public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
254,121 Commits 1 Branch 0 Tags
1431c3cc601df3f2f10389e2a8fc4869ebb3bdd5
Commit Graph
254121 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Red Davies 1431c3cc60 cassandra_3_0: 3.0.17 -> 3.0.23 
Reason: Fixes CVE-2020-13946 Apache Cassandra RMI Rebind Vulnerability

Description:
It is possible for a local attacker without access to the Apache Cassandra
process or configuration files to manipulate the RMI registry to perform a
man-in-the-middle attack and capture user names and passwords used to access
the JMX interface. The attacker can then use these credentials to access
the JMX interface and perform unauthorised operations.

Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables
this issue to be exploited remotely.

3.0.x users should upgrade to 3.0.22
 2020-11-24 21:21:56 -05:00
Sandro 3b4fcbb5d1 Merge pull request #103523 from r-ryantm/auto-update/rssguard 
rssguard: 3.7.2 -> 3.8.0
 2020-11-24 02:59:45 +01:00
adisbladis 6847a5c12d referencesByPopularity: Don't use buildPackages at call-site 
It's cleaner to reference buildPackages directly in
build-support/docker directly.
 2020-11-24 02:55:40 +01:00
adisbladis bd4c7fdff4 Merge pull request #104729 from adisbladis/references-by-popularity-cross 
referencesByPopularity: Fix cross compilation
 2020-11-24 02:53:45 +01:00
Sandro 5917193cef Merge pull request #103594 from r-ryantm/auto-update/yafaray-core 
yafaray-core: 3.5.0 -> 3.5.1
 2020-11-24 02:30:54 +01:00
Sandro 27441efe5c Merge pull request #103511 from r-ryantm/auto-update/rabbitmq-server 
rabbitmq-server: 3.8.8 -> 3.8.9
 2020-11-24 02:21:42 +01:00
Sandro 6f29643d35 Merge pull request #97530 from reedrw/noisetorch-072 2020-11-24 02:16:57 +01:00
Sandro 3da89983fd Merge pull request #103590 from r-ryantm/auto-update/workcraft 
workcraft: 3.3.0 -> 3.3.1
 2020-11-24 02:07:43 +01:00
adisbladis c3e79669db referencesByPopularity: Fix cross compilation 2020-11-24 02:05:11 +01:00
Sandro d60ce0c8c8 Merge pull request #103686 from r-ryantm/auto-update/flrig 
flrig: 1.3.51 -> 1.3.52
 2020-11-24 02:01:35 +01:00
Sandro 5e3b8db59d Merge pull request #103684 from r-ryantm/auto-update/geekbench 
geekbench: 5.2.5 -> 5.3.0
 2020-11-24 02:01:15 +01:00
Sandro b3f5ff2005 Merge pull request #103703 from r-ryantm/auto-update/gmsh 
gmsh: 4.6.0 -> 4.7.0
 2020-11-24 01:57:36 +01:00
Sandro Jäckel abfd29cace pythonPackages.asyncssh: Switch PyTestCheckHook, disable failing tests 2020-11-23 16:29:49 -08:00
Joshua Skrzypek cde89e3ecf python3Packages.pyspark: Fix out of date postPatch 
Pyspark switched to pinning py4j==0.10.9 with v3.0.0 - see this commit:
https://github.com/apache/spark/\
   commit/fc4e56a54c15e20baf085e6061d3d83f5ce1185d

This meant that since the bump to pyspark v3.0.0 - in this commit:
https://github.com/NixOS/nixpkgs/\
   commit/5181547ae6624b462919a806c4d0888e6e4630f4 -
the patch was no longer matching on the 'py4j==0.10.7' string that was
working previously.

The failing patch went unnoticed previously because the version of py4j
pinned by pyspark>=3.0.0 was the same as the py4j provided by nixpkgs.

However, a recent PR (#101636) bumped the version of py4j to 0.10.9.1 in
this commit:
https://github.com/NixOS/nixpkgs/\
   commit/43a91282d66223c5cb978d53fbe1033f56dd7f2b
which caused the version pinned by pyspark to no longer match the
version provided by nixpkgs. FWIW, @jonringer flagged this issue on
another PR that tried to bump py4j: #100623.

My solution here was to upgrade the patch's target string to match the
version found in pyspark's current setup.py.
 2020-11-23 16:19:14 -08:00
Jonathan Ringer cc5a3cb547 pipreqs: use python3 2020-11-23 16:18:40 -08:00
Sandro 11ab3049e9 Merge pull request #104711 from sikmir/josm 
josm: 17084 → 17329
 2020-11-24 01:17:38 +01:00
Sandro 9f4cd47a0d Merge pull request #103827 from r-ryantm/auto-update/python3.7-gssapi 
python37Packages.gssapi: 1.6.9 -> 1.6.10
 2020-11-24 01:06:06 +01:00
Sandro a47cd7370c Merge pull request #103777 from r-ryantm/auto-update/gnomecast 
gnomecast: 1.4.1 -> 1.9.11
 2020-11-24 01:00:31 +01:00
Sandro e2d8e85661 Merge pull request #104706 from rycee/bump/trash-cli 
trash-cli: 0.20.11.7 -> 0.20.11.23
 2020-11-24 00:56:00 +01:00
Sandro c9a9197078 Merge pull request #102269 from pkern/terraria 
terraria-server: 1.4.0.5 -> 1.4.1.2
 2020-11-24 00:17:47 +01:00
Sandro dde4f985c0 Merge pull request #103879 from r-ryantm/auto-update/jackett 
jackett: 0.16.2131 -> 0.16.2152
 2020-11-24 00:09:15 +01:00
Sandro 37f04ecad7 Merge pull request #103863 from r-ryantm/auto-update/doppler 
doppler: 3.16.1 -> 3.17.0
 2020-11-24 00:00:40 +01:00
Sandro 9d4d20316e Merge pull request #103899 from r-ryantm/auto-update/photoflare 
photoflare: 1.6.5 -> 1.6.6
 2020-11-23 23:55:49 +01:00
Sandro 15dc396ae5 Merge pull request #103862 from r-ryantm/auto-update/dolt 
dolt: 0.21.4 -> 0.22.0
 2020-11-23 23:51:20 +01:00
Sandro 72d811d858 Merge pull request #103922 from r-ryantm/auto-update/shaarli 
shaarli: 0.11.1 -> 0.12.1
 2020-11-23 23:33:02 +01:00
Sandro 0505cde31b Merge pull request #103915 from r-ryantm/auto-update/rpm-ostree 
rpm-ostree: 2020.7 -> 2020.8
 2020-11-23 23:24:22 +01:00
Sandro eacf36e6d7 Merge pull request #103923 from r-ryantm/auto-update/sickgear 
sickgear: 0.22.15 -> 0.23.0
 2020-11-23 23:23:31 +01:00
Sandro 6861bc093f Merge pull request #103924 from r-ryantm/auto-update/sigil 
sigil: 1.3.0 -> 1.4.0
 2020-11-23 23:22:58 +01:00
Sandro 56fc158242 Merge pull request #103967 from jojosch/dbeaver-7.2.5 
dbeaver: 7.2.4 -> 7.2.5
 2020-11-23 23:21:33 +01:00
Florian Klink bbf3c9483b Merge pull request #104520 from Izorkin/wsdd 
wsdd: init at 0.6.2
 2020-11-23 23:18:23 +01:00
Nikolay Korotkiy f54fa91b9a josm: 17084 → 17329 2020-11-24 01:17:39 +03:00
Sandro 5ba79b8cf4 Merge pull request #103296 from r-ryantm/auto-update/python3.7-genanki 
python37Packages.genanki: 0.8.1 -> 0.9.0
 2020-11-23 23:16:18 +01:00
Sandro 8b65b642b1 Merge pull request #103227 from Mazurel/master 2020-11-23 23:09:50 +01:00
06kellyjac f7876c6bbf bat: 0.16.0 -> 0.17.0 2020-11-24 08:03:59 +10:00
Sandro 9d3ab08ce6 Merge pull request #103921 from r-ryantm/auto-update/seaweedfs 
seaweedfs: 2.09 -> 2.10
 2020-11-23 22:59:21 +01:00
Sandro edcd5cc798 Merge pull request #103253 from StephenWithPH/add-las-tools 2020-11-23 22:56:56 +01:00
Ryan Mulligan 213cf1aaea Merge pull request #104562 from r-ryantm/auto-update/obsidian 
obsidian: 0.9.11 -> 0.9.15
 2020-11-23 13:38:26 -08:00
Sandro 0f96ab0a5f Merge pull request #103937 from buffet/fix-kak-prelude-path 
kak-prelude: Fix installation path
 2020-11-23 22:28:37 +01:00
Timo Kaufmann e4af85f1d8 Merge pull request #104476 from refnil/pynac 
pynac: use python3 instead of python2
 2020-11-23 22:26:38 +01:00
Sandro 4b481d9b9f Merge pull request #102516 from NieDzejkob/sumtypes 
pythonPackages.sumtypes: init at 0.1a5
 2020-11-23 22:26:14 +01:00
Sandro 8451b563e8 Merge pull request #98624 from NieDzejkob/rgbds-maint 
rgbds: add NieDzejkob as maintainer
 2020-11-23 22:03:35 +01:00
Robert Helgesson aeadb4c3f5 trash-cli: 0.20.11.7 -> 0.20.11.23 2020-11-23 22:03:13 +01:00
Sandro d06276eb8d Merge pull request #104698 from veprbl/pr/yed_mark_broken 
yed: mark as broken if jre.gtk3 is not available
 2020-11-23 21:49:42 +01:00
Maximilian Bosch 22acd9d236 element-desktop: 1.7.13 -> 1.7.14 
https://github.com/vector-im/element-desktop/releases/tag/v1.7.14
 2020-11-23 21:48:54 +01:00
Maximilian Bosch b741501c31 element-web: 1.7.13 -> 1.7.14 
https://github.com/vector-im/element-web/releases/tag/v1.7.14
 2020-11-23 21:48:54 +01:00
Sandro 0ea1c7d282 Merge pull request #104033 from r-ryantm/auto-update/clipgrab 
clipgrab: 3.8.15 -> 3.9.2
 2020-11-23 21:42:52 +01:00
Sandro 9792e460ac Merge pull request #104044 from beardhatcode/master 
languagetool: 5.0 -> 5.1
 2020-11-23 21:37:28 +01:00
Ryan Mulligan a9122bb605 Merge pull request #104643 from r-ryantm/auto-update/eternal-terminal 
eternal-terminal: 6.0.11 -> 6.0.13
 2020-11-23 11:58:19 -08:00
Martin Weinelt 9ac42658f9 dash: add patch to prevent code execution when noexec is set 
Dashs noexec flag `-n` did not work as documented, which could result in
code being inadvertently executed.
 2020-11-23 11:57:29 -08:00
Ryan Mulligan 97597f09c0 Merge pull request #104547 from r-ryantm/auto-update/indilib 
indilib: 1.8.6 -> 1.8.7
 2020-11-23 11:56:33 -08:00