Commit Graph
175090 Commits
Author SHA1 Message Date
Robert Schütz c2707983ec Merge pull request #54940 from dotlambda/CVE-2019-3498
django: CVE-2019-3498
2019-01-31 10:25:34 +01:00
Robert Schütz 864f8321ee Merge pull request #54893 from nyanloutre/mautrix-telegram
mautrix-telegram: init at 0.4.0.post1
2019-01-31 10:24:49 +01:00
Christopher Ostrouchov 518a7b0f8e pythonPackages.tableaudocumentapi: init at 0.6 (#54956) 2019-01-31 10:18:01 +01:00
Florian Franzen e0e4577c0f cmake: disable package registry 2019-01-31 10:17:55 +01:00
Robert Schütz 052acfe930 sage: python-openid: move django and twill to checkInputs (#54949)
A search through the source code
(https://github.com/openid/python-openid/search?q=django and
https://github.com/openid/python-openid/search?q=twill) reveals
that they are only used in examples and tests.
2019-01-31 10:14:36 +01:00
nyanloutre 53fddad692 mautrix-telegram: init at 0.4.0.post1 2019-01-31 09:55:55 +01:00
danbst 3ae5420c9d 🤦 2019-01-31 10:05:56 +02:00
danbst fd807c68c0 this is not related to this PR 2019-01-31 10:04:27 +02:00
taku0 8050d594d3 adoptopenjdk-bin: 11.0.1 -> 11.0.2 (openj9 x86_64-darwin) 2019-01-31 16:44:34 +09:00
danbst f47bfce584 make back /etc/static absolute symlink 2019-01-31 09:29:44 +02:00
Sergei Maximov 5aaf8c0e15 gem-config: add ruby-vips 2019-01-31 10:21:55 +03:00
Florian Jacob fc8e1745c0 nixos/etc: Make symlinks relative instead of absolute
so that the links can be followed if the NixOS installation is not mounted as filesystem root.
In particular, this makes /etc/os-release adhere to the standard:
https://www.freedesktop.org/software/systemd/man/os-release.html
Fixes #28833.
2019-01-31 09:17:35 +02:00
Michael Raskin 2e76049491 lispPackages.quicklisp.quicklispdist: 2018-08-31 -> 2019-01-07 2019-01-31 07:21:30 +01:00
Michael Raskin fa67afe92b sbcl: fix uname invocation 2019-01-31 07:21:30 +01:00
Will Dietz e5a8918909 Merge pull request #54961 from dtzWill/update/lua-setuphook-shoosh-hush-please
lua-5 setup-hook: quiet noisy 'cd -' printing path repeatedly
2019-01-30 22:54:33 -06:00
Matthieu Coudron a5a796222b linux: (re)take into account extraConfig
PR #42838 wrongly started to ignore extraConfig. This fixes that.
2019-01-31 13:34:42 +09:00
Justin Bedo 75dd587793 snpeff: 4.3q -> 4.3t 2019-01-31 15:15:05 +11:00
Thomas Tuegel b61797baf3 Merge pull request #54886 from markuskowa/fix-openblas
openblas: make the optimization target overridable
2019-01-30 20:53:36 -06:00
aanderse c6cd07707b nixos/httpd: rename apache log files to have a .log file extension (#54529)
nixos/httpd: rename apache log files to have a .log file extension
2019-01-31 04:04:58 +02:00
Mario Rodas 2981a7b0e3 pg_topn: 2.2.0 -> 2.2.2 2019-01-30 19:59:21 -05:00
Will Dietz 1a6f3bb19d sudo-font: init at 0.37 2019-01-30 18:39:08 -06:00
Herwig Hochleitner 6b27008fb5 chromium: 71.0.3578.98 -> 72.0.3626.81
CVE-2019-5754 CVE-2019-5782 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757
CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762
CVE-2019-5763 CVE-2019-5764 CVE-2019-5765 CVE-2019-5766 CVE-2019-5767
CVE-2019-5768 CVE-2019-5769 CVE-2019-5770 CVE-2019-5771 CVE-2019-5772
CVE-2019-5773 CVE-2019-5774 CVE-2019-5775 CVE-2019-5776 CVE-2019-5777
CVE-2019-5778 CVE-2019-5779 CVE-2019-5780 CVE-2019-5781
2019-01-31 01:20:23 +01:00
Vincent Bernat 33802e9ed8 nginx: expose list of additional modules (#53897)
Currently, it seems there is no easy way to override package to add
modules. For example, if we want to add the `ipscrub` module, we can
do:

    pkgs.nginxStable.override {
      modules = [ pkgs.nginxModules.ipscrub ];
    };

But, then, we loose `rtmp`, `dav` and `moreheaders` which are defined
in `all-packages.nix`. With this modification, we can now do:

    pkgs.nginxStable.override {
      modules = pkg.nginxStable.passthru.modules ++ [ pkgs.nginxModules.ipscrub ];
    };
2019-01-31 02:15:14 +02:00
Danylo Hlynskyi 4f8e9e7c9b Merge pull request #54834 from lsix/enable-qscintilla-py3
pythonPackages.qscintilla: enable for pyqt5
2019-01-31 01:53:38 +02:00
Andreas Rammhold 066be85d9d qt56: fix CVE-2018-{15518,19873,19870,19871,19865,19869}
* CVE-2018-15518, Qt Base: “double free or corruption” in QXmlStreamReader
 * CVE-2018-19873, Qt Base: QBmpHandler segfault on malformed BMP file
 * CVE-2018-19870, Qt Base: Check for QImage allocation failure in qgifhandler
 * CVE-2018-19871, Qt Imageformats: QImage: QTgaFile CPU exhaustion
 * CVE-2018-19865, Qt Virtual Keyboard: Qt Virtual Keyboard logs all key presses
 * CVE-2018-19869, Qt Svg: Fix crash when parsing malformed url reference

More details can be obtained from the Qt annoucement [1].

[1] https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
2019-01-31 00:50:29 +01:00
Pavol Rusnak 344b340815 pythonPackages.pyu2f: init at 0.1.4 2019-01-30 23:47:00 +00:00
markuskowa ca13dc163b Merge pull request #49871 from wucke13/getdp
getdp: init at 3.0.4
2019-01-31 00:43:08 +01:00
Andreas Rammhold 295a210a23 qt56.qtvirtualkeyboard: init at 5.6.3
This adds the "missing" qtvirtualkeyboard module of qt56. I just add
this so I can apply (& test) the patches for a CVE in the next commit.
This might seem strange but in case anyone decided to add / use this in
the future we are on the safe(r) side.
2019-01-31 00:21:51 +01:00
Kévin Rauscher e925ec27ba bloop: 1.2.3 -> 1.2.5 (#54427) 2019-01-31 01:20:55 +02:00
Robert Schütz c6e08579c5 python.pkgs.django_1_8: mark as insecure (#54937)
Since CVE-2018-14574 and CVE-2019-3498 affect 1.11, it is very likely
they also apply to 1.8. However, Django 1.8 has reached EOL in April
2018 and the patches were not backported.
2019-01-30 23:57:50 +01:00
Andreas Rammhold 66601282cc qt59.qtvirtualkeyboard: fix CVE-2018-19865
CVE-2018-19865 tracks the issue of qtvirtualkeyboard where it logs all
user input. With this commit we are applying the recommended patches
form the upstream project.

More details can be obtained from the Qt annoucement [1].

[1] https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
2019-01-30 23:50:48 +01:00
Danylo Hlynskyi 30c312341f Merge pull request #54637 from danbst/small-eval-optimization
module system: small eval optimization
2019-01-31 00:42:24 +02:00
danbst 27982b408e types.optionSet: deprecate and remove last usages 2019-01-31 00:41:10 +02:00
Mitch 475d748073 nomad: v0.8.6 -> v0.8.7 (#54656) 2019-01-31 00:37:24 +02:00
Justin Bedo 3bab170088 singularity: update module to correctly wrap suid binary 2019-01-31 09:21:18 +11:00
Justin Bedo 5611397f33 singularity: 2.6.0 -> 3.0.1 2019-01-31 09:21:18 +11:00
eyjhbb@gmail.com 31c3d157ae arduino-mk: init at 1.6.0 2019-01-30 23:19:37 +01:00
eyjhbb@gmail.com 648c983db6 maintainers: added eyJhb to maintainers list 2019-01-30 23:19:15 +01:00
eyjhbb@gmail.com e4d2bc657e maintainers: added eyJhb to the maintainers list 2019-01-30 22:59:23 +01:00
mhaselsteiner 6dda7841bb pythonPackages.wrf-python: init at 1.3.1.1 2019-01-30 22:51:27 +01:00
Lancelot SIX 6c2bb2a3d0 pythonPackages.qscintilla-qt5: init at 2.9.4 2019-01-30 22:37:26 +01:00
Matthijs Steen cca9df9d11 openra: updated engines and mods 2019-01-30 22:17:53 +01:00
Pascal Wittmann f4f1eb1206 parallel: 20181222 -> 20190122 2019-01-30 22:04:30 +01:00
Will Dietz d96dcb66fb lua-5 setup-hook: quiet noisy 'cd -' printing path repeatedly 2019-01-30 13:55:07 -06:00
Jeff Slight 059e5e0ba0 gitlab: add openssh dependency to gitaly 2019-01-30 11:29:32 -08:00
Mario Rodas 18ad447b6f heroku: 7.18.2 -> 7.19.4 2019-01-30 21:18:14 +02:00
Alyssa Ross cd37219ed9 Merge pull request #54808 from vdemeester/update-traefik
traefik: 1.7.4 -> 1.7.8
2019-01-30 19:04:01 +00:00
Alyssa Ross b2f677720a Merge pull request #54945 from nyanloutre/riot-update
riot-web: 0.17.8 -> 0.17.9
2019-01-30 18:59:59 +00:00
Alyssa Ross f72d26d8dd Merge pull request #53959 from ejpcmac/update-elixir_1_8
elixir_1_8: 1.8.0-rc.1 -> 1.8.1
2019-01-30 18:51:58 +00:00
Pavol Rusnak 929924d946 dotnet-sdk: 2.1.402 -> 2.2.103 2019-01-30 19:46:40 +01:00