Commit Graph
100 Commits
Author SHA1 Message Date
Robert Scott c5911744de Merge pull request #96220 from r-ryantm/auto-update/alembic
alembic: 1.7.13 -> 1.7.14
2020-09-01 00:32:15 +01:00
Robert Scott abfafe8681 Merge pull request #96416 from nagisa/tracy071
tracy: 0.7 → 0.7.1
2020-08-31 23:07:18 +01:00
Robert Scott ba788d6086 Merge pull request #96241 from fatpat/chirp
chirp: 20200430 -> 20200807
2020-08-31 22:48:01 +01:00
Robert Scott cc73d39c82 Merge pull request #96275 from jonasnick/update-lnd
lnd: 0.10.3 -> 0.11.0
2020-08-31 22:39:42 +01:00
Robert Scott 707bed528c Merge pull request #96299 from r-ryantm/auto-update/gensio
gensio: 2.1.3 -> 2.1.4
2020-08-31 22:28:35 +01:00
Robert Scott f2e3b79750 pythonPackages.howdoi: 2.0.3 -> 2.0.4, fix build
had to disable the tests (hopefully temporarily) because of missing
page_cache directory in release tarball.

removed no-longer-needed requests-cache dependency
2020-08-31 11:44:51 -07:00
Robert Scott 6bdad12b56 pythonPackages.keep: init at 2.9 2020-08-31 11:44:51 -07:00
Robert Scott 65c68873e3 Merge pull request #96759 from r-ryantm/auto-update/ydiff
ydiff: 1.1 -> 1.2
2020-08-31 17:46:02 +01:00
Robert Scott 5f40ba47d5 pythonPackages.pint: add missing dependencies
importlib-metadata and packaging appear to have been falsely satisfied
by the inclusion of pytestCheckHook in checkInputs. this can be
demonstrated by attempting to build this package with doCheck = false.

also removed the isPy27 clause as package no longer seems to support <3.6
anyway now.
2020-08-30 09:22:37 -07:00
Robert Scott 4b3f8bd214 pythonPackages.blis: add missing dependency numpy
blis' numpy dependency seems to have been falsely satisfied by its
inclusion in checkInputs, whereas this seems to actually be an install
dependency. this can be demonstrated by attempting to build this package
with doCheck = false and watching it fail.

also removed cython from checkInputs as it's already in nativeBuildInputs
2020-08-29 20:55:51 +01:00
Robert Scott 9292dbf7fa ghostscript: add patch for CVE-2020-15900 2020-08-24 11:57:06 +02:00
Robert Scott d57c5a876b Merge pull request #94030 from risicle/ris-cloudfoundry-cli-7.0.1
cloudfoundry-cli: 6.51.0 -> 7.0.1
2020-08-23 23:45:06 +01:00
Robert Scott 399d855110 cloudfoundry-cli: 6.51.0 -> 7.0.1 2020-08-23 22:05:25 +01:00
Robert Scott 40ae9e79dd Merge pull request #87227 from risicle/ris-git-fast-export-200213
gitAndTools.git-fast-export: 190107 -> 200213, fix
2020-08-23 14:12:33 +01:00
Robert Scott b91ad42896 gitAndTools.git-fast-export: add installCheckPhase
this creates and converts a simple hg repository - should stop us
inadvertently breaking this package.
2020-08-23 14:08:03 +01:00
Robert Scott 6b1e2a51aa gitAndTools.git-fast-export: 190107 -> 200213, fix
fixing involves providing it with mercurial_4 (and implicitly python27 -
current released fast-export doesn't support py3 yet) and adding git to
the wrapped PATH. this shouldn't be a runtime-resolved dependency.
2020-08-23 12:13:14 +01:00
Robert Scott 45f21cbcfc nghttp2: 1.40.0 -> 1.41.0 2020-08-20 09:11:45 +00:00
Robert Scott 1fb0a04c12 sigil: 0.9.14 -> 1.3.0
addressing CVE-2019-14452

package still needs some proper maintenance love e.g.
elimination of vendored libs. this will have to do
for now.
2020-08-15 21:51:56 +01:00
Robert Scott 9be02e14df Merge pull request #94206 from r-ryantm/auto-update/python2.7-tblib
python27Packages.tblib: 1.6.0 -> 1.7.0
2020-08-15 16:56:48 +01:00
Robert Scott 8cb02225de pythonPackages.asyncpg: 0.20.1 -> 0.21.0 2020-08-15 12:29:00 +01:00
Robert Scott 5b072a4fc0 pure-ftpd: add patches for CVE-2020-9274, CVE-2020-9365
Fixes merged to upstream's master but no release yet.
2020-08-12 22:19:13 +01:00
Robert Scott 56f2d53f26 pythonPackages.bsdiff4: init at 1.2.0 2020-08-03 14:39:36 -07:00
Robert Scott f26cbd0caa licenses: add bsdProtection
see https://spdx.org/licenses/BSD-Protection.html
2020-08-03 14:39:36 -07:00
Robert Scott 91c4357388 pythonPackages.django_silk: 3.0.4 -> 4.0.1
update meta.homepage too
2020-07-28 12:15:34 -07:00
Robert Scott fd5c0b94b2 Merge pull request #76960 from risicle/ris-hal-hardware-analyzer
hal-hardware-analyzer: init at 2.0.0
2020-07-21 22:08:05 +01:00
Robert Scott d2d921b763 hal-hardware-analyzer: init at 2.0.0 2020-07-20 22:35:00 +01:00
Robert Scott e9115e79c9 igraph: enable for darwin 2020-07-20 20:25:59 +01:00
Robert Scott ede2e00c9f cpython: expose gdb libpython.py
used together with cpython's debugging symbols, this allows inspection of
the python stack of cpython programs in gdb. this file is a little
different from the rest of the python output by this package, in that it's
not intended to be run by the current python being built, instead by the
python being used by the gdb in question, which could be very different.
therefore placed in its own, but hopefully logical & predictable location.
2020-07-15 19:39:19 +01:00
Robert Scott 6d19ab339a cpython: set separateDebugInfo 2020-07-13 22:30:55 +01:00
Robert Scott f499144c32 Merge pull request #91987 from r-ryantm/auto-update/afl
afl: 2.56b -> 2.57b
2020-07-04 14:25:10 +01:00
Robert Scott c6c5c927ec Merge pull request #90325 from r-ryantm/auto-update/cloudfoundry-cli
cloudfoundry-cli: 6.46.1 -> 6.51.0
2020-06-14 14:39:57 +01:00
Robert Scott d0af797a50 Merge pull request #88019 from risicle/ris-aflplusplus-2.65c
aflplusplus: 2.64c -> 2.65c
2020-06-04 21:10:58 +01:00
Robert Scott d478d7a65b aflplusplus: remove clang_9 and llvm_9 specificity
i've successfully built this with llvm 8 and 6 now - make this easier to
override
2020-05-16 22:13:56 +01:00
Robert Scott 5f19ec3bc4 aflplusplus: don't run unit tests with cmocka
i don't think running the unit tests really adds anything given that we
have proper integration tests working, and it just introduces another
build dependency and possibility for spurious breakage.
2020-05-16 22:07:46 +01:00
Robert Scott 4eb8f4ece3 aflplusplus: 2.64c -> 2.65c 2020-05-16 22:05:02 +01:00
Robert Scott e153004960 Merge pull request #85950 from Mindavi/aflplusplus/2.64c
aflplusplus: 2.59c -> 2.64c
2020-05-06 23:17:04 +01:00
Robert Scott 1985c6b9d5 afl: fix afl-clang-fast++ by making it a copy of afl-clang-fast, not a symlink
a symlink gets skipped by wrapProgram and this ends up confusing the nix
cc wrapper's cpp mode detection
2020-04-25 10:04:06 -05:00
Robert Scott 324dd67013 Merge pull request #76645 from risicle/ris-aflplusplus
aflplusplus: init at 2.59c
2020-04-23 22:28:12 +01:00
Robert Scott fbc11b4f02 aflplusplus: init at 2.59c 2020-04-18 19:52:11 +01:00
Robert Scott 959e9244d9 nghttp2: add python bindings as pythonPackages.nghttp2
it's tricky to enable in nghttp2's default build, however, because it needs
to be usable by curl, a very core nix package, and we get cyclical
dependencies if we add python to its requirements. having it available as
a separate build is better than nothing, though.
2020-03-29 22:32:26 +01:00
Robert Scott f77e057cda pythonPackages.pysaml2: fix tests with fixed & now-expired timestamps
these only expired (and upstream only seem to have noticed) today
2020-02-11 14:08:30 -08:00
Robert Scott 8817036a31 pythonPackages.capstone: 3.0.5.post1 -> 4.0.1, redesign as wrapper package around main capstone package
this allows us to keep the two packages in sync and handle overrides more
flexibly
2020-02-10 20:29:01 +01:00
Robert Scott a8c0c21f78 capstone: enable for darwin, enable tests & fix pkg-config output
turns out capstone.pc is generated during the buildPhase, so needs
PREFIX set here too for it to be correct
2020-02-10 20:29:01 +01:00
Robert Scott 55ace3be68 pythonPackages.pysaml2: 4.9.0 -> 5.0.0 (security)
addressing CVE-2020-5390. disabled for python 2.7 as support is being
removed from this release on.
2020-02-09 17:48:14 -08:00
Robert Scott db8434a694 libexif: add patch for CVE-2019-9278
no upstream release with this yet
2020-02-09 19:20:20 +01:00
Robert Scott f498ceb6f2 pythonPackages.moviepy: switch to opencv3
opencv2 is essentially EOL and has security concerns
2020-02-05 22:31:01 +01:00
Robert Scott 6e61548dd1 samba: remove no-longer-necessary darwin test hack
test is skipped automatically now
2020-01-27 13:40:09 +01:00
Robert Scott 5e7dc6248f samba: 4.10.11 -> 4.11.3 2020-01-27 13:40:09 +01:00
Robert Scott 4a0f54c176 libvpx: add patches for CVE-2019-9232, CVE-2019-9325, CVE-2019-9371, CVE-2019-9433
backports sourced from debian package 1.7.0-3+deb10u1, included in-repo
as file is not available on sources.debian.org or salsa.debian.org

(cherry picked from commit 9bcc7608f26afaf5505146ae5a3be6907f7e3db1)
2020-01-20 20:39:36 +00:00
Robert Scott aa92851f77 pythonPackages.sysv_ipc: init at 1.0.1 2020-01-18 09:43:54 -08:00
Robert Scott 951fb0472a pythonPackages.pybind11: fix for clang
default clang is still not happy with c++17's sized and aligned
deallocations
2020-01-04 23:10:16 +00:00
Robert Scott 8b3e1e72a7 pythonPackages.unicorn: redesign to become a wrapper package around unicorn-emu
this allows us to easily keep the two in sync and gives a more flexible
result, also add self as co-maintainer.
2020-01-04 15:08:56 -06:00
Robert Scott 7766de0a53 unicorn-emu: enable for darwin/unix 2020-01-04 15:08:56 -06:00
Robert Scott 302a77a02c cyrus_sasl: add patch for CVE-2019-19906
sourced from debian as patch isn't even in upstream master yet.
2019-12-31 09:31:40 +01:00
Robert Scott de0e71780c afl: 2.52b -> 2.56b
can remove qemu glibc patch as it is now covered by afl's own patches
2019-12-30 10:21:19 -06:00
Robert Scott f5c0d150e7 qemu: add patch for CVE-2019-15890 2019-12-19 00:51:04 +00:00
Robert Scott 8c3a97fa7e qemu: 4.1.0 -> 4.2.0 2019-12-18 22:00:49 +00:00
Robert Scott e1e3df423a allowInsecureDefaultPredicate: fix to use getName
this allows correct operation with packages only having pname and version
specified, resolving issue #73737
2019-12-15 18:01:19 +00:00
Robert Scott 183ef82f98 libreswan: 3.18 -> 3.29 (security)
addressing CVE-2019-12312 & CVE-2019-10155
2019-12-15 18:48:53 +01:00
Robert Scott d17ecebcf0 unbound: install headers etc for libevent support as postInstall step 2019-12-15 18:48:53 +01:00
Robert Scott 46460d3d7a crun: 0.8 -> 0.10.6 (security) (#75304)
addressing CVE-2019-18837
2019-12-14 18:49:18 +01:00
Robert Scott c676063047 btor2tools: correct meta information 2019-12-12 10:37:02 -06:00
Robert Scott b9185a96be boolector: add patch for CVE-2019-7560 2019-12-12 10:37:02 -06:00
Robert Scott 9234d1d6db glibc: add patch for CVE-2019-19126
including patch in-repo as it needs modification to remove the changes to
NEWS but fetchpatch doesn't work here
2019-12-10 18:51:16 +01:00
Robert Scott 2611887c2e lingeling: enable for darwin 2019-12-08 18:32:04 +00:00
Robert Scott dc6233b972 aiger: enable for darwin 2019-12-08 18:31:49 +00:00
Robert Scott 8169d30c0c libofx: enable for darwin 2019-12-07 13:11:50 +00:00
Robert Scott 0351829bf8 libofx: 0.9.14 -> 0.9.15 (security)
resolving CVE-2019-9656
2019-12-07 13:01:03 +00:00
Robert Scott c0c3979c93 haproxy: 2.0.8 -> 2.0.10 (security)
addressing CVE-2019-19330
2019-12-01 14:51:06 +00:00
Robert Scott 53b523b4ed gmic-qt: switch to opencv3
opencv2 is essentially EOL and has security concerns
2019-11-27 01:09:02 +00:00
Robert Scott 81d24990bb gmic: switch to opencv3
opencv2 is essentially EOL and has security concerns
2019-11-27 01:08:54 +00:00
Robert Scott 8361442cf7 facedetect: switch to opencv4
opencv2 is essentially EOL and has security concerns
2019-11-26 20:01:37 +01:00
Robert Scott 817b066f4b nomacs: switch to using opencv4 (#72749)
opencv2 has known, unfixed security vulnerabilities. nomacs itself
states the minimum supported version is 3.4 & includes a script to
install opencv4, suggesting it is supported

darwin requires a patch to update its cmake file to make it less
restrictive over this
2019-11-25 00:14:51 +01:00
Robert Scott 2482f8b8dc tightvnc: add patches for four CVEs
Security fixes for:
* CVE-2019-8287
* CVE-2019-15678
* CVE-2019-15679
* CVE-2019-15680

mostly adapted from patches fixing similar issues in the actively
maintained libvnc

(#73970)
2019-11-24 19:44:01 +01:00
Robert Scott b9d458d91c tnef: 1.4.17 -> 1.4.18 (security) (#73882)
addresses CVE-2019-18849
2019-11-24 16:09:04 +01:00
Robert Scott 593def2396 libextractor: add patch for CVE-2019-15531 2019-11-17 16:12:50 +00:00
Robert Scott 783d66d827 odp-dpdk: internal dpdk 17.11.6 -> 17.11.9 (security)
addressing CVE-2019-14818
2019-11-17 01:21:44 +00:00
Robert Scott fa9a372e18 dpdk: 19.08 -> 19.08.2 (security)
addressing CVE-2019-14818
2019-11-17 01:21:19 +00:00
Robert Scott 55b583d334 fribidi: add patch for CVE-2019-18397 2019-11-16 19:55:48 +00:00
Robert Scott 6217e94778 ghostscript: add patch for CVE-2019-14869 2019-11-16 13:36:25 +00:00
Robert Scott 4fec9d582b libxslt: 1.1.33 -> 1.1.34 (security)
addresses CVE-2019-18197
2019-11-11 01:18:40 +00:00
Robert Scott c3c77ecfde libxml2: 2.9.9 -> 2.9.10
disable python test which was previously failing anyway, but in previous
versions it was being ignored
2019-11-11 01:18:39 +00:00
Robert Scott baa8892616 opencv3: 3.4.7 -> 3.4.8 (security)
addressing CVE-2019-14491, CVE-2019-14492 & CVE-2019-15939

all internal downloads are unchanged for this release
2019-11-06 13:20:15 +00:00
Robert Scott e3e9af4d03 jack2: 1.9.12 -> 1.9.13 (security)
addressing CVE-2019-13351

removing now-redundant patch fixing build on macos
2019-11-03 10:35:36 +01:00
Robert Scott d623837d64 opencv4: 4.1.0 -> 4.1.2 (security)
resolving CVE-2019-14491, CVE-2019-14492 & CVE-2019-15939

most internal downloads are unchanged except for "ade" which was bumped
from v0.1.1d to v0.1.1f between these releases
2019-11-02 17:00:59 +00:00
Robert Scott 7dacaa056c jhead: add patches for CVE-2019-1010301, CVE-2019-1010302 2019-10-31 21:02:34 +00:00
Robert Scott 03d6145cb0 keepalived: add patch for CVE-2018-19115 2019-10-29 22:56:51 +00:00
Robert Scott 5e8eaa6769 keepalived: 1.4.2 -> 1.4.5 2019-10-29 22:56:34 +00:00
Robert Scott 605a7b31d7 pythonPackages.koji: 1.13.0 -> 1.14.3 (security)
Addressing CVE-2019-17109

Also added missing description, homepage & license. Re-disabled for py3k
as the kojira executable doesn't seem to be happy with it.
2019-10-29 21:42:55 +00:00
Robert Scott 0b32782d33 ghostscript: 9.27 -> 9.50 2019-10-29 13:31:22 +01:00
Robert Scott 14e2d5d9a7 jbig2dec: 0.16 -> 0.17 2019-10-29 13:31:22 +01:00
Robert Scott 84ab228a85 xapian: 1.4.12 -> 1.4.13
update darwin patch
2019-10-27 19:26:05 +00:00
Robert Scott e5f671a7dc pythonPackages.rpyc: fix tests to actually execute 2019-10-27 11:47:10 -07:00
Robert Scott 1b44b12c57 imagemagick7: 7.0.8-68 -> 7.0.9-0 2019-10-27 13:06:55 +00:00
Robert Scott 11933c37cf imagemagick: 6.9.10-68 -> 6.9.10-69 2019-10-27 13:06:27 +00:00
Robert Scott def17695b9 gdal: add patch for CVE-2019-17545 2019-10-26 21:06:23 +01:00
Robert Scott f82fb81af8 gdal_2: add patch for CVE-2019-17545 2019-10-26 21:06:15 +01:00
Robert Scott 68d4a1ba0b perlPackages.libapreq2: add patch for CVE-2019-12412 2019-10-26 18:24:56 +01:00
Robert Scott 99273fc555 file: add patch for CVE-2019-18218
upstream patch https://github.com/file/file/commit/46a8443f76cec4b41ec736eca396984c74664f84.patch
doesn't apply directly, debian have a version which has been adapted for
5.37.
2019-10-26 18:13:12 +01:00
Robert Scott 4bf03aa616 ghostscript: add patches for CVE-2019-10216, CVE-2019-14811, CVE-2019-14812, CVE-2019-14813 and most of CVE-2019-14817
the latter's patch is only partially applied because it doesn't apply
cleanly to 9.27, still the fixes that do apply work and are better than
nothing
2019-10-22 09:48:50 +02:00