public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
229,919 Commits 1 Branch 0 Tags
cc6e701b33f0f8275822cc7cb9bf972abc800983
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Robert Scott d0af797a50 Merge pull request #88019 from risicle/ris-aflplusplus-2.65c 
aflplusplus: 2.64c -> 2.65c
 2020-06-04 21:10:58 +01:00
Robert Scott d478d7a65b aflplusplus: remove clang_9 and llvm_9 specificity 
i've successfully built this with llvm 8 and 6 now - make this easier to
override
 2020-05-16 22:13:56 +01:00
Robert Scott 5f19ec3bc4 aflplusplus: don't run unit tests with cmocka 
i don't think running the unit tests really adds anything given that we
have proper integration tests working, and it just introduces another
build dependency and possibility for spurious breakage.
 2020-05-16 22:07:46 +01:00
Robert Scott 4eb8f4ece3 aflplusplus: 2.64c -> 2.65c 2020-05-16 22:05:02 +01:00
Robert Scott e153004960 Merge pull request #85950 from Mindavi/aflplusplus/2.64c 
aflplusplus: 2.59c -> 2.64c
 2020-05-06 23:17:04 +01:00
Robert Scott 1985c6b9d5 afl: fix afl-clang-fast++ by making it a copy of afl-clang-fast, not a symlink 
a symlink gets skipped by wrapProgram and this ends up confusing the nix
cc wrapper's cpp mode detection
 2020-04-25 10:04:06 -05:00
Robert Scott 324dd67013 Merge pull request #76645 from risicle/ris-aflplusplus 
aflplusplus: init at 2.59c
 2020-04-23 22:28:12 +01:00
Robert Scott fbc11b4f02 aflplusplus: init at 2.59c 2020-04-18 19:52:11 +01:00
Robert Scott 959e9244d9 nghttp2: add python bindings as pythonPackages.nghttp2 
it's tricky to enable in nghttp2's default build, however, because it needs
to be usable by curl, a very core nix package, and we get cyclical
dependencies if we add python to its requirements. having it available as
a separate build is better than nothing, though.
 2020-03-29 22:32:26 +01:00
Robert Scott f77e057cda pythonPackages.pysaml2: fix tests with fixed & now-expired timestamps 
these only expired (and upstream only seem to have noticed) today
 2020-02-11 14:08:30 -08:00
Robert Scott 8817036a31 pythonPackages.capstone: 3.0.5.post1 -> 4.0.1, redesign as wrapper package around main capstone package 
this allows us to keep the two packages in sync and handle overrides more
flexibly
 2020-02-10 20:29:01 +01:00
Robert Scott a8c0c21f78 capstone: enable for darwin, enable tests & fix pkg-config output 
turns out capstone.pc is generated during the buildPhase, so needs
PREFIX set here too for it to be correct
 2020-02-10 20:29:01 +01:00
Robert Scott 55ace3be68 pythonPackages.pysaml2: 4.9.0 -> 5.0.0 (security) 
addressing CVE-2020-5390. disabled for python 2.7 as support is being
removed from this release on.
 2020-02-09 17:48:14 -08:00
Robert Scott db8434a694 libexif: add patch for CVE-2019-9278 
no upstream release with this yet
 2020-02-09 19:20:20 +01:00
Robert Scott f498ceb6f2 pythonPackages.moviepy: switch to opencv3 
opencv2 is essentially EOL and has security concerns
 2020-02-05 22:31:01 +01:00
Robert Scott 6e61548dd1 samba: remove no-longer-necessary darwin test hack 
test is skipped automatically now
 2020-01-27 13:40:09 +01:00
Robert Scott 5e7dc6248f samba: 4.10.11 -> 4.11.3 2020-01-27 13:40:09 +01:00
Robert Scott 4a0f54c176 libvpx: add patches for CVE-2019-9232, CVE-2019-9325, CVE-2019-9371, CVE-2019-9433 
backports sourced from debian package 1.7.0-3+deb10u1, included in-repo
as file is not available on sources.debian.org or salsa.debian.org

(cherry picked from commit 9bcc7608f26afaf5505146ae5a3be6907f7e3db1)
 2020-01-20 20:39:36 +00:00
Robert Scott aa92851f77 pythonPackages.sysv_ipc: init at 1.0.1 2020-01-18 09:43:54 -08:00
Robert Scott 951fb0472a pythonPackages.pybind11: fix for clang 
default clang is still not happy with c++17's sized and aligned
deallocations
 2020-01-04 23:10:16 +00:00
Robert Scott 8b3e1e72a7 pythonPackages.unicorn: redesign to become a wrapper package around unicorn-emu 
this allows us to easily keep the two in sync and gives a more flexible
result, also add self as co-maintainer.
 2020-01-04 15:08:56 -06:00
Robert Scott 7766de0a53 unicorn-emu: enable for darwin/unix 2020-01-04 15:08:56 -06:00
Robert Scott 302a77a02c cyrus_sasl: add patch for CVE-2019-19906 
sourced from debian as patch isn't even in upstream master yet.
 2019-12-31 09:31:40 +01:00
Robert Scott de0e71780c afl: 2.52b -> 2.56b 
can remove qemu glibc patch as it is now covered by afl's own patches
 2019-12-30 10:21:19 -06:00
Robert Scott f5c0d150e7 qemu: add patch for CVE-2019-15890 2019-12-19 00:51:04 +00:00
Robert Scott 8c3a97fa7e qemu: 4.1.0 -> 4.2.0 2019-12-18 22:00:49 +00:00
Robert Scott e1e3df423a allowInsecureDefaultPredicate: fix to use getName 
this allows correct operation with packages only having pname and version
specified, resolving issue #73737
 2019-12-15 18:01:19 +00:00
Robert Scott 183ef82f98 libreswan: 3.18 -> 3.29 (security) 
addressing CVE-2019-12312 & CVE-2019-10155
 2019-12-15 18:48:53 +01:00
Robert Scott d17ecebcf0 unbound: install headers etc for libevent support as postInstall step 2019-12-15 18:48:53 +01:00
Robert Scott 46460d3d7a crun: 0.8 -> 0.10.6 (security) (#75304) 
addressing CVE-2019-18837
 2019-12-14 18:49:18 +01:00
Robert Scott c676063047 btor2tools: correct meta information 2019-12-12 10:37:02 -06:00
Robert Scott b9185a96be boolector: add patch for CVE-2019-7560 2019-12-12 10:37:02 -06:00
Robert Scott 9234d1d6db glibc: add patch for CVE-2019-19126 
including patch in-repo as it needs modification to remove the changes to
NEWS but fetchpatch doesn't work here
 2019-12-10 18:51:16 +01:00
Robert Scott 2611887c2e lingeling: enable for darwin 2019-12-08 18:32:04 +00:00
Robert Scott dc6233b972 aiger: enable for darwin 2019-12-08 18:31:49 +00:00
Robert Scott 8169d30c0c libofx: enable for darwin 2019-12-07 13:11:50 +00:00
Robert Scott 0351829bf8 libofx: 0.9.14 -> 0.9.15 (security) 
resolving CVE-2019-9656
 2019-12-07 13:01:03 +00:00
Robert Scott c0c3979c93 haproxy: 2.0.8 -> 2.0.10 (security) 
addressing CVE-2019-19330
 2019-12-01 14:51:06 +00:00
Robert Scott 53b523b4ed gmic-qt: switch to opencv3 
opencv2 is essentially EOL and has security concerns
 2019-11-27 01:09:02 +00:00
Robert Scott 81d24990bb gmic: switch to opencv3 
opencv2 is essentially EOL and has security concerns
 2019-11-27 01:08:54 +00:00
Robert Scott 8361442cf7 facedetect: switch to opencv4 
opencv2 is essentially EOL and has security concerns
 2019-11-26 20:01:37 +01:00
Robert Scott 817b066f4b nomacs: switch to using opencv4 (#72749) 
opencv2 has known, unfixed security vulnerabilities. nomacs itself
states the minimum supported version is 3.4 & includes a script to
install opencv4, suggesting it is supported

darwin requires a patch to update its cmake file to make it less
restrictive over this
 2019-11-25 00:14:51 +01:00
Robert Scott 2482f8b8dc tightvnc: add patches for four CVEs 
Security fixes for:
* CVE-2019-8287
* CVE-2019-15678
* CVE-2019-15679
* CVE-2019-15680

mostly adapted from patches fixing similar issues in the actively
maintained libvnc

(#73970)
 2019-11-24 19:44:01 +01:00
Robert Scott b9d458d91c tnef: 1.4.17 -> 1.4.18 (security) (#73882) 
addresses CVE-2019-18849
 2019-11-24 16:09:04 +01:00
Robert Scott 593def2396 libextractor: add patch for CVE-2019-15531 2019-11-17 16:12:50 +00:00
Robert Scott 783d66d827 odp-dpdk: internal dpdk 17.11.6 -> 17.11.9 (security) 
addressing CVE-2019-14818
 2019-11-17 01:21:44 +00:00
Robert Scott fa9a372e18 dpdk: 19.08 -> 19.08.2 (security) 
addressing CVE-2019-14818
 2019-11-17 01:21:19 +00:00
Robert Scott 55b583d334 fribidi: add patch for CVE-2019-18397 2019-11-16 19:55:48 +00:00
Robert Scott 6217e94778 ghostscript: add patch for CVE-2019-14869 2019-11-16 13:36:25 +00:00
Robert Scott 4fec9d582b libxslt: 1.1.33 -> 1.1.34 (security) 
addresses CVE-2019-18197
 2019-11-11 01:18:40 +00:00
Robert Scott c3c77ecfde libxml2: 2.9.9 -> 2.9.10 
disable python test which was previously failing anyway, but in previous
versions it was being ignored
 2019-11-11 01:18:39 +00:00
Robert Scott baa8892616 opencv3: 3.4.7 -> 3.4.8 (security) 
addressing CVE-2019-14491, CVE-2019-14492 & CVE-2019-15939

all internal downloads are unchanged for this release
 2019-11-06 13:20:15 +00:00
Robert Scott e3e9af4d03 jack2: 1.9.12 -> 1.9.13 (security) 
addressing CVE-2019-13351

removing now-redundant patch fixing build on macos
 2019-11-03 10:35:36 +01:00
Robert Scott d623837d64 opencv4: 4.1.0 -> 4.1.2 (security) 
resolving CVE-2019-14491, CVE-2019-14492 & CVE-2019-15939

most internal downloads are unchanged except for "ade" which was bumped
from v0.1.1d to v0.1.1f between these releases
 2019-11-02 17:00:59 +00:00
Robert Scott 7dacaa056c jhead: add patches for CVE-2019-1010301, CVE-2019-1010302 2019-10-31 21:02:34 +00:00
Robert Scott 03d6145cb0 keepalived: add patch for CVE-2018-19115 2019-10-29 22:56:51 +00:00
Robert Scott 5e8eaa6769 keepalived: 1.4.2 -> 1.4.5 2019-10-29 22:56:34 +00:00
Robert Scott 605a7b31d7 pythonPackages.koji: 1.13.0 -> 1.14.3 (security) 
Addressing CVE-2019-17109

Also added missing description, homepage & license. Re-disabled for py3k
as the kojira executable doesn't seem to be happy with it.
 2019-10-29 21:42:55 +00:00
Robert Scott 0b32782d33 ghostscript: 9.27 -> 9.50 2019-10-29 13:31:22 +01:00
Robert Scott 14e2d5d9a7 jbig2dec: 0.16 -> 0.17 2019-10-29 13:31:22 +01:00
Robert Scott 84ab228a85 xapian: 1.4.12 -> 1.4.13 
update darwin patch
 2019-10-27 19:26:05 +00:00
Robert Scott e5f671a7dc pythonPackages.rpyc: fix tests to actually execute 2019-10-27 11:47:10 -07:00
Robert Scott 1b44b12c57 imagemagick7: 7.0.8-68 -> 7.0.9-0 2019-10-27 13:06:55 +00:00
Robert Scott 11933c37cf imagemagick: 6.9.10-68 -> 6.9.10-69 2019-10-27 13:06:27 +00:00
Robert Scott def17695b9 gdal: add patch for CVE-2019-17545 2019-10-26 21:06:23 +01:00
Robert Scott f82fb81af8 gdal_2: add patch for CVE-2019-17545 2019-10-26 21:06:15 +01:00
Robert Scott 68d4a1ba0b perlPackages.libapreq2: add patch for CVE-2019-12412 2019-10-26 18:24:56 +01:00
Robert Scott 99273fc555 file: add patch for CVE-2019-18218 
upstream patch https://github.com/file/file/commit/46a8443f76cec4b41ec736eca396984c74664f84.patch
doesn't apply directly, debian have a version which has been adapted for
5.37.
 2019-10-26 18:13:12 +01:00
Robert Scott 4bf03aa616 ghostscript: add patches for CVE-2019-10216, CVE-2019-14811, CVE-2019-14812, CVE-2019-14813 and most of CVE-2019-14817 
the latter's patch is only partially applied because it doesn't apply
cleanly to 9.27, still the fixes that do apply work and are better than
nothing
 2019-10-22 09:48:50 +02:00
Robert Scott 6882778e26 ghostscript: 9.26 -> 9.27 (security) 2019-10-22 09:48:50 +02:00
Robert Scott 90a48bbfa9 jbig2dec: 0.14 -> 0.16 2019-10-22 09:48:50 +02:00
Robert Scott a3ea286627 putty: 0.71 -> 0.73 (security) 
fixing CVE-2019-17069

the AM subsitutions appear to be very old - they break 0.73's build and
modern releases seem to do without them fine
 2019-10-18 21:35:20 +01:00
Robert Scott 3fa2864aac poppler: add patch for CVE-2019-9959 2019-10-13 16:57:10 +01:00
Robert Scott 2a8e53efce imagemagick: 6.9.9-34 -> 6.9.10-68 (security) 
fixing numerous CVEs
 2019-10-13 15:00:26 +01:00
Robert Scott 0086b03be5 openmpt123: 0.4.1 -> 0.4.9 (security?) 
addressing CVE-2019-17113
 2019-10-13 12:49:56 +01:00
Robert Scott b9593f1a20 poppler_0_61: 0.61.0 -> 0.61.1 2019-10-12 14:54:00 +01:00
Robert Scott e6889d46e0 poppler_0_61: add patch for CVE-2019-9959 
custom adapted patch to accommodate the openjpeg1/openjpeg2 split that
0.61 still has
 2019-10-12 14:35:01 +01:00
Robert Scott 8044cf3668 pythonPackages.pandas: 0.25.0 -> 0.25.1 2019-10-07 07:57:12 -07:00
Robert Scott d7cad2b8f9 pythonPackages.hug: enable tests 2019-09-14 15:16:00 +01:00
Robert Scott 5e0ec5a753 pythonPackages.pytest-mpl: fix & enable tests on darwin 
dotfile is simply in a different place on macos
 2019-09-07 12:53:55 +01:00
Robert Scott daebef59d6 pythonPackages.colorcet: fix & enable all tests on darwin 
dotfile is simply in a different place on macos
 2019-09-07 12:53:55 +01:00
Robert Scott d4713b6493 pythonPackages.pybind11: enable tests 2019-09-06 21:15:22 +02:00
Robert Scott f8c2a8461e cctz: enable for darwin 
only minor tweaks needed
 2019-08-26 14:07:07 +01:00
Robert Scott bc26695334 poco: enable for darwin 2019-08-26 14:06:28 +01:00
Robert Scott de0b514468 pythonPackages.django_silk: 3.0.2 -> 3.0.3 2019-08-24 16:59:20 +01:00
Robert Scott 9b6ae7a0f4 graphene-hardened-malloc: 1 -> 2 2019-08-24 16:52:32 +01:00
Robert Scott 6e921f77ff cloudfoundry-cli: 6.45.0 -> 6.46.1 2019-08-24 16:21:37 +01:00
Robert Scott 0bbfd2d2dc pythonPackages.django_compressor: fix build, flesh out comments 2019-07-20 13:00:06 +02:00
Robert Scott 8e709be9ba pythonPackages.appconf: fix build, enable tests 2019-07-20 13:00:06 +02:00
Robert Scott f60b221629 blockbook: increase ulimit -n on darwin for packr execution 
macos default can cause build failures due to too many open files
 2019-07-20 01:24:18 +01:00
Robert Scott 3e5ccd4300 openjpeg: enable tests 2019-07-17 10:34:41 +02:00
Robert Scott 5c85b24edc pythonPackages.jpylyzer: init at 1.18.0 
include as application too
 2019-07-17 10:34:41 +02:00
Robert Scott c996567948 zeromq: 4.3.1 -> 4.3.2 2019-07-17 10:25:35 +02:00
Robert Scott 5b0db58bc1 squid: add patch fixing CVE-2019-13345 2019-07-14 21:41:26 +01:00
Robert Scott 8872a08cde squid4: 4.7 -> 4.8 
fixing CVE-2019-13345
 2019-07-14 21:41:05 +01:00
Robert Scott 428e215313 dosbox: 0.74-2 -> 0.74-3 
fixes CVE-2019-7165, CVE-2019-12594
 2019-07-14 12:39:15 +01:00
Robert Scott 49283ed802 cgit: add patch fixing remote DoS 
issue assigned MGASA-2019-0203 by mageia
https://www.openwall.com/lists/oss-security/2019/05/19/3
 2019-07-07 21:01:50 +02:00
Robert Scott b306fc2766 cloudfoundry-cli: 6.41.0 -> 6.45.0 
this addresses CVE-2019-3781
 2019-07-07 17:52:49 +01:00
Robert Scott 9826490d5e graphicsmagick: 1.3.31 -> 1.3.32 
security release fixing numerous issues, darwin requires patch to fix issue
with pngs
 2019-07-06 01:20:26 +01:00
Robert Scott 44b450592c rdesktop: 1.8.3 -> 1.8.6 
security release, fixing issue with as-yet-unassigned CVE. debian are using
DSA-4473-1/DLA-1837-1.

switching to github source because they don't seem to be keeping their
sourceforge tarballs up to date
 2019-07-03 22:29:43 +01:00