Commit Graph

136417 Commits

Author SHA1 Message Date
Matthew Bauer
0421891aaa
Merge pull request #47589 from vbgl/coq-coqprime-init
coqPackages.coqprime: init at 8.7.2 & 8.8
2018-10-05 22:33:15 -05:00
Matthew Bauer
673a63875d
Merge pull request #47593 from e-user/pkgs/snyk-1.99.1
snyk: init at 1.99.1
2018-10-05 22:33:02 -05:00
Florian Klink
02b0836d42 ghostscript: update hash (#47946)
I previously didn't update the hash, so was still building ghostscript-9.24
(which explained why docs were still from 9.24)

The ICC profile validation patch from #47937 is included in 9.25, so we
can strip it from the list of patches.

cc @xeji
2018-10-06 01:54:26 +02:00
Andreas Rammhold
938d98ebd5
Merge pull request #47937 from flokli/ghostscript-icc-profile-validation
ghostscript: include icc profile validation patch
2018-10-06 00:47:49 +02:00
Florian Klink
3f65f10982 ghostscript: 9.24 -> 9.25 (#47934)
Highlights in this release include:

This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional security issues over the recent 9.24 release.

CVE-2018-16802
CVE-2018-17183

Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources.

Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits.
PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid these issues.

As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files.

IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available as its own package separately from Ghostscript (and MuPDF).

The usual round of bug fixes, compatibility changes, and incremental improvements.
2018-10-06 00:47:08 +02:00
Philip Nelson
3a0fbe3cbe youtube-dl: 2018.09.26 -> 2018.10.05 (#47940) 2018-10-06 00:36:03 +02:00
Ben Gamari
58a02af417 qpdf: Drop CVE-2018-9918.patch (#47935)
This has been merged upstream in 8.2.1.
2018-10-06 00:30:49 +02:00
Edmund Wu
9a57e00a36 ghostscript: include icc profile validation patch
See https://github.com/apple/cups/issues/5394

closes #47193, #46216

source url
http://git.ghostscript.com/?p=ghostpdl.git;a=patch;h=bc3df0773fcc
contains invalid characters, which is why we don't fetchpatch.

(cherry picked from commit 2aa750694e2e0d77bf14e3145c4999b6bcee25b0)
2018-10-05 23:20:00 +02:00
Andreas Rammhold
5acda907bb
Merge pull request #47924 from edef1c/git-2.19.1
git: 2.19.0 -> 2.19.1 (CVE-2018-17456)
2018-10-05 22:11:11 +02:00
edef
5cdecca8b7 git: 2.19.0 -> 2.19.1 (CVE-2018-17456) 2018-10-05 18:36:08 +00:00
Jörg Thalheim
5bba9f3906
Merge pull request #47908 from dywedir/uutils-coreutils
uutils-coreutils: 2018-02-09 -> 2018-09-30
2018-10-05 19:35:13 +01:00
Jörg Thalheim
c65da8b511
Merge pull request #47913 from cryptix/addVimVue
misc/vim-plugins: add posva/vim-vue
2018-10-05 18:28:21 +01:00
Jörg Thalheim
5694f1e1a9
Merge pull request #47519 from aneeshusa/vagrant-remove-unused-Gemfile
vagrant: remove unused vendored Gemfile{,.lock}
2018-10-05 18:25:01 +01:00
Graham Christensen
b4755393cc
Merge pull request #47920 from grahamc/link-to-definition
docs: Link to Definition
2018-10-05 13:13:15 -04:00
Markus Kowalewski
76b97596c0 rtl-sdr: 0.5.4 -> 0.6.0 2018-10-05 17:24:55 +02:00
Graham Christensen
5daee73ce4
Generate links to function definitions
Hydra passes the full revision in to the input, which we pass through.

If we don't get this ,we try to get it from other sources, or default to
master which should have the definition in a close-ish location.

All published docs should have theURL resolve properly, only local
hackers will have the link break.
2018-10-05 11:20:46 -04:00
Timo Kaufmann
a00b7de165
Merge pull request #47915 from timokau/zn_poly-update
zn_poly: 0.9 -> 0.9.1
2018-10-05 16:05:24 +02:00
Vincent Laporte
9db397351a unoconv: fix reference to libreoffice (#47847) 2018-10-05 16:03:20 +02:00
Timo Kaufmann
65589faa2f zn_poly: 0.9 -> 0.9.1
Sage has taken over maintenance since the original author no longer
maintains the project.
2018-10-05 15:50:30 +02:00
Vladyslav M
a5d6705e20 imagemagick7: 7.0.8-6 -> 7.0.8-12 (#47851) 2018-10-05 15:48:38 +02:00
qolii
03d770c0ee linux-hardkernel: 4.14.69-148 -> 4.14.73-149 (#47896) 2018-10-05 15:48:07 +02:00
tv
4b613137e4 sec: 2.8.0 -> 2.8.1 (#47857) 2018-10-05 15:32:51 +02:00
R. RyanTM
360054f417 brogue: 1.7.4 -> 1.7.5 (#47830)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/brogue/versions
2018-10-05 15:15:13 +02:00
R. RyanTM
75e4fcf267 containerd: 1.1.2 -> 1.1.4 (#47807)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/containerd/versions
2018-10-05 15:14:50 +02:00
R. RyanTM
b49c4d2b2e eid-mw: 4.4.7 -> 4.4.8 (#47816)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/eid-mw/versions
2018-10-05 15:14:31 +02:00
Henry
388adf92a1 misc/vim-plugins: add posva/vim-vue 2018-10-05 14:54:39 +02:00
Orivej Desh
dbc4ee75a2 psi-plus: 1.3.410 -> 1.3.422 2018-10-05 12:08:16 +00:00
Austin Seipp
778dc453b6 perlPackages.CryptEd25519: init at 1.04
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-10-05 06:04:08 -05:00
Austin Seipp
20c7b61963 perlPackages.Mojolicious: 8.01 -> 8.02
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-10-05 06:04:08 -05:00
Justin Humm
bea3f18185 notmuch: use test-database in checkPhase
for running all tests, notmuch requires a database file, which can be
downloaded at https://notmuchmail.org/releases/test-databases/

See test/README in notmuch sources for further info.
2018-10-05 12:36:12 +02:00
Marco Maggesi
eae1bd0958
Merge pull request #47805 from r-ryantm/auto-update/fossil
fossil: 2.6 -> 2.7
2018-10-05 12:32:14 +02:00
Sarah Brofeldt
6540a480b4
Merge pull request #47880 from pacien/patch-6
matrix-synapse: 0.33.5 -> 0.33.6
2018-10-05 10:32:59 +02:00
Vladyslav Mykhailichenko
1e02a2c063 uutils-coreutils: 2018-02-09 -> 2018-09-30 2018-10-05 10:50:19 +03:00
lewo
8c0d32f8e7
Merge pull request #47693 from nicknovitski/envsubst-init
envsubst: init at 1.1.0
2018-10-05 09:00:33 +02:00
lewo
96ad503163
Merge pull request #47692 from nicknovitski/kubeval-init
kubeval: init at 0.7.3
2018-10-05 08:41:41 +02:00
Gabriel Ebner
e1738bf1a2 whipper: add cddb dependency 2018-10-05 08:22:26 +02:00
Jan Tojnar
89beaef64d
Merge pull request #47786 from r-ryantm/auto-update/ibus-typing-booster
ibus-engines.typing-booster-unwrapped: 2.1.1 -> 2.1.2
2018-10-05 06:46:25 +02:00
Peter Hoeg
be27131c06
Merge pull request #47694 from magnetophon/lsp-plugins
lsp-plugins: init at 1.1.4
2018-10-05 10:43:00 +08:00
roconnor
8a4a732e99
Merge pull request #47855 from roconnor/bitcoin
Bitcoin: 0.16.3 -> 0.17.0
2018-10-04 21:44:04 -04:00
Russell O'Connor
ef0f1eb33f bitcoin: enable doCheck
Fixes checkPhase for bitcoin-qt.
2018-10-04 21:41:40 -04:00
Jan Tojnar
5cc18c4781
gnome3: remove versionBranch attribute
Standard library now contains stdenv.lib.versions.majorMinor,
which does the same.
2018-10-05 02:17:19 +02:00
John Wiegley
df48060e4c
coqPackages.coq-haskell: Support building with Coq 8.8 2018-10-04 17:13:41 -07:00
Jan Tojnar
9db0207496
gnome3: remove version attribute
It was used by some themes in the past, but it broke them whenever GNOME
was updated, so it should not be used anymore.
2018-10-05 02:07:09 +02:00
Jan Tojnar
959435e835
networkmanager-openvpn: 1.8.4 → 1.8.6 2018-10-05 01:58:53 +02:00
Jörg Thalheim
a1177832af
Merge pull request #47829 from r-ryantm/auto-update/appstream-glib
appstream-glib: 0.7.12 -> 0.7.13
2018-10-05 00:37:37 +01:00
Jörg Thalheim
a363ed1071
Merge pull request #47832 from veprbl/pr/arrow_0.10.0
arrow-cpp: 0.9.0 -> 0.10.0
2018-10-04 23:34:17 +01:00
Jörg Thalheim
5200167f12
Merge pull request #47831 from r-ryantm/auto-update/calc
calc: 2.12.6.6 -> 2.12.6.8
2018-10-04 23:31:38 +01:00
Bart Brouns
f14c0b4610 lsp-plugins: init at 1.1.4 2018-10-05 00:24:13 +02:00
Alex Leferry 2
1bb4b16b3b GRV: Fix typos in description 2018-10-04 23:50:15 +02:00
Timo Kaufmann
11068c62a5
Merge pull request #47659 from nyanloutre/emby-3.5.3.0
emby: 3.5.2.0 -> 3.5.3.0, migrate from mono to dotnet
2018-10-04 23:08:26 +02:00