Commit Graph

154684 Commits

Author SHA1 Message Date
Philipp Middendorf
d2608d29a2 black: 18.6b4 -> 18.9b0 (#47914) 2018-10-06 15:19:38 +02:00
Andreas Rammhold
248ed3575c tor-browser-bundle-bin: 8.0.1 -> 8.0.2
Update to latest version due to security updates and 8.0.1 not being
available on the mirrors anymore.

Release notes: https://blog.torproject.org/new-release-tor-browser-802
2018-10-06 14:49:19 +02:00
Renaud
e82162c262
Merge pull request #47750 from r-ryantm/auto-update/mtools
mtools: 4.0.18 -> 4.0.19
2018-10-06 12:58:35 +02:00
Renaud
d8e36e5854
Merge pull request #47825 from r-ryantm/auto-update/acpica-tools
acpica-tools: 20180810 -> 20180927
2018-10-06 12:47:58 +02:00
Renaud
e4a7c567e3
Merge pull request #47817 from r-ryantm/auto-update/dar
dar: 2.5.16 -> 2.5.17
2018-10-06 12:42:51 +02:00
Renaud
d27fc43fc6
Merge pull request #47607 from mbode/aws-rotate-key_1_0_2
aws-rotate-key: 1.0.0 -> 1.0.3
2018-10-06 12:34:42 +02:00
Maximilian Bode
1cfe58e822 aws-rotate-key: 1.0.0 -> 1.0.3 2018-10-06 11:41:54 +02:00
Jörg Thalheim
2936d1051e
Merge pull request #47951 from samueldr/auto/dbeaver/nixpkgs-unstable/5.2.1
dbeaver: 5.2.0 -> 5.2.1
2018-10-06 08:03:26 +01:00
Will Dietz
23e95864eb
Merge pull request #47954 from dtzWill/update/iosevka-2.0.1
iosevka-bin: 2.0.0 -> 2.0.1
2018-10-05 23:18:54 -05:00
Will Dietz
003c20e02c
Merge pull request #47554 from dtzWill/update/light-1.2
light: 1.1.2 -> 1.2, use new udev support instead of setuid wrapper.
2018-10-05 23:15:44 -05:00
Matthew Bauer
bd3c840301
Merge pull request #46964 from florianjacob/systemd-assert-value-tostring
nixos/systemd-lib: fix assertValueOneOf
2018-10-05 23:00:41 -05:00
Matthew Bauer
9b968c8305
Merge pull request #46971 from r-ryantm/auto-update/proj
proj: 4.9.3 -> 5.2.0
2018-10-05 23:00:12 -05:00
Matthew Bauer
93834fe194
Merge pull request #47230 from bhipple/fix/licenses
Remove dead code from stdenv check-meta license logic
2018-10-05 22:58:27 -05:00
Matthew Bauer
013bded602
Merge pull request #47911 from alyssais/webhook
webhook: init at 2.6.8
2018-10-05 22:55:14 -05:00
Matthew Bauer
ab532bb46a
Merge pull request #46219 from r-ryantm/auto-update/parity-ui
altcoins.parity-ui: 0.2.8 -> 0.3.4
2018-10-05 22:54:29 -05:00
Matthew Bauer
907afd17f9
Merge pull request #46068 from azazel75/alertmanager-flags
Prometheus Alertmanager: Allow the definition of extra options on commandline
2018-10-05 22:52:48 -05:00
Matthew Bauer
91078ee339
Merge pull request #46106 from NickHu/psd
profile-sync-daemon: 5.53 -> 6.33
2018-10-05 22:51:59 -05:00
Matthew Bauer
54c0a2a50e
Merge pull request #46270 from r-ryantm/auto-update/htslib
htslib: 1.7 -> 1.9
2018-10-05 22:49:14 -05:00
Matthew Bauer
33d24042d4
Merge pull request #46443 from bobvanderlinden/pr-test-upnp
Miniupnpd and bittorrent improvements
2018-10-05 22:48:24 -05:00
Matthew Bauer
357d32e2b3
Merge pull request #46459 from volth/volth-patch-3
nixos/initrd-network: multiple DHCP fixes
2018-10-05 22:47:45 -05:00
Matthew Bauer
bb0c421ca1
Merge pull request #46552 from ramirez7/feature/buildGoPackage-doCheck
Allow doCheck config of buildGoPackage
2018-10-05 22:45:24 -05:00
Matthew Bauer
e78eacd6cd
Merge pull request #46770 from jluttine/carp-init
carp: init at unstable-2018-09-15
2018-10-05 22:43:05 -05:00
Matthew Bauer
deee27973e
Merge pull request #46720 from baldo/android-platform-tools
android-platform-tools: 26.0.2 -> 28.0.1
2018-10-05 22:42:30 -05:00
Matthew Bauer
751dc01977
Merge pull request #46649 from brainrape/patch-1
Increase Virtualbox disk image size
2018-10-05 22:42:06 -05:00
Matthew Bauer
ef7d2215a5
Merge pull request #46856 from dasJ/tt_rss_uid
nixos/tt_rss: Give a proper UID
2018-10-05 22:41:27 -05:00
Matthew Bauer
a0a7da8781
Merge pull request #46859 from ju1m/dovecot
dovecot: allow sasl_bind=yes in the LDAP driver.
2018-10-05 22:41:16 -05:00
Matthew Bauer
e4a6288b75
Merge pull request #46863 from siers/link-grammar
link-grammar: init at 5.5.0
2018-10-05 22:40:48 -05:00
Matthew Bauer
3e349294b4
Merge pull request #46927 from r-ryantm/auto-update/xorriso
xorriso: 1.4.8 -> 1.5.0
2018-10-05 22:39:40 -05:00
Matthew Bauer
e8957b5a36
Merge pull request #46942 from r-ryantm/auto-update/wireless-regdb
wireless-regdb: 2018.05.31 -> 2018.09.07
2018-10-05 22:39:15 -05:00
Matthew Bauer
c4f344ac44
Merge pull request #47291 from veprbl/pr/xfitter_init
xfitter: init at 2.0.0
2018-10-05 22:38:09 -05:00
Matthew Bauer
5e32c22611
Merge pull request #47287 from rokk4/ssocr
ssocr: init at 2018-08-11
2018-10-05 22:37:42 -05:00
Matthew Bauer
505b7e23c3
Merge pull request #47315 from tobiasBora/master
signal-desktop: enable notifications
2018-10-05 22:36:46 -05:00
Matthew Bauer
0a5b52e579
Merge pull request #47339 from r-ryantm/auto-update/agda-stdlib
AgdaStdlib: 0.16 -> 0.16.1
2018-10-05 22:36:00 -05:00
Matthew Bauer
70faf056b2
Merge pull request #47349 from charles-dyfis-net/sbsigntool-0.9.1
sbsigntool: 0.5 -> 0.9.1
2018-10-05 22:35:46 -05:00
Matthew Bauer
8dccd8cd62
Merge pull request #47357 from coreyoconnor/firefox-no-update
firefox: disable auto updates using distribution policies.
2018-10-05 22:35:16 -05:00
Matthew Bauer
0421891aaa
Merge pull request #47589 from vbgl/coq-coqprime-init
coqPackages.coqprime: init at 8.7.2 & 8.8
2018-10-05 22:33:15 -05:00
Matthew Bauer
673a63875d
Merge pull request #47593 from e-user/pkgs/snyk-1.99.1
snyk: init at 1.99.1
2018-10-05 22:33:02 -05:00
Will Dietz
03d4b5aeb3 iosevka-bin: 2.0.0 -> 2.0.1 2018-10-05 22:29:03 -05:00
Samuel Dionne-Riel
2012860e7e dbeaver: 5.2.0 -> 5.2.1 2018-10-05 22:37:28 -04:00
Florian Klink
02b0836d42 ghostscript: update hash (#47946)
I previously didn't update the hash, so was still building ghostscript-9.24
(which explained why docs were still from 9.24)

The ICC profile validation patch from #47937 is included in 9.25, so we
can strip it from the list of patches.

cc @xeji
2018-10-06 01:54:26 +02:00
Andreas Rammhold
938d98ebd5
Merge pull request #47937 from flokli/ghostscript-icc-profile-validation
ghostscript: include icc profile validation patch
2018-10-06 00:47:49 +02:00
Florian Klink
3f65f10982 ghostscript: 9.24 -> 9.25 (#47934)
Highlights in this release include:

This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional security issues over the recent 9.24 release.

CVE-2018-16802
CVE-2018-17183

Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources.

Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits.
PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid these issues.

As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files.

IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available as its own package separately from Ghostscript (and MuPDF).

The usual round of bug fixes, compatibility changes, and incremental improvements.
2018-10-06 00:47:08 +02:00
Philip Nelson
3a0fbe3cbe youtube-dl: 2018.09.26 -> 2018.10.05 (#47940) 2018-10-06 00:36:03 +02:00
Samuel Dionne-Riel
82d1bf9691 nixos/doc: Updates release date for 18.09 2018-10-05 18:32:42 -04:00
Ben Gamari
58a02af417 qpdf: Drop CVE-2018-9918.patch (#47935)
This has been merged upstream in 8.2.1.
2018-10-06 00:30:49 +02:00
Samuel Dionne-Riel
29b479eb72 README: 18.03 -> 18.09 2018-10-05 18:23:57 -04:00
Samuel Dionne-Riel
31b1553880
Merge pull request #47575 from samueldr/1809/release-notes
Updates 18.09 release notes for release.
2018-10-05 18:17:04 -04:00
Edmund Wu
9a57e00a36 ghostscript: include icc profile validation patch
See https://github.com/apple/cups/issues/5394

closes #47193, #46216

source url
http://git.ghostscript.com/?p=ghostpdl.git;a=patch;h=bc3df0773fcc
contains invalid characters, which is why we don't fetchpatch.

(cherry picked from commit 2aa750694e2e0d77bf14e3145c4999b6bcee25b0)
2018-10-05 23:20:00 +02:00
Andreas Rammhold
5acda907bb
Merge pull request #47924 from edef1c/git-2.19.1
git: 2.19.0 -> 2.19.1 (CVE-2018-17456)
2018-10-05 22:11:11 +02:00
edef
5cdecca8b7 git: 2.19.0 -> 2.19.1 (CVE-2018-17456) 2018-10-05 18:36:08 +00:00