Commit Graph
154598 Commits
Author SHA1 Message Date
Florian Klinkandxeji 02b0836d42 ghostscript: update hash (#47946)
I previously didn't update the hash, so was still building ghostscript-9.24
(which explained why docs were still from 9.24)

The ICC profile validation patch from #47937 is included in 9.25, so we
can strip it from the list of patches.

cc @xeji
2018-10-06 01:54:26 +02:00
Andreas RammholdandGitHub 938d98ebd5 Merge pull request #47937 from flokli/ghostscript-icc-profile-validation
ghostscript: include icc profile validation patch
2018-10-06 00:47:49 +02:00
Florian Klinkandxeji 3f65f10982 ghostscript: 9.24 -> 9.25 (#47934)
Highlights in this release include:

This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional security issues over the recent 9.24 release.

CVE-2018-16802
CVE-2018-17183

Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources.

Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits.
PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid these issues.

As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files.

IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available as its own package separately from Ghostscript (and MuPDF).

The usual round of bug fixes, compatibility changes, and incremental improvements.
2018-10-06 00:47:08 +02:00
Philip Nelsonandxeji 3a0fbe3cbe youtube-dl: 2018.09.26 -> 2018.10.05 (#47940) 2018-10-06 00:36:03 +02:00
Samuel Dionne-Riel 82d1bf9691 nixos/doc: Updates release date for 18.09 2018-10-05 18:32:42 -04:00
Ben Gamariandxeji 58a02af417 qpdf: Drop CVE-2018-9918.patch (#47935)
This has been merged upstream in 8.2.1.
2018-10-06 00:30:49 +02:00
Samuel Dionne-Riel 29b479eb72 README: 18.03 -> 18.09 2018-10-05 18:23:57 -04:00
Samuel Dionne-RielandGitHub 31b1553880 Merge pull request #47575 from samueldr/1809/release-notes
Updates 18.09 release notes for release.
2018-10-05 18:17:04 -04:00
Edmund WuandFlorian Klink 9a57e00a36 ghostscript: include icc profile validation patch
See https://github.com/apple/cups/issues/5394

closes #47193, #46216

source url
http://git.ghostscript.com/?p=ghostpdl.git;a=patch;h=bc3df0773fcc
contains invalid characters, which is why we don't fetchpatch.

(cherry picked from commit 2aa750694e2e0d77bf14e3145c4999b6bcee25b0)
2018-10-05 23:20:00 +02:00
Andreas RammholdandGitHub 5acda907bb Merge pull request #47924 from edef1c/git-2.19.1
git: 2.19.0 -> 2.19.1 (CVE-2018-17456)
2018-10-05 22:11:11 +02:00
edef 5cdecca8b7 git: 2.19.0 -> 2.19.1 (CVE-2018-17456) 2018-10-05 18:36:08 +00:00
Jörg ThalheimandGitHub 5bba9f3906 Merge pull request #47908 from dywedir/uutils-coreutils
uutils-coreutils: 2018-02-09 -> 2018-09-30
2018-10-05 19:35:13 +01:00
Jörg ThalheimandGitHub c65da8b511 Merge pull request #47913 from cryptix/addVimVue
misc/vim-plugins: add posva/vim-vue
2018-10-05 18:28:21 +01:00
Jörg ThalheimandGitHub 5694f1e1a9 Merge pull request #47519 from aneeshusa/vagrant-remove-unused-Gemfile
vagrant: remove unused vendored Gemfile{,.lock}
2018-10-05 18:25:01 +01:00
Graham ChristensenandGitHub b4755393cc Merge pull request #47920 from grahamc/link-to-definition
docs: Link to Definition
2018-10-05 13:13:15 -04:00
Timo KaufmannandGitHub 3f98dd18ca Merge pull request #47906 from nyanloutre/emby-bin-name-fix
nixos/emby: fix use of outdated binary name changed by #47659
2018-10-05 17:39:28 +02:00
Markus KowalewskiandBjørn Forsman 76b97596c0 rtl-sdr: 0.5.4 -> 0.6.0 2018-10-05 17:24:55 +02:00
Graham Christensen 5daee73ce4 Generate links to function definitions
Hydra passes the full revision in to the input, which we pass through.

If we don't get this ,we try to get it from other sources, or default to
master which should have the definition in a close-ish location.

All published docs should have theURL resolve properly, only local
hackers will have the link break.
2018-10-05 11:20:46 -04:00
Graham Christensen 4312cfdbda version.nix: extract revision-fetching function 2018-10-05 11:06:28 -04:00
Graham ChristensenandGitHub 730dac1d7b Merge pull request #47837 from grahamc/doc-lib-funcs
nixpkgs: Start documenting library functions in XML
2018-10-05 10:18:47 -04:00
Graham Christensen f835f77e02 nixpkgs: Start documenting library functions in XML
Covers assert functions and about half of the attrsets functions.

Some internal consistency around IDs could be improved.
2018-10-05 10:06:08 -04:00
Timo KaufmannandGitHub a00b7de165 Merge pull request #47915 from timokau/zn_poly-update
zn_poly: 0.9 -> 0.9.1
2018-10-05 16:05:24 +02:00
Vincent Laporteandxeji 9db397351a unoconv: fix reference to libreoffice (#47847) 2018-10-05 16:03:20 +02:00
Timo Kaufmann 65589faa2f zn_poly: 0.9 -> 0.9.1
Sage has taken over maintenance since the original author no longer
maintains the project.
2018-10-05 15:50:30 +02:00
Vladyslav Mandxeji a5d6705e20 imagemagick7: 7.0.8-6 -> 7.0.8-12 (#47851) 2018-10-05 15:48:38 +02:00
qoliiandxeji 03d770c0ee linux-hardkernel: 4.14.69-148 -> 4.14.73-149 (#47896) 2018-10-05 15:48:07 +02:00
tvandxeji 4b613137e4 sec: 2.8.0 -> 2.8.1 (#47857) 2018-10-05 15:32:51 +02:00
R. RyanTMandxeji 360054f417 brogue: 1.7.4 -> 1.7.5 (#47830)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/brogue/versions
2018-10-05 15:15:13 +02:00
R. RyanTMandxeji 75e4fcf267 containerd: 1.1.2 -> 1.1.4 (#47807)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/containerd/versions
2018-10-05 15:14:50 +02:00
R. RyanTMandxeji b49c4d2b2e eid-mw: 4.4.7 -> 4.4.8 (#47816)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/eid-mw/versions
2018-10-05 15:14:31 +02:00
Henry 388adf92a1 misc/vim-plugins: add posva/vim-vue 2018-10-05 14:54:39 +02:00
Orivej Desh dbc4ee75a2 psi-plus: 1.3.410 -> 1.3.422 2018-10-05 12:08:16 +00:00
Austin Seipp 778dc453b6 perlPackages.CryptEd25519: init at 1.04
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-10-05 06:04:08 -05:00
Austin Seipp 20c7b61963 perlPackages.Mojolicious: 8.01 -> 8.02
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-10-05 06:04:08 -05:00
Justin HummandRok Garbas bea3f18185 notmuch: use test-database in checkPhase
for running all tests, notmuch requires a database file, which can be
downloaded at https://notmuchmail.org/releases/test-databases/

See test/README in notmuch sources for further info.
2018-10-05 12:36:12 +02:00
Marco MaggesiandGitHub eae1bd0958 Merge pull request #47805 from r-ryantm/auto-update/fossil
fossil: 2.6 -> 2.7
2018-10-05 12:32:14 +02:00
Sarah BrofeldtandGitHub 6540a480b4 Merge pull request #47880 from pacien/patch-6
matrix-synapse: 0.33.5 -> 0.33.6
2018-10-05 10:32:59 +02:00
Vladyslav Mykhailichenko 1e02a2c063 uutils-coreutils: 2018-02-09 -> 2018-09-30 2018-10-05 10:50:19 +03:00
nyanloutre bb06b5b442 nixos/emby: fixes binary name change introduced by #47659 2018-10-05 09:25:39 +02:00
lewoandGitHub 8c0d32f8e7 Merge pull request #47693 from nicknovitski/envsubst-init
envsubst: init at 1.1.0
2018-10-05 09:00:33 +02:00
lewoandGitHub 96ad503163 Merge pull request #47692 from nicknovitski/kubeval-init
kubeval: init at 0.7.3
2018-10-05 08:41:41 +02:00
Gabriel Ebner e1738bf1a2 whipper: add cddb dependency 2018-10-05 08:22:26 +02:00
Jan TojnarandGitHub 89beaef64d Merge pull request #47786 from r-ryantm/auto-update/ibus-typing-booster
ibus-engines.typing-booster-unwrapped: 2.1.1 -> 2.1.2
2018-10-05 06:46:25 +02:00
Peter HoegandGitHub 78289fc6f8 Merge pull request #47842 from peterhoeg/f/activation
nixos system-activation: support activation scripts run in a user context
2018-10-05 11:22:33 +08:00
Peter HoegandGitHub be27131c06 Merge pull request #47694 from magnetophon/lsp-plugins
lsp-plugins: init at 1.1.4
2018-10-05 10:43:00 +08:00
Peter HoegandGitHub c81d370bb9 Merge branch 'master' into f/activation 2018-10-05 10:08:56 +08:00
Peter Hoeg 4dada63a17 plasma5: run kbuildsycoca5 in the user context 2018-10-05 10:06:40 +08:00
Peter Hoeg 8118d6eb2e switch-to-configuration.pl: activate the nixos-activation.service user service 2018-10-05 10:06:40 +08:00
Peter Hoeg 1353ba2678 system-activation: support script fragments to run in a user context 2018-10-05 10:06:40 +08:00
roconnorandGitHub 8a4a732e99 Merge pull request #47855 from roconnor/bitcoin
Bitcoin: 0.16.3 -> 0.17.0
2018-10-04 21:44:04 -04:00