewide get rid of go 1.12 (#83253)
* treewide Drop unneeded go 1.12 overrides

* Fix packr to be go module compatible.

I updated to version 2.8.0 which is the latest on master.
Then due to the 2 different sets of go modules which are used, I split
the build into two different derivations, then merged them togethor
using symlinkJoin to have the same output structure as the existing derivation.

* Remove consul dependency on go1.12

I updated the consul version to 1.7.2 and flipped it to building using
modules.

* Remove go1.12 from perkeep.

Update the version to the latest unstable on master.

* Update scaleway-cli to not be pinned to go1.12

Switched the version to 1.20

* Update prometheus-varnish-exporter to not depend on go1.12

* Update lnd to build with go1.12

Updated the version
Forced only building subpackages with main to prevent panics over
multiple modules in one repo

* Remove go1.12 from openshift

Had to update the version to 4.1.0 and do a bit of munging to get this
to work

* Remove go1.12 completely.

These are no longer needed.

* Update bazel-watcher and make it build with go 1.14
2020-04-28 20:16:20 -04:00
Maximilian Bosch
7550ab98b0
libbfd: fix build
The patch to separate it from `binutils` didn't apply anymore after
updating `binutils` to 2.34[1].

[1] #85951
2020-04-29 00:47:53 +02:00