Commit Graph

154595 Commits

Author SHA1 Message Date
Florian Klink
3f65f10982 ghostscript: 9.24 -> 9.25 (#47934)
Highlights in this release include:

This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional security issues over the recent 9.24 release.

CVE-2018-16802
CVE-2018-17183

Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources.

Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits.
PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid these issues.

As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files.

IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available as its own package separately from Ghostscript (and MuPDF).

The usual round of bug fixes, compatibility changes, and incremental improvements.
2018-10-06 00:47:08 +02:00
Philip Nelson
3a0fbe3cbe youtube-dl: 2018.09.26 -> 2018.10.05 (#47940) 2018-10-06 00:36:03 +02:00
Samuel Dionne-Riel
82d1bf9691 nixos/doc: Updates release date for 18.09 2018-10-05 18:32:42 -04:00
Ben Gamari
58a02af417 qpdf: Drop CVE-2018-9918.patch (#47935)
This has been merged upstream in 8.2.1.
2018-10-06 00:30:49 +02:00
Samuel Dionne-Riel
29b479eb72 README: 18.03 -> 18.09 2018-10-05 18:23:57 -04:00
Samuel Dionne-Riel
31b1553880
Merge pull request #47575 from samueldr/1809/release-notes
Updates 18.09 release notes for release.
2018-10-05 18:17:04 -04:00
Andreas Rammhold
5acda907bb
Merge pull request #47924 from edef1c/git-2.19.1
git: 2.19.0 -> 2.19.1 (CVE-2018-17456)
2018-10-05 22:11:11 +02:00
edef
5cdecca8b7 git: 2.19.0 -> 2.19.1 (CVE-2018-17456) 2018-10-05 18:36:08 +00:00
Jörg Thalheim
5bba9f3906
Merge pull request #47908 from dywedir/uutils-coreutils
uutils-coreutils: 2018-02-09 -> 2018-09-30
2018-10-05 19:35:13 +01:00
Jörg Thalheim
c65da8b511
Merge pull request #47913 from cryptix/addVimVue
misc/vim-plugins: add posva/vim-vue
2018-10-05 18:28:21 +01:00
Jörg Thalheim
5694f1e1a9
Merge pull request #47519 from aneeshusa/vagrant-remove-unused-Gemfile
vagrant: remove unused vendored Gemfile{,.lock}
2018-10-05 18:25:01 +01:00
Graham Christensen
b4755393cc
Merge pull request #47920 from grahamc/link-to-definition
docs: Link to Definition
2018-10-05 13:13:15 -04:00
Timo Kaufmann
3f98dd18ca
Merge pull request #47906 from nyanloutre/emby-bin-name-fix
nixos/emby: fix use of outdated binary name changed by #47659
2018-10-05 17:39:28 +02:00
Markus Kowalewski
76b97596c0 rtl-sdr: 0.5.4 -> 0.6.0 2018-10-05 17:24:55 +02:00
Graham Christensen
5daee73ce4
Generate links to function definitions
Hydra passes the full revision in to the input, which we pass through.

If we don't get this ,we try to get it from other sources, or default to
master which should have the definition in a close-ish location.

All published docs should have theURL resolve properly, only local
hackers will have the link break.
2018-10-05 11:20:46 -04:00
Graham Christensen
4312cfdbda
version.nix: extract revision-fetching function 2018-10-05 11:06:28 -04:00
Graham Christensen
730dac1d7b
Merge pull request #47837 from grahamc/doc-lib-funcs
nixpkgs: Start documenting library functions in XML
2018-10-05 10:18:47 -04:00
Graham Christensen
f835f77e02
nixpkgs: Start documenting library functions in XML
Covers assert functions and about half of the attrsets functions.

Some internal consistency around IDs could be improved.
2018-10-05 10:06:08 -04:00
Timo Kaufmann
a00b7de165
Merge pull request #47915 from timokau/zn_poly-update
zn_poly: 0.9 -> 0.9.1
2018-10-05 16:05:24 +02:00
Vincent Laporte
9db397351a unoconv: fix reference to libreoffice (#47847) 2018-10-05 16:03:20 +02:00
Timo Kaufmann
65589faa2f zn_poly: 0.9 -> 0.9.1
Sage has taken over maintenance since the original author no longer
maintains the project.
2018-10-05 15:50:30 +02:00
Vladyslav M
a5d6705e20 imagemagick7: 7.0.8-6 -> 7.0.8-12 (#47851) 2018-10-05 15:48:38 +02:00
qolii
03d770c0ee linux-hardkernel: 4.14.69-148 -> 4.14.73-149 (#47896) 2018-10-05 15:48:07 +02:00
tv
4b613137e4 sec: 2.8.0 -> 2.8.1 (#47857) 2018-10-05 15:32:51 +02:00
R. RyanTM
360054f417 brogue: 1.7.4 -> 1.7.5 (#47830)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/brogue/versions
2018-10-05 15:15:13 +02:00
R. RyanTM
75e4fcf267 containerd: 1.1.2 -> 1.1.4 (#47807)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/containerd/versions
2018-10-05 15:14:50 +02:00
R. RyanTM
b49c4d2b2e eid-mw: 4.4.7 -> 4.4.8 (#47816)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/eid-mw/versions
2018-10-05 15:14:31 +02:00
Henry
388adf92a1 misc/vim-plugins: add posva/vim-vue 2018-10-05 14:54:39 +02:00
Orivej Desh
dbc4ee75a2 psi-plus: 1.3.410 -> 1.3.422 2018-10-05 12:08:16 +00:00
Austin Seipp
778dc453b6 perlPackages.CryptEd25519: init at 1.04
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-10-05 06:04:08 -05:00
Austin Seipp
20c7b61963 perlPackages.Mojolicious: 8.01 -> 8.02
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-10-05 06:04:08 -05:00
Justin Humm
bea3f18185 notmuch: use test-database in checkPhase
for running all tests, notmuch requires a database file, which can be
downloaded at https://notmuchmail.org/releases/test-databases/

See test/README in notmuch sources for further info.
2018-10-05 12:36:12 +02:00
Marco Maggesi
eae1bd0958
Merge pull request #47805 from r-ryantm/auto-update/fossil
fossil: 2.6 -> 2.7
2018-10-05 12:32:14 +02:00
Sarah Brofeldt
6540a480b4
Merge pull request #47880 from pacien/patch-6
matrix-synapse: 0.33.5 -> 0.33.6
2018-10-05 10:32:59 +02:00
Vladyslav Mykhailichenko
1e02a2c063 uutils-coreutils: 2018-02-09 -> 2018-09-30 2018-10-05 10:50:19 +03:00
nyanloutre
bb06b5b442 nixos/emby: fixes binary name change introduced by #47659 2018-10-05 09:25:39 +02:00
lewo
8c0d32f8e7
Merge pull request #47693 from nicknovitski/envsubst-init
envsubst: init at 1.1.0
2018-10-05 09:00:33 +02:00
lewo
96ad503163
Merge pull request #47692 from nicknovitski/kubeval-init
kubeval: init at 0.7.3
2018-10-05 08:41:41 +02:00
Gabriel Ebner
e1738bf1a2 whipper: add cddb dependency 2018-10-05 08:22:26 +02:00
Jan Tojnar
89beaef64d
Merge pull request #47786 from r-ryantm/auto-update/ibus-typing-booster
ibus-engines.typing-booster-unwrapped: 2.1.1 -> 2.1.2
2018-10-05 06:46:25 +02:00
Peter Hoeg
78289fc6f8
Merge pull request #47842 from peterhoeg/f/activation
nixos system-activation: support activation scripts run in a user context
2018-10-05 11:22:33 +08:00
Peter Hoeg
be27131c06
Merge pull request #47694 from magnetophon/lsp-plugins
lsp-plugins: init at 1.1.4
2018-10-05 10:43:00 +08:00
Peter Hoeg
c81d370bb9
Merge branch 'master' into f/activation 2018-10-05 10:08:56 +08:00
Peter Hoeg
4dada63a17 plasma5: run kbuildsycoca5 in the user context 2018-10-05 10:06:40 +08:00
Peter Hoeg
8118d6eb2e switch-to-configuration.pl: activate the nixos-activation.service user service 2018-10-05 10:06:40 +08:00
Peter Hoeg
1353ba2678 system-activation: support script fragments to run in a user context 2018-10-05 10:06:40 +08:00
roconnor
8a4a732e99
Merge pull request #47855 from roconnor/bitcoin
Bitcoin: 0.16.3 -> 0.17.0
2018-10-04 21:44:04 -04:00
Russell O'Connor
ef0f1eb33f bitcoin: enable doCheck
Fixes checkPhase for bitcoin-qt.
2018-10-04 21:41:40 -04:00
Jan Tojnar
5cc18c4781
gnome3: remove versionBranch attribute
Standard library now contains stdenv.lib.versions.majorMinor,
which does the same.
2018-10-05 02:17:19 +02:00
John Wiegley
df48060e4c
coqPackages.coq-haskell: Support building with Coq 8.8 2018-10-04 17:13:41 -07:00