Commit Graph
40933 Commits
Author SHA1 Message Date
Vladimír Čunát e8b7ccc8f9 Merge #129505: openexr: 2.5.3 -> 2.5.7 (into staging-21.05) 2021-07-09 19:18:00 +02:00
Anderson Torres 5436a1fd65 Merge pull request #128459 from Ma27/backport-sway
[21.05] sway: 1.6 -> 1.6.1, wlroots: 0.13.0 -> 0.14.0
2021-07-08 11:30:06 -03:00
Linus Heckemann 50af195f17 openexr: 2.5.3 -> 2.5.7
Fixes CVE-2021-3598

(cherry picked from commit 094ecab1a1b7245b268248f641e88239abf65f37)
2021-07-07 06:43:41 +00:00
Martin Weinelt 03d3dc1666 libuv: add patch for CVE-2021-22918
> libuv was vulnerable to out-of-bounds reads in the uv__idna_toascii()
> function which is used to convert strings to ASCII. This is called by
> the DNS resolution function and can lead to information disclosures or
> crashes.

https://github.com/libuv/libuv/commit/b7466e31e4bee160d82a68fca11b1f61d46debae

Fixes: CVE-2021-22918
(cherry picked from commit 742b8f71f7e101bf3ecd48f28af9eda67591339e)
2021-07-05 14:49:55 -07:00
Maximilian Bosch 4dab07340d Revert "libdrm: 2.4.105 -> 2.4.106"
This reverts commit edba06511c.
2021-07-02 20:52:55 +02:00
github-actions[bot] 5052d11c95 Merge release-21.05 into staging-next-21.05 2021-07-01 00:02:42 +00:00
Mica Semrick d9461786d3 exiv2: 0.27.3 -> 0.27.4
(cherry picked from commit 492e221ff92150bd7b2a6ba7a919e43f4c4e3d8b)
2021-06-29 21:13:09 +00:00
Alvar Penning 398c74fcd6 olm: 3.2.2 -> 3.2.4
(cherry picked from commit 660be4bfb228e4f3502443598edd25e2ab5304fa)
2021-06-27 16:58:10 +00:00
Michael Weiss bec2f8e481 wlroots: 0.13.0 -> 0.14.0
The new release comes with breaking changes so we temporarily introduce
wlroots_0_13 for packages that don't yet support wlroots 0.14.
For the rest of the packages the required upstream patches for this new
wlroots release are fetched (if feasible).

(cherry picked from commit 203c8edcdac9491912cb21fa9d84392cb6a69eef)
2021-06-26 13:46:17 +02:00
Michael Weiss edba06511c libdrm: 2.4.105 -> 2.4.106
(cherry picked from commit 9057122e0f38fbc3aa3b246550fd1d9efae503e2)
2021-06-26 13:46:16 +02:00
Jonathan Ringer 5299f12e63 Merge branch 'staging-next-21.05' into staging-21.05 2021-06-25 00:15:49 -07:00
Lancelot SIX ac67481429 nettle: 3.7.2 -> 3.7.3
See https://lists.gnu.org/archive/html/info-gnu/2021-06/msg00002.html
for release information.

(cherry picked from commit be77650f3c4c72d32718acbc63be98340b9f795a)
2021-06-23 11:57:37 -07:00
Maximilian Bosch 4432fd7d23 Merge pull request #126594 from NixOS/backport-126551-to-staging-21.05
[Backport staging-21.05] glibc: 2.32-46 -> 2.32-48
2021-06-22 17:40:43 +02:00
Thomas Gerbet 62f818272f spice: 0.14.2 -> 0.15.0
Fixes CVE-2021-20201.

(cherry picked from commit 05c0b157dca604b98d057951715cb01cdfe0e1af)
2021-06-19 07:51:13 +00:00
Sandro d0f7ecb335 Merge pull request #126942 from markuskowa/pr-openblas-avx512
[21.05] openblas: disable AVX512, make optional
2021-06-16 03:24:28 +02:00
Domen Kožar 57606ed0af Merge pull request #126605 from NixOS/backport-125311-to-release-21.05
[Backport release-21.05] pipewire: 0.3.27 -> 0.3.30
2021-06-15 18:44:16 +02:00
Thomas Gerbet df5b0a3a8e sope: 5.0.1 -> 5.1.1
(cherry picked from commit 2e10f973b51c970b6b2aa3f59f8f9501abff80e2)
2021-06-15 14:01:08 +00:00
Markus Kowalewski 95bb2c374f openblas: disable AVX512, make optional
This effectly reverts 383075f38b.

Some AVX512 optimized kernels seem to be broken in openblas.
See https://github.com/NixOS/nixpkgs/issues/124250.

(cherry picked from commit 5946bc724fe4f7f37ba907ae01d851f070fc97e0)
2021-06-15 13:58:20 +02:00
Alyssa Ross cc7a4e5312 openssl: fix Darwin cross infinite recursion
stdenv depends on openssl, and isGNU depends on stdenv.

Thanks-to: sternenseemann <0rpkxez4ksa01gb3typccl0i@systemli.org>
Fixes: https://github.com/NixOS/nixpkgs/issues/126829
(cherry picked from commit 502de3c377ec6a20673c395062b484a1a99c21fd)
2021-06-14 17:06:34 +00:00
Vladimír Čunát 3988964387 sqlite tools: fix download hash after update
Clearly a copy&paste error in commit 14a274763e.  Now it builds.

(cherry picked from commit 34c88a4d5c6e530ac2516b8e54b016696fd8995e)
2021-06-14 08:30:53 +02:00
Artturin 641efce99b nvidia-optical-flow-sdk: 1.0 -> 2.0
(cherry picked from commit 04e8ab8fdf8c8009741a8ebb26e4cd8e2cb6bd61)
2021-06-13 23:04:23 -07:00
Artturin 13d6008df1 opencv: update cuda_opt_flow.patch
(cherry picked from commit e3ec283df10cbe5e87c240d28afd81c72f8226b2)
2021-06-13 23:04:23 -07:00
Jan Solanti c2628780fc pipewire: 0.3.27 -> 0.3.30
(cherry picked from commit c702cc43213dce2573adb924ab9c67522616aea6)
2021-06-11 14:52:30 +00:00
TredwellGit d7dce44057 glibc: 2.32-46 -> 2.32-48
https://sourceware.org/bugzilla/show_bug.cgi?id=27896
https://nvd.nist.gov/vuln/detail/CVE-2021-33574
(cherry picked from commit e58564267b173d51157847eb5453bfa735268604)
2021-06-11 12:42:27 +00:00
Andrew Childs d5f98e8345 glibc: fix build vs host tool confusion
Fixes cross compilation from aarch64-linux -> armv7l-linux

(cherry picked from commit e57b58bd0e292c866f790475dd035ac3e2543dd1)
2021-06-10 05:29:18 +00:00
oxalica 7b7362b5f5 xcb-imdkit: 1.0.2 -> 1.0.3
This fixes an input issue with alacritty/xterm, see https://github.com/fcitx/fcitx5/issues/254

(cherry picked from commit 46ac936b00b1a54a77ffa705c01842d3862f349b)
2021-06-09 08:25:50 +00:00
oxalica 6207e92757 libime: 1.0.3 -> 1.0.7
(cherry picked from commit b951fc0e94d198449d1cf0ca8071ff10ba5f76f4)
2021-06-09 08:25:50 +00:00
Jonathan Ringer 8e20586f52 Merge branch 'staging-next-21.05' into staging-21.05 2021-06-08 12:21:49 -07:00
Rick van Schijndel 20d9ca119b libgudev: support cross-compilation by disabling introspection and vala
(cherry picked from commit 05aa68850cc55bad5a1829f0bd3995c82a8029db)
2021-06-08 08:54:18 +02:00
Sandro ff5802403d Merge pull request #125877 from NixOS/backport-125316-to-release-21.05 2021-06-06 03:32:43 +02:00
Sandro 8d05832f26 Update pkgs/development/libraries/box2d/default.nix
(cherry picked from commit 8fc57b0632120aad0ca9bbd3165616f9db2d06bd)
2021-06-06 00:08:22 +00:00
Ricardo M. Correia 186f49f5eb box2d: fix hash
The upstream tarball changed. Specifically, files now extract onto a
box2d-2.3.1/ directory rather than Box2D-2.3.1/. The files themselves
(and their contents) seem to remain the same.

(cherry picked from commit a8b85f6d68d4fc96a0f8473aa38a3e773b82c4f0)
2021-06-06 00:08:22 +00:00
Sandro a0940c6ee4 Update pkgs/development/libraries/sundials/default.nix
(cherry picked from commit 248748e0408d1d9a8d43e4df0dc18bfe297c4887)
2021-06-06 00:08:20 +00:00
Ricardo M. Correia c7d7f1881e sundials: fix download URL and hash
The old URL doesn't seem to be available anymore (fails with 403
Forbidden error).

The tarball in the new URL contains a few changes from the old one, so
the hash has changed.

Specifically, only the following files have changed:

sundials-5.7.0/doc/arkode/ark_examples.pdf
sundials-5.7.0/doc/arkode/ark_guide.pdf
sundials-5.7.0/doc/cvode/cv_examples.pdf
sundials-5.7.0/doc/cvode/cv_guide.pdf
sundials-5.7.0/doc/cvodes/cvs_examples.pdf
sundials-5.7.0/doc/cvodes/cvs_guide.pdf
sundials-5.7.0/doc/ida/ida_examples.pdf
sundials-5.7.0/doc/ida/ida_guide.pdf
sundials-5.7.0/doc/idas/idas_examples.pdf
sundials-5.7.0/doc/idas/idas_guide.pdf
sundials-5.7.0/doc/kinsol/kin_examples.pdf
sundials-5.7.0/doc/kinsol/kin_guide.pdf

(cherry picked from commit 4ab604c4c436505c98eb11e4a5c0323a1a835279)
2021-06-06 00:08:19 +00:00
Thomas Gerbet 2ab1f8ded8 gupnp: apply the patch for CVE-2021-33516
Fixes CVE-2021-33516.
https://discourse.gnome.org/t/security-relevant-releases-for-gupnp-issue-cve-2021-33516/6536

(cherry picked from commit 78d2a14bb8ee82f7f7d227ab473646460d874159)
2021-06-05 21:33:52 +00:00
Vladimír Čunát 7b686ba07b Merge branch 'release-21.05' into staging-21.05 2021-06-05 07:30:40 +02:00
Sandro 503638304e Merge pull request #125526 from wizeman/u/fix-libraspberrypi-url-backport
[21.05] libraspberrypi: fix URL
2021-06-04 17:18:22 +02:00
Martin Weinelt 715c85757b polkit: Fix local privilege escalation vulnerability
Fixes a local privilege escalation using polkit_system_bus_name_get_creds_sync()

Fixes: CVE-2021-3560
(cherry picked from commit 26ac1d5db953292d78f0585dd8baccd9a36a44a4)
2021-06-04 00:36:44 +00:00
Ricardo M. Correia 3b96c770a8 libraspberrypi: fix URL
(cherry picked from commit 3915d2fd27e2d8a62cff752bd1e4146317c76f31)
2021-06-03 18:08:13 +02:00
Martin Weinelt bdf95a994e lasso: Fix signature verification in AuthnResponse messages
Fixes: CVE-2021-28091
2021-06-02 16:49:11 +02:00
Sandro 790d9970f1 Update pkgs/development/libraries/editline/default.nix
(cherry picked from commit c9149241a0abbfadfb9fc9b26b0bd539e47f7da0)
2021-06-01 16:35:31 +00:00
oxalica d9a0f81c7d editline: add patch to fix Home and End key in tmux
`nix repl` is affected by this usability issue.

(cherry picked from commit f0d26341adad9207d57edbb80736126ba2a295f2)
2021-06-01 16:35:31 +00:00
oxalica cc59369933 editline: 1.17.0 -> 1.17.1
(cherry picked from commit c63268512b513cc31b2c55376245d9d8d1f0099a)
2021-06-01 16:35:30 +00:00
Ben Wolsieffer 8c6a3a60e5 libccd: fix pkgconfig file paths
libccd has the common bug of assuming CMAKE_INSTALL_*DIR is relative. I have
submitted the fix upstream, but don't have much hope of getting it merged
because there have been no updates since 2018.

(cherry picked from commit 3d2092ab58fe83e89a3162728e9d4b733295b561)
2021-06-01 16:06:26 +00:00
Konstantin Alekseev 7f0f0b2807 sqlite: 3.35.2 -> 3.35.5
(cherry picked from commit 3c1bcd240bb437680b69775d5c324449a02dd135)
2021-05-31 18:19:48 -07:00
Jonathan Ringer 7b601ada77 Merge remote-tracking branch 'origin/release-21.05' into staging-next-21.05 2021-05-31 12:44:56 -07:00
Robert Schütz 6cac8dd5d9 libxlsxwriter: 1.0.5 -> 1.0.6
https://github.com/jmcnamara/libxlsxwriter/releases/tag/RELEASE_1.0.6
(cherry picked from commit 5d873fde2352061fa487e7c4b73c0d1f840c77c2)
2021-05-31 10:15:28 +00:00
SCOTT-HAMILTON 91efaf3393 libiio: fix build with wrong libxml2 find_package
Co-authored-by: Dmitry Kalinkin <dmitry.kalinkin@gmail.com>
(cherry picked from commit 660c4a822c1631016060ab3420ae467dabaa508e)
2021-05-31 02:40:27 -04:00
Dmitry Kalinkin b0e7f01080 arrow-cpp: 4.0.0 -> 4.0.1
(cherry picked from commit cff04883e8c21fe614dad85a96b3da93909eb8c8)
2021-05-31 00:02:29 +00:00
Vladimír Čunát 013a9ad03b Merge branch 'release-21.05' into staging-21.05 2021-05-30 20:21:58 +02:00