Commit Graph

11624 Commits

Author SHA1 Message Date
José Romildo Malaquias
740cc35059
Merge pull request #87777 from romildo/upd.balsa
balsa: 2.5.9 -> 2.6.1
2020-05-14 19:37:47 -03:00
Nikolay Korotkiy
131663718e
newsboat: fix on darwin 2020-05-14 19:51:25 +03:00
Mario Rodas
b51a82932f
Merge pull request #87733 from taku0/flashplayer-32.0.0.371
flashplayer: 32.0.0.363 -> 32.0.0.371
2020-05-14 08:05:29 -05:00
Andreas Rammhold
b70435e43c
firefox: 76.0 -> 76.0.1 2020-05-14 12:50:34 +02:00
zowoq
aade6fc7b0 cni-plugins: switch to buildGoModule 2020-05-14 17:36:30 +10:00
Jörg Thalheim
e6907df061
ipfs: switch to vendored tarball 2020-05-14 07:22:27 +01:00
Jörg Thalheim
cdb8539006
jx: 2.1.31 -> 2.1.31 2020-05-14 07:22:26 +01:00
Colin L Rice
d6162dab50
go-modules: Update files to use vendorSha256 2020-05-14 07:22:21 +01:00
Sarah Brofeldt
4c2a228508
Merge pull request #87778 from zowoq/cni
cni-plugins: 0.8.5 -> 0.8.6
2020-05-14 06:52:35 +02:00
Mario Rodas
0b72a749ae
terraform: 0.12.24 -> 0.12.25
Changelog: https://github.com/hashicorp/terraform/releases/tag/v0.12.25
2020-05-13 20:20:20 -05:00
zowoq
dcb013d85c cni-plugins: 0.8.5 -> 0.8.6
https://github.com/containernetworking/plugins/releases/tag/v0.8.6
2020-05-14 10:57:02 +10:00
José Romildo Malaquias
d56c2a0b24 balsa: 2.5.9 -> 2.6.1
Remove --with-gpgme as gpg is fixed build requirement now.
2020-05-13 21:46:27 -03:00
Andreas Rammhold
8ba41a1e14
Merge pull request #87708 from aszlig/firefox-nss-3.52-fix
firefox: Add patch to fix AES GCM IV bit size
2020-05-13 23:21:04 +02:00
José Romildo Malaquias
7172181c3d balsa: sort dependence list 2020-05-13 18:17:28 -03:00
José Romildo Malaquias
717656fd03 balsa: format with nixpkgs-fmt 2020-05-13 18:13:35 -03:00
Marek Mahut
dd2fffd04c
Merge pull request #87075 from prusnak/openbazaar
openbazaar: init at 0.14.2
2020-05-13 18:21:44 +02:00
Rok Garbas
2b51171fb6
Merge pull request #87686 from lovesegfault/zoom-us-5.0.4
zoom-us: 5.0.399860.0429 -> 5.0.403652.0509
2020-05-13 14:24:04 +02:00
Mario Rodas
d5a8dc3f4d
Merge pull request #87713 from zowoq/minikube
minikube: 1.10.0 -> 1.10.1
2020-05-13 01:26:41 -05:00
R. RyanTM
bef44fc4ae znc: 1.7.5 -> 1.8.0 2020-05-12 22:11:10 -07:00
zowoq
ff720ad8af minikube: 1.10.0 -> 1.10.1
https://github.com/kubernetes/minikube/releases/tag/v1.10.1
2020-05-13 13:20:49 +10:00
Lynn Dong
60c0d55e09 helmsman: init at 3.3.0 2020-05-12 18:07:36 -07:00
aszlig
8fb49973ce
firefox: Add patch to fix AES GCM IV bit size
Regression introduced by bce5268a21.

The bit size of the initialisation vector for AES GCM has been
introduced in NSS version 3.52 in the CK_GCM_PARMS struct via the
ulIvBits field.

Unfortunately, Firefox 68.8.0 and 76.0 do not set this field and thus it
gets initialised to zero, which in turn causes IV generation to fail.

I found out about this because WebRTC stopped working after updating to
NSS 3.52 and so I started bisecting.

Since there wasn't an obvious error in Firefox hinting towards NSS but
instead just the video stream ended up as a "null" stream, I didn't
suspect the NSS update to be the culprit at first. So I verified a few
times and then also started bisecting the actual commit in NSS that
caused the issue.

This turned out to be the problematic change:

https://phabricator.services.mozilla.com/D63241

> One notable change was caused by an inconsistancy between the spec and
> the released headers in PKCS#11 v2.40. CK_GCM_PARAMS had an extra
> field in the header that was not in the spec. OASIS considers the
> header file to be normative, so PKCS#11 v3.0 resolved the issue in
> favor of the header file definition.

Since the test I've used[1] was a bit flaky, I still didn't believe the
result of the bisect to be accurate, but after running the test several
times leading same results I dug through the above change line by line
to get more clues.

It fortunately didn't take that long to stumble upon the ulIvBits change
(which is actually documented in the NSS 3.52 release notes[4], but I
managed to blatantly ignore it for some reason) and started checking the
Firefox source tree for changes regarding that field.

Initialisation of that new field has been introduced[2] in preparation
for the 76 release, but subsequently got reverted[3] prior to the
release, because Firefox 76 is expected to be shipped with NSS 3.51,
which didn't have the ulIvBits field.

The patch I'm adding here is just a reintroduction of that change,
because we're using NSS 3.52. Not initialising that field will break
WebRTC and WebCrypto, which I think the former seems to gain in
popularity these days ;-)

Tested the change against the mentioned VM test[1] and also by testing
manually using Jitsi Meet and Nextcloud Talk.

[1]: https://github.com/aszlig/avonc/tree/884315838b6f0ebb32b/tests/talk
[2]: https://hg.mozilla.org/mozilla-central/rev/3ed30e6b6de1
[3]: https://hg.mozilla.org/mozilla-central/rev/665137da70ee
[4]: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.52_release_notes

Signed-off-by: aszlig <aszlig@nix.build>
2020-05-13 02:23:12 +02:00
Bernardo Meurer
4e4f5cb925
zoom-us: 5.0.399860.0429 -> 5.0.403652.0509 2020-05-12 10:09:12 -07:00
Robert Schütz
52fcfd3876 qutebrowser: 1.11.0 -> 1.11.1
fixes CVE-2020-11054
2020-05-12 18:46:09 +02:00
zowoq
9452d34b14 minikube: 1.9.2 -> 1.10.0
https://github.com/kubernetes/minikube/releases/tag/v1.10.0
2020-05-12 19:47:31 +10:00
taku0
d8fa222ca2 flashplayer: 32.0.0.363 -> 32.0.0.371 2020-05-12 18:31:02 +09:00
Elis Hirwing
47d1cd332c
Merge pull request #87552 from r-ryantm/auto-update/testssl.sh
testssl: 3.0 -> 3.0.1
2020-05-11 08:22:16 +02:00
R. RyanTM
183378d1d5 testssl: 3.0 -> 3.0.1 2020-05-10 21:49:32 +00:00
Pavol Rusnak
47df73b221
openbazaar-client: init at 2.4.4 2020-05-10 23:32:59 +02:00
Pavol Rusnak
731cbde2c0
openbazaar: init at 0.14.2 2020-05-10 23:32:58 +02:00
Ryan Mulligan
84982d1664
Merge pull request #87523 from r-ryantm/auto-update/tixati
tixati: 2.72 -> 2.73
2020-05-10 12:42:46 -07:00
Kim Lindberger
7451f11730
google-drive-ocamlfuse: 0.7.2 -> 0.7.21 (#86469)
ocamlPackages.ocamlfuse: 2.7.1_cvs5 -> 2.7.1_cvs6_e35e76b
2020-05-10 21:24:18 +02:00
R. RyanTM
ab3dfc3fb5 tixati: 2.72 -> 2.73 2020-05-10 18:29:10 +00:00
Luke Granger-Brown
5da1393030 deluge: add glib so its hook works.
At the moment, runing `deluge` with the deluge package installed returns
"No GSettings schemas are installed on the system".

After this patch, XDG_DATA_DIRS includes the gsettings-desktop-schemas,
which means the program actually manages to launch.
2020-05-10 19:24:09 +02:00
R. RyanTM
23bacaa090 remmina: 1.4.1 -> 1.4.3 2020-05-10 09:35:19 -07:00
R. RyanTM
9c15de6ea4 suricata: 5.0.2 -> 5.0.3 2020-05-10 09:35:02 -07:00
Daniël de Kok
b1792c41f6 resilio-sync: 2.6.4 -> 2.7.0
Changelog:

https://help.resilio.com/hc/en-us/articles/206216855-Sync-2-x-change-log
2020-05-10 16:01:14 +02:00
Ryan Mulligan
f88bdf383b
Merge pull request #87460 from r-ryantm/auto-update/qbittorrent
qbittorrent: 4.2.2 -> 4.2.5
2020-05-10 06:36:20 -07:00
Jörg Thalheim
24055420f9
Merge pull request #87283 from Luflosi/patch-dino 2020-05-10 14:09:39 +01:00
Michael Weiss
22fef8ebb1
tdesktop: 2.1.2 -> 2.1.4 2020-05-10 15:08:06 +02:00
Michael Weiss
1104de365e
gns3-{gui,server}: 2.2.7 -> 2.2.8 2020-05-10 14:58:38 +02:00
R. RyanTM
35729638c8 qbittorrent: 4.2.2 -> 4.2.5 2020-05-10 02:08:10 +00:00
Luflosi
099bc11d38
dino: allow newer versions of libsignal-protocol-c
The exact version of libsignal-protocol-c used by dino is hard-coded to 2.3.2 because "libsignal-protocol-c has a history of breaking compatibility on the patch level". This prevents libsignal-protocol-c from being updated in https://github.com/NixOS/nixpkgs/pull/83736. Upstream already allows newer versions in the latest git master, so patch the source with this commit. Unfortunately patching doesn't work with git submodules but since the submodule is not used anyways, simply ignore this part of the patch.
2020-05-10 00:35:37 +02:00
Luflosi
5317280ade
ipfs: 0.5.0 -> 0.5.1
https://github.com/ipfs/go-ipfs/releases/tag/v0.5.1
2020-05-09 17:33:34 +02:00
Jörg Thalheim
887295fd2d
treewide: remove the-kenny from maintainers
@the-kenny did a good job in the past and is set as maintainer in many package,
however since 2017-2018 he stopped contributing. To create less confusion
in pull requests when people try to request his feedback, I removed him as
maintainer from all packages.
2020-05-09 10:28:57 +01:00
xiorcale
ccfe14cb3b github username: kjuvi -> xiorcale 2020-05-09 09:08:18 +02:00
Linus Heckemann
9df981d3f4 freerdp: 2.0.0 -> 2.1.0 2020-05-09 09:05:07 +02:00
R. RyanTM
ae15422200 cloudflared: 2020.2.1 -> 2020.3.2 2020-05-09 08:58:22 +02:00
R. RyanTM
1b790c5099 maestral: 0.6.3 -> 0.6.4 2020-05-09 08:56:34 +02:00
Euan Kemp
e61dc85117 k3s: fix build for aarch64
The upstream project already builds and releases for aarch64. This makes
the couple small tweaks that I found necessary for k3s to cross-compile
for aarch64.

I also ran it through nixpkgs-fmt.
2020-05-09 08:37:06 +02:00
Vladimír Čunát
10134fc301
Merge #87066: thunderbird*: 68.7.0 -> 68.8.0 (security)
https://www.thunderbird.net/en-US/thunderbird/68.8.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2020-18/
2020-05-09 08:19:11 +02:00
Christian Mainka
e659bf3ce4 brave: 1.7.92 -> 1.8.95 2020-05-08 18:16:17 +02:00
Michael Raskin
50684f118a
Merge pull request #87264 from prusnak/rfc45
treewide: per RFC45, remove more unquoted URLs
2020-05-08 14:30:09 +00:00
Ryan Mulligan
cd02078e1a
Merge pull request #87215 from matthewbauer/jitsi-x-internet
jitsi: use X-Internet for desktop categories
2020-05-08 07:28:36 -07:00
Pavol Rusnak
6abf4a43ad
treewide: per RFC45, remove more unquoted URLs 2020-05-08 15:20:47 +02:00
Philipp Riegger
ec70d7cbc3 ipfs-migrator: 7 -> 1.5.1 2020-05-08 13:58:22 +02:00
Jörg Thalheim
ddef88772e
Merge pull request #86242 from lordcirth/ipfs05 2020-05-08 10:51:21 +01:00
Jörg Thalheim
11ace01cf2
ipfs: reference correct test 2020-05-08 10:49:10 +01:00
Jörg Thalheim
3e6e4ce55c
ipfs: reference tests 2020-05-08 09:34:42 +01:00
Martin Baillie
9566c742e2
ssm-session-manager-plugin: init at 1.1.61.0
Signed-off-by: Martin Baillie <martin@baillie.email>
2020-05-08 09:58:55 +10:00
Matthew Bauer
807e45f643 jitsi: use X-Internet for desktop categories
avoids error from incorrect category name.
2020-05-07 15:17:09 -05:00
06kellyjac
cef39f9089 terragrunt: 0.23.2 -> 0.23.14
Moved to use go modules build
Deleted old deps.nix file used with dep
2020-05-07 11:24:58 -07:00
Vladimír Čunát
a2d5351b63
Merge #86788: firefox 75.0 -> 76.0 (critical security)
https://www.mozilla.org/en-US/firefox/76.0/releasenotes/
Some of the changes were in master already, but whatever...
2020-05-07 19:57:16 +02:00
Vladimír Čunát
fcc68a43aa
Merge branch 'staging-next'
The nss update is needed for security update of firefox.
For linux platforms only about 1k aarch64 rebuilds are missing;
the diff on Hydra looks OK.  Darwin needs 20k more rebuilds,
but I don't think we want to wait for that.
2020-05-07 19:56:25 +02:00
Jörg Thalheim
e89ceffefb
ipfs: patch shebang in builder script 2020-05-07 15:26:09 +01:00
Tim Steinbach
795564a03d
Merge pull request #81997 from eadwu/vivaldi-snapshot/fix-rpath-libdrm_gbm
vivaldi: include libdrm and libgbm
2020-05-07 08:17:27 -04:00
Mario Rodas
3439ec9695
Merge pull request #87167 from johanot/kubeval-0.15
kubeval: 0.14.0 -> 0.15.0
2020-05-07 06:49:28 -05:00
Johan Thomsen
f150c2bd22 kubeval: 0.14.0 -> 0.15.0
Also, add myself as maintainer
2020-05-07 09:10:55 +02:00
R. RyanTM
720b590281 mpop: 1.4.7 -> 1.4.9 2020-05-06 10:32:30 -07:00
Ryan Mulligan
cd06f640c9
Merge pull request #87087 from r-ryantm/auto-update/psi-plus
psi-plus: 1.4.1086 -> 1.4.1159
2020-05-06 06:10:09 -07:00
R. RyanTM
ffb71c7746 psi-plus: 1.4.1086 -> 1.4.1159 2020-05-06 12:06:47 +00:00
Michael Weiss
69dc7e64ad
tdesktop: 2.1.1 -> 2.1.2 2020-05-06 13:27:54 +02:00
Michael Weiss
f00f6a73df
Merge pull request #87021 from primeos/chromium
chromium: 81.0.4044.129 -> 81.0.4044.138
2020-05-06 13:01:58 +02:00
Andreas Rammhold
5040192913
firefox-bin: 75.0 -> 76.0
Discussion: https://github.com/NixOS/nixpkgs/pull/86788
2020-05-06 11:41:38 +02:00
Andreas Rammhold
5bac4f0213
firefox-esr-68: 68.7.0esr -> 68.8.0esr
Discussion: https://github.com/NixOS/nixpkgs/pull/86788
2020-05-06 11:40:28 +02:00
Christian Kampka
7d2a50a418
kops_1_16: 1.16.1 -> 1.16.2 2020-05-06 09:46:36 +02:00
Christian Kampka
8bcf7f6e41
kops_1_15: 1.15.2 -> 1.15.3 2020-05-06 09:34:35 +02:00
Vladimír Čunát
e8d3c1579b
Merge branch 'staging' into staging-next 2020-05-06 08:22:27 +02:00
Vladimír Čunát
54eb2d1018
Merge branch 'staging-next'
Status on Hydra for linuxes seems good enough:
https://hydra.nixos.org/eval/1585703?filter=linux&compare=1585482&full=#tabs-now-fail
2020-05-06 08:20:05 +02:00
Mario Rodas
5698e34465
Merge pull request #86936 from marsam/update-syncthing
syncthing: 1.4.2 -> 1.5.0
2020-05-05 18:28:02 -05:00
Michael Weiss
dec3d5f39f
chromium: 81.0.4044.129 -> 81.0.4044.138
https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop.html

This update includes 3 security fixes.

CVEs: CVE-2020-6831 CVE-2020-6464
2020-05-06 01:11:53 +02:00
Andreas Rammhold
6ca94ab1ea
Merge pull request #82206 from flokli/afew-3.0.0
afew: 2.0.0 -> 3.0.0
2020-05-05 21:06:50 +02:00
Andreas Rammhold
d9f4f0645c
Merge pull request #81917 from colemickens/nixpkgs-firefox-libva
firefox: wrapper: add libva to libs
2020-05-05 20:21:43 +02:00
taku0
0fd76196f9 thunderbird: 68.7.0 -> 68.8.0 2020-05-06 03:16:27 +09:00
taku0
1016169e71 thunderbird-bin: 68.7.0 -> 68.8.0 2020-05-06 03:12:19 +09:00
Frederik Rietdijk
9875bbae75 Merge master into staging-next 2020-05-05 19:51:09 +02:00
Maximilian Bosch
bc6bad222e
riot-desktop: 1.5.15 -> 1.6.0
https://github.com/vector-im/riot-web/releases/tag/v1.6.0
2020-05-05 14:28:52 +02:00
Maximilian Bosch
b9787479e2
riot-web: 1.5.15 -> 1.6.0
https://github.com/vector-im/riot-web/releases/tag/v1.6.0
2020-05-05 14:28:51 +02:00
leenaars
499b5feac9
Sylk: 2.6.1 -> 2.7.0 (#86796) 2020-05-05 10:33:39 +00:00
Mario Rodas
07f093fb35
syncthing: 1.4.2 -> 1.5.0
Changelog: https://github.com/syncthing/syncthing/releases/tag/v1.5.0
2020-05-05 04:20:00 -05:00
R. RyanTM
d961cd7c1b anydesk: 5.5.4 -> 5.5.5 2020-05-04 19:53:27 -07:00
Jörg Thalheim
176568aa8d
Merge pull request #86501 from LibreCybernetics/upgrade-patchwork 2020-05-04 17:58:01 +01:00
Andreas Rammhold
8996273bee
firefox-devedition-bin: 76.0b4 -> 76.0b8 2020-05-04 17:46:12 +02:00
Andreas Rammhold
f3cc8dc6fa
firefox-esr-68: 68.7.0esr -> 68.8.0esr 2020-05-04 17:29:37 +02:00
Andreas Rammhold
c186bc893f
firefox-beta-bin: 76.0b4 -> 76.0b8 2020-05-04 17:29:14 +02:00
Andreas Rammhold
3911336cc6
firefox-bin: 75.0 -> 76.0 2020-05-04 17:22:59 +02:00
Andreas Rammhold
324e40f0f4
firefox: 75.0 -> 76.0 2020-05-04 16:31:27 +02:00
Peter Hoeg
00d4fd2594
Merge pull request #86726 from r-ryantm/auto-update/qtox
qtox: 1.16.3 -> 1.17.2
2020-05-04 21:10:32 +08:00
mehlon
00a5e1e76f tribler: add desktop file, icons and manpages 2020-05-04 18:21:22 +05:30
Ryan Mulligan
8295c150a3
Merge pull request #86739 from r-ryantm/auto-update/signal-cli
signal-cli: 0.6.6 -> 0.6.7
2020-05-04 05:46:35 -07:00