MirrorHub/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-16 23:03:40 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
183443 commits 244 branches 124 tags 6 GiB
Commit graph

183443 commits

This branch
This branch
All branches
Author SHA1 Message Date
worldofpeace
9d173119aa
Merge pull request #63486 from worldofpeace/gvfs/security-fixes-unstable 
gvfs: security fixes
 2019-06-18 22:26:32 -04:00
Jan Tojnar
e0a21aae91
gnome3.tracker-miners: enable auto_features (#63491) 
gnome3.tracker-miners: enable auto_features
 2019-06-19 03:56:04 +02:00
Mario Rodas
3dfdb3fc14
Merge pull request #63470 from r-ryantm/auto-update/xmr-stak 
xmr-stak: 2.10.4 -> 2.10.5
 2019-06-18 20:27:33 -05:00
Mario Rodas
699941825a
Merge pull request #63472 from r-ryantm/auto-update/yarn 
yarn: 1.16.0 -> 1.17.0
 2019-06-18 20:26:22 -05:00
Jan Tojnar
6d8eaf8f13
gnome3.tracker-miners: enable auto_features 
When tracker-miners switched from booleans to features, we were no longer building
majority of the miners, since we disable auto_features by default.
 2019-06-19 03:08:04 +02:00
Mario Rodas
a5e5377202
Merge pull request #63468 from r-ryantm/auto-update/xonsh 
xonsh: 0.9.4 -> 0.9.6
 2019-06-18 18:55:25 -05:00
worldofpeace
fae9e165bb gvfs: fix CVE-2019-12795 
This is a version of #63481 for master.

Vulnerability Description:
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before
1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without
configuring an authorization rule. A local attacker could connect to this server
socket and issue D-Bus method calls. Note that the server socket only accepts
a single connection, so the attacker would have to discover the server and connect
to the socket before its owner does.

#63301
 2019-06-18 19:48:47 -04:00
worldofpeace
02ea0d3959 gvfs: fix CVE-2019-1244{7.8.9} 
This is a version of #63481 for master.

CVE-2019-12447:
daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is
not used.

CVE-2019-12448:
daemon/gvfsbackendadmin.c has race conditions because the admin backend
doesn't implement query_info_on_read/write.

CVE-2019-12449:
daemon/gvfsbackendadmin.c mishandles a file's user and group ownership
during move (and copy with G_FILE_COPY_ALL_METADATA) operations
from admin:// to file:// URIs, because root privileges are unavailable.

Upstream MR: https://gitlab.gnome.org/GNOME/gvfs/merge_requests/48
 2019-06-18 19:48:47 -04:00
Mario Rodas
adaf148273
Merge pull request #63431 from r-ryantm/auto-update/sit 
sit: 0.4.0 -> 0.4.1
 2019-06-18 18:31:07 -05:00
Mario Rodas
ba16a39aa4
Merge pull request #63377 from r-ryantm/auto-update/python3.7-kombu 
python37Packages.kombu: 4.5.0 -> 4.6.3
 2019-06-18 18:10:03 -05:00
Mario Rodas
1468c5e8fa
Merge pull request #63449 from r-ryantm/auto-update/tmuxp 
tmuxp: 1.5.1 -> 1.5.3
 2019-06-18 18:02:49 -05:00
Mario Rodas
5fef795af0
Merge pull request #63404 from r-ryantm/auto-update/python3.7-xcffib 
python37Packages.xcffib: 0.8.0 -> 0.8.1
 2019-06-18 18:00:00 -05:00
Mario Rodas
435729102a
Merge pull request #63426 from r-ryantm/auto-update/shairport-sync 
shairport-sync: 3.3 -> 3.3.1
 2019-06-18 17:57:12 -05:00
Mario Rodas
578cf9b181
Merge pull request #63425 from r-ryantm/auto-update/sec 
sec: 2.8.1 -> 2.8.2
 2019-06-18 17:55:53 -05:00
Mario Rodas
0c71f91496
Merge pull request #63372 from r-ryantm/auto-update/python3.7-jellyfish 
python37Packages.jellyfish: 0.7.1 -> 0.7.2
 2019-06-18 17:54:10 -05:00
Mario Rodas
c79caafb45
Merge pull request #63361 from r-ryantm/auto-update/python3.7-GeoAlchemy2 
python37Packages.geoalchemy2: 0.6.2 -> 0.6.3
 2019-06-18 17:52:14 -05:00
Jan Tojnar
897d9050a3
Merge pull request #63447 from jtojnar/sublime-cleanup 
sublime3: clean up
 2019-06-19 00:52:04 +02:00
Mario Rodas
ac070b89d4
Merge pull request #63359 from r-ryantm/auto-update/python3.7-Flask-Cors 
python37Packages.flask-cors: 3.0.7 -> 3.0.8
 2019-06-18 17:50:30 -05:00
Mario Rodas
0bbe79eafa
Merge pull request #63364 from r-ryantm/auto-update/python3.7-guessit 
python37Packages.guessit: 3.0.3 -> 3.0.4
 2019-06-18 17:49:29 -05:00
Andreas Rammhold
0829018b61
Merge pull request #63478 from alyssais/firefox-update 
firefox.updateScript: gpg improvements
 2019-06-19 00:48:07 +02:00
Mario Rodas
10316c2549
Merge pull request #63396 from r-ryantm/auto-update/python3.7-rubymarshal 
python37Packages.rubymarshal: 1.0.3 -> 1.2.6
 2019-06-18 17:46:26 -05:00
R. RyanTM
3c26feda9d
python37Packages.kombu: 4.5.0 -> 4.6.3 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/python3.7-kombu/versions
 2019-06-18 17:44:51 -05:00
Andreas Rammhold
5a74f84536
Merge pull request #63136 from ivan/chromium-75.0.3770.90 
chromium: 75.0.3770.80 -> 75.0.3770.90
 2019-06-19 00:42:05 +02:00
Mario Rodas
6d05fb8d56
Merge pull request #63400 from r-ryantm/auto-update/python3.7-srsly 
python37Packages.srsly: 0.0.5 -> 0.0.7
 2019-06-18 17:38:15 -05:00
R. RyanTM
ff2cec38fb stunnel: 5.54 -> 5.55 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/stunnel/versions
 2019-06-18 17:33:19 -05:00
R. RyanTM
ef3d467d3d tbb: 2019_U7 -> 2019_U8 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/tbb/versions
 2019-06-18 17:33:02 -05:00
worldofpeace
6fa7263c1e
Merge pull request #63349 from seppeljordan/update-nix-prefetch-github 
nix-prefetch-github: 2.2 -> 2.3
 2019-06-18 18:11:58 -04:00
Sebastian Jordan
08dbc60974 nix-prefetch-github: Remove propagatedBuildInputs `requests' 
`requests' is no longer required per setup.cfg
 2019-06-19 00:06:29 +02:00
Jan Tojnar
b75a43f9e0
sublime{3,-merge}: simplify code 2019-06-18 23:43:37 +02:00
worldofpeace
83ba5afcc9
Merge pull request #63387 from r-ryantm/auto-update/python3.7-py3status 
python37Packages.py3status: 3.18 -> 3.19
 2019-06-18 17:34:29 -04:00
worldofpeace
df4415a14a
Merge pull request #63455 from r-ryantm/auto-update/vlc 
libsForQt5.vlc: 3.0.7 -> 3.0.7.1
 2019-06-18 17:33:07 -04:00
worldofpeace
e0648781b1
Merge pull request #63460 from r-ryantm/auto-update/whois 
whois: 5.4.2 -> 5.4.3
 2019-06-18 17:30:55 -04:00
worldofpeace
f1e6803af3
Merge pull request #63473 from r-ryantm/auto-update/you-get 
you-get: 0.4.1302 -> 0.4.1314
 2019-06-18 17:29:16 -04:00
R. RyanTM
1eac41929c shutter: 0.94.2 -> 0.94.3 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/shutter/versions
 2019-06-18 22:57:22 +02:00
Jan Tojnar
9819cc2ca6
sublime-merge: remove GTK 2 support 
Sublime Merge does not support GTK 2 from build 1092 so we do not need this anymore.

Also brings the expression in sync with Sublime Text.
 2019-06-18 22:53:04 +02:00
Maximilian Bosch
a3667ee6be
libredirect: add posix_spawnp support 
After bumping sublime3 in #61636 we realized that saving files as root
doesn’t work anymore and somehow the paths weren’t patched by
`libredirect`.

After some debugging it came out that Sublime switched from `posix_spawn(3)`
to `posix_spawnp(3)` to start new processes internally. Since `libredirect`
only handled the former, `/usr/bin/pkexec` stopped being redirected.

Wrapping `posix_spawnp` fixes the problem.
 2019-06-18 22:47:11 +02:00
Jan Tojnar
e8cdece9ce
sublime3: add maintainer 2019-06-18 22:47:11 +02:00
Jan Tojnar
48d92c9461
sublime3: remove GTK 2 support 
No version in the repo uses it anymore
 2019-06-18 22:47:11 +02:00
Jan Tojnar
8315cf5b18
qtikz: unstable-20161122 -> 0.12 (#62733) 
qtikz: unstable-20161122 -> 0.12
 2019-06-18 22:39:04 +02:00
Ryan Mulligan
d4afaa8dc2
Merge pull request #63253 from r-ryantm/auto-update/git-ftp 
git-ftp: 1.5.1 -> 1.5.2
 2019-06-18 13:29:18 -07:00
Alyssa Ross
0ca0284580
firefox: 67.0.2 -> 67.0.3 
CVE-2019-11707
 2019-06-18 20:26:43 +00:00
Ryan Mulligan
3422a7a352
Merge pull request #63410 from r-ryantm/auto-update/qownnotes 
qownnotes: 19.5.7 -> 19.6.1
 2019-06-18 13:26:25 -07:00
Ryan Mulligan
2326ced887
Merge pull request #63276 from r-ryantm/auto-update/jdupes 
jdupes: 1.13 -> 1.13.1
 2019-06-18 13:13:50 -07:00
Gabriel Ebner
c740f71c35
freecad: python3, qt5, occt7 (#63348) 
freecad: python3, qt5, occt7
 2019-06-18 22:00:23 +02:00
Michael Raskin
12df2b0348
Merge pull request #63436 from r-ryantm/auto-update/squid 
squid4: 4.6 -> 4.7
 2019-06-18 19:56:54 +00:00
Alyssa Ross
aee879c98f
firefox-bin.updateScript: fix with GNUPGHOME 
If GNUPGHOME is set in the environment, it takes precedence over HOME,
so to avoid using a user's actual GNUPGHOME, we should override thiscc
instead of HOME.
 2019-06-18 19:44:59 +00:00
Alyssa Ross
b0002f4816
firefox-bin.updateScript: always use up-to-date key 
Otherwise we have to keep fetching a new key manually each time they
renew it.
 2019-06-18 19:44:57 +00:00
Alyssa Ross
087c619572
firefox-esr: 60.7.0esr -> 60.7.1esr 
CVE-2019-11707
 2019-06-18 19:42:55 +00:00
Alyssa Ross
dad5e84a3a
firefox-devedition-bin: 68.0b9 -> 68.0b11 
CVE-2019-11707
 2019-06-18 19:42:53 +00:00
Alyssa Ross
95da818dc2
firefox-beta-bin: 68.0b9 -> 68.0b11 
CVE-2019-11707
 2019-06-18 19:42:51 +00:00