Commit Graph
258296 Commits
Author SHA1 Message Date
Mario RodasandGitHub 19b754311b Merge pull request #106649 from r-ryantm/auto-update/bottom
bottom: 0.5.3 -> 0.5.4
2020-12-11 07:34:03 -05:00
github-actions[bot]andGitHub 9fa8c7670d Merge master into staging-next 2020-12-11 12:20:25 +00:00
Thomas TuegelandGitHub e772531ce8 Merge pull request #104474 from doronbehar/pkg/qt515/qtwebkit
qt515.qtwebkit: unbreak
2020-12-11 05:43:59 -06:00
Maximilian Bosch 520b10453f nextcloud: 19.0.4 -> 19.0.6, 20.0.1 -> 20.0.3, mark v19 as insecure
ChangeLogs:

* https://nextcloud.com/changelog/#20-0-3
* https://nextcloud.com/changelog/#19-0-6

For Nextcloud 20, security advisories for CVE-2020-8259[1] &
CVE-2020-8152[2] were published. The only way to fix those is to upgrade
to v20, although v19 and v18 are supported, the issue won't be fixed
there[3].

Even though both CVEs are only related to the encryption module[4] which
is turned off by default, I decided to add a vulnerability note to
`nextcloud19` since CVE-2020-8259's is rated as "High" by NIST (in
contrast to Nextcloud which rates it as "Low").

If one is not affected by the issue, `nextcloud19` can still be used by
declaring `permittedInsecurePackages`[5].

[1] https://nvd.nist.gov/vuln/detail/CVE-2020-8259,
    https://nextcloud.com/security/advisory/?id=NC-SA-2020-041
[2] https://nvd.nist.gov/vuln/detail/CVE-2020-8152,
    https://nextcloud.com/security/advisory/?id=NC-SA-2020-040
[3] https://help.nextcloud.com/t/fixes-for-cve-2020-8259-cve-2020-8152-in-nextcloud-18-19/98289
[4] https://docs.nextcloud.com/server/20/admin_manual/configuration_files/encryption_configuration.html
[5] https://nixos.org/manual/nixpkgs/stable/#sec-allow-insecure

Closes #106212
2020-12-11 12:39:57 +01:00
R. RyanTM b0961d1430 delve: 1.5.0 -> 1.5.1 2020-12-11 11:36:16 +00:00
zimbatm 0dc2e6d068 terraform-providers.postgresql: 1.7.1 -> 1.8.1
This also changes the origin of the code. Hashicorp decided to stop
maintaining that provider and passed on the buck to cyrilgdn.
2020-12-11 12:08:20 +01:00
zimbatm e1c709b87b terraform-providers.aws: 3.15.0 -> 3.20.0 2020-12-11 12:00:03 +01:00
Robert Hensing f0568c2228 fetchMavenArtifact: switch mirrors to https
Maven repositories are disabling HTTP support for security.
Even though Nix adds some security with its own hash validation,
broken mirrors are a, well, suboptimal experience.
I don't know of any plans by sonatype, but it seems like a matter
of time.

https://www.lightbend.com/blog/lightbend-to-require-https-on-repos-starting-august-5-2020
2020-12-11 11:43:23 +01:00
Robert HensingandGitHub 2abae8433e Merge pull request #101325 from dbirks/add-lens
lens: init at 3.6.7
2020-12-11 11:41:51 +01:00
R. RyanTM 04de674c5e bottom: 0.5.3 -> 0.5.4 2020-12-11 10:39:54 +00:00
Raghav SoodandGitHub 10fafe2125 Merge pull request #106596 from r-ryantm/auto-update/monero-gui
monero-gui: 0.17.1.5 -> 0.17.1.6
2020-12-11 09:57:23 +00:00
Michael Weiss 397a5ee2ee chromiumDev: 89.0.4343.0 -> 89.0.4350.4 2020-12-11 10:54:19 +01:00
Raghav SoodandGitHub d1d2da4135 Merge pull request #106628 from r-ryantm/auto-update/turbo-geth
turbo-geth: 2020.12.01 -> 2020.12.02
2020-12-11 09:50:25 +00:00
Michael Weiss c8dd31a60b signal-desktop: 1.38.2 -> 1.39.2 2020-12-11 10:47:07 +01:00
Raghav SoodandGitHub b57adc97be Merge pull request #106640 from RaghavSood/ethereum/1.9.25
go-ethereum: 1.9.24 -> 1.9.25
2020-12-11 09:45:50 +00:00
Arnout Engelen 7f4bc12f13 talloc: remove python2 as a build dependency
This makes sure waf, which is used to build talloc, is ran
with python3 rather than python2.

(another option would be to make this the default for
wafHook, see https://github.com/NixOS/nixpkgs/pull/104701)
2020-12-11 10:43:00 +01:00
Pavol RusnakandGitHub 8915ddba91 Merge pull request #105217 from prusnak/sdl2_mixer
SDL2_mixer: enable midi by default, cleanup package
2020-12-11 10:41:58 +01:00
R. RyanTM ca389ed6fb beamerpresenter: 0.1.2 -> 0.1.3 2020-12-11 09:31:14 +00:00
Arnout Engelen ce9c9f0fe0 smesh: fix building with clang
so the darwin build has a chance of succeeding again
2020-12-11 09:52:14 +01:00
Raghav Sood 348eb9083e go-ethereum: 1.9.24 -> 1.9.25 2020-12-11 08:32:03 +00:00
SandroandGitHub e68a4f856e Merge pull request #102136 from siraben/remarkable-which 2020-12-11 09:25:15 +01:00
Peter Hoeg aa995fb0b7 nixos/sshguard: do not do IPv6 setup/teardown unconditionally 2020-12-11 16:19:45 +08:00
SandroandGitHub 9a39c1be2c Merge pull request #106464 from drewrisinger/dr-pr-fast-psautohint-tests 2020-12-11 09:16:56 +01:00
Peter SimonsandGitHub 901cde2623 Merge pull request #106581 from mdorman/aqbanking
aqbanking & gwenhywfar: update to latest versions
2020-12-11 09:15:56 +01:00
Peter SimonsandGitHub 21b8fe302f Merge pull request #106580 from rissson/nixos-postfix-fix-mastercf-type
nixos/postfix: fix masterCf type
2020-12-11 09:14:47 +01:00
SandroandGitHub 998653ad85 Merge pull request #105216 from prusnak/smpeg2
smpeg2: 412 -> unstable-2017-10-18
2020-12-11 08:59:46 +01:00
SandroandGitHub cdbbe25fc9 Merge pull request #105363 from veprbl/pr/rivet_3_1_3 2020-12-11 08:58:39 +01:00
SandroandGitHub d68e9a7507 Merge pull request #97266 from colemickens/nlohmann_json
nlohmann_json: 3.7.3 -> 3.9.1
2020-12-11 08:55:18 +01:00
Ben Siraphob 12d1b76db8 remarkable-toolchain: use which instead of patching with sed 2020-12-11 14:50:49 +07:00
SandroandGitHub 17345770a7 Merge pull request #101788 from tex/tex/xarchiver
xarchiver: fix running
2020-12-11 08:46:27 +01:00
Jörg ThalheimandGitHub a1cacefde5 Merge pull request #106480 from SCOTT-HAMILTON/spdlog 2020-12-11 07:45:06 +00:00
SandroandGitHub 4edafadc03 Merge pull request #105784 from phile314/mucmd-jdk11
mucommander: Use jdk11 & gradle6
2020-12-11 08:44:06 +01:00
4f9da3341b inboxer: remove (#105613)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2020-12-11 08:42:14 +01:00
Jörg ThalheimandFrederik Rietdijk 97b412d4a6 systemd: fix pc files
upstream decided to make this non-configurable... Lets' revert to the
version before.
2020-12-11 08:37:42 +01:00
SandroandGitHub 73237f997b Merge pull request #103207 from herrwiese/for-master/chrysalis-init-0.7.9
chrysalis: init at 0.7.9
2020-12-11 08:28:31 +01:00
SandroandGitHub a6947a5761 Merge pull request #102563 from onsails/terraform-ls
terraform-ls: 0.7.0 -> 0.11.0, switch to buildGoModule
2020-12-11 08:19:52 +01:00
SandroandGitHub 6fc24a94d8 Merge pull request #104371 from 06kellyjac/octant 2020-12-11 08:13:18 +01:00
SandroandGitHub 6704a98ca2 Merge pull request #105741 from aanderse/kodi-python
kodi: accept plugins without extraRuntimeDependencies
2020-12-11 08:12:33 +01:00
SandroandGitHub 9b9ac6436b Merge pull request #106420 from IvarWithoutBones/fix-tldextract
pythonPackages.tldextract: add missing dependency
2020-12-11 08:08:34 +01:00
SandroandGitHub 9df5f33e72 Merge pull request #106426 from danieldk/1password-gui-0.9.7
_1password-gui: 0.9.6 -> 0.9.7
2020-12-11 08:03:19 +01:00
SandroandGitHub f1e3b5160e Merge pull request #103338 from hjones2199/siril 2020-12-11 07:35:23 +01:00
Sarah BrofeldtandGitHub db4ca0b58c Merge pull request #106538 from johanot/kubernetes-1.19.5
kubernetes: 1.19.4 -> 1.19.5
2020-12-11 07:30:34 +01:00
github-actions[bot]andGitHub 43f4575008 Merge master into staging-next 2020-12-11 06:17:52 +00:00
Hunter Jones 69741a7a48 siril: init at 0.99.6 2020-12-11 00:07:30 -06:00
SandroandGitHub 3e96635e90 Merge pull request #106361 from SFrijters/maestral-1.3 2020-12-11 07:06:16 +01:00
SandroandGitHub d33fb82b8c Merge pull request #101947 from edbentley/audiowaveform 2020-12-11 07:03:57 +01:00
SandroandGitHub f097374754 Merge pull request #105938 from virusdave/dnicponski/scratch/add_osx-cpu-temp
osx-cpu-temp: Init at 1.0
2020-12-11 06:56:57 +01:00
SandroandGitHub 771b78d88b Merge pull request #105149 from onsails/tabnine
tabnine: fix binary permissions
2020-12-11 06:56:39 +01:00
5c0b0f33e4 mcomix3: manpage location, app icon (#105450)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2020-12-11 06:47:20 +01:00
SandroandGitHub f01161226a Merge pull request #105681 from avdv/q-text-as-data-2.0.19
q-text-as-data: 1.7.4 -> 2.0.19
2020-12-11 06:45:31 +01:00