Commit graph

17036 commits

Author SHA1 Message Date
Vladimír Čunát 145d3ea81c
Merge branch 'master' into staging 2017-02-22 17:47:49 +01:00
Vladimír Čunát 1d1dc2dcc3
open-vm-tools: fixup build with glibc-2.25 2017-02-22 16:54:07 +01:00
Vladimír Čunát 7ccaa9e652
solvespace: fixup build with glibc-2.25 2017-02-22 16:45:08 +01:00
Moritz Ulrich 51134cdbfe
digikam5: Fix build after kde merge. 2017-02-22 16:44:08 +01:00
Michael Raskin 194d137bd3 wireshark: patch for CVE-2017-6041 2017-02-22 14:17:02 +01:00
Graham Christensen cc4919da89
xen: patch for XSAs: 197, 199, 207, 208, 209
XSA-197 Issue Description:

> The compiler can emit optimizations in qemu which can lead to double
> fetch vulnerabilities.  Specifically data on the rings shared
> between qemu and the hypervisor (which the guest under control can
> obtain mappings of) can be fetched twice (during which time the
> guest can alter the contents) possibly leading to arbitrary code
> execution in qemu.

More: https://xenbits.xen.org/xsa/advisory-197.html

XSA-199 Issue Description:

> The code in qemu which implements ioport read/write looks up the
> specified ioport address in a dispatch table.  The argument to the
> dispatch function is a uint32_t, and is used without a range check,
> even though the table has entries for only 2^16 ioports.
>
> When qemu is used as a standalone emulator, ioport accesses are
> generated only from cpu instructions emulated by qemu, and are
> therefore necessarily 16-bit, so there is no vulnerability.
>
> When qemu is used as a device model within Xen, io requests are
> generated by the hypervisor and read by qemu from a shared ring.  The
> entries in this ring use a common structure, including a 64-bit
> address field, for various accesses, including ioport addresses.
>
> Xen will write only 16-bit address ioport accesses.  However,
> depending on the Xen and qemu version, the ring may be writeable by
> the guest.  If so, the guest can generate out-of-range ioport
> accesses, resulting in wild pointer accesses within qemu.

More: https://xenbits.xen.org/xsa/advisory-199.html

XSA-207 Issue Description:

> Certain internal state is set up, during domain construction, in
> preparation for possible pass-through device assignment.  On ARM and
> AMD V-i hardware this setup includes memory allocation.  On guest
> teardown, cleanup was erroneously only performed when the guest
> actually had a pass-through device assigned.

More: https://xenbits.xen.org/xsa/advisory-207.html

XSA-209 Issue Description:

> When doing bitblt copy backwards, qemu should negate the blit width.
> This avoids an oob access before the start of video memory.

More: https://xenbits.xen.org/xsa/advisory-208.html

XSA-208 Issue Description:

> In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine
> cirrus_bitblt_cputovideo fails to check wethehr the specified memory
> region is safe.

More: https://xenbits.xen.org/xsa/advisory-209.html
2017-02-22 08:00:45 -05:00
Peter Hoeg 409dac4155 Merge branch 'u/tg' into real_master 2017-02-22 20:14:26 +08:00
Peter Hoeg 494462e857 terragrunt: 0.10.1 -> 0.10.2 2017-02-22 20:12:25 +08:00
Franz Pletz 67018e7759
pymol: fix evaluation
cc #23007 @Mounium @Mic92
2017-02-22 08:48:42 +01:00
Franz Pletz 2a228bdc9b Merge pull request #23064 from NeQuissimus/rkt_1_25_0
rkt: 1.24.0 -> 1.25.0
2017-02-22 07:49:09 +01:00
Mounium eb688ac0a7 pymol: init at 1.8.4 (#23007) 2017-02-22 01:35:09 +01:00
Tim Steinbach 8b60413e95
rkt: 1.24.0 -> 1.25.0 2017-02-21 18:51:34 -05:00
Peter Hoeg 4ecaed783b utox: remove unnecessary line 2017-02-22 07:49:02 +08:00
Peter Hoeg 2cd286b3cf Merge branch 'u/utox' into real_master 2017-02-22 07:33:56 +08:00
Peter Hoeg 2805ac54d8 utox: 0.12.2 -> 0.13.0 2017-02-22 07:33:31 +08:00
Shea Levy fd732dec88 zoom-us: bump 2017-02-21 14:15:44 -05:00
Vladimír Čunát cc8104f9bb
ekiga: mark as broken for now
/cc maintainer @7c6f434c.
2017-02-21 19:03:33 +01:00
Vladimír Čunát 3d600726b3
xen: fixup build with glibc-2.25 2017-02-21 18:26:52 +01:00
Domen Kožar ba267839d1 Merge pull request #23047 from FlorentBecker/remove_pijul
pijul: remove
2017-02-21 16:28:19 +01:00
Joachim F 2379d5e537 Merge pull request #23033 from mdorman/emacs-updates
Automated emacs package updates
2017-02-21 16:27:00 +01:00
Florent Becker 0a840d4f41 pijul: remove
This version is not working, and it is not even a release upstream
2017-02-21 15:34:28 +01:00
Frederik Rietdijk 5bd6331b29 Merge pull request #22944 from johbo/add-trytond
trytond: init at 4.2.1
2017-02-21 08:03:43 +01:00
Pradeep Chhetri be30dcefb6 marathon: 1.3.6 -> 1.4.1 (#22935) 2017-02-21 05:52:10 +01:00
romildo e6fd2284f5
albert: 0.8.11 -> 0.9.3 2017-02-20 21:46:36 -05:00
Michael Alan Dorman e2487c26b4 melpa-packages: 2017-02-20
Removals:
 - malabar-mode: removed from melpa
2017-02-20 20:18:21 -05:00
Michael Alan Dorman 602fbdbf48 melpa-stable-packages: 2017-02-20
Removals:
 - malabar-mode: removed from melpa
2017-02-20 20:18:20 -05:00
Michael Alan Dorman c5d211df4c elpa-packages: 2017-02-20 2017-02-20 20:18:20 -05:00
Johannes Bornhold 6f8a44820e trytond: init at 4.2.1 2017-02-20 23:03:17 +01:00
Franz Pletz c302cb4910
gitlab: 8.16.4 -> 8.16.6 2017-02-20 21:53:17 +01:00
Rafael de F. Ferreira 1daf49ccf4 idea-community: 2016.3.3 -> 2016.3.4 2017-02-20 21:25:20 +01:00
Graham Christensen 69a0e9ea11 Merge pull request #22985 from Kendos-Kenlen/master
idea.webstorm: 2016.3.2 -> 2016.3.3
2017-02-20 10:01:31 -05:00
Thomas Tuegel 7fa06b3cd2 Merge pull request #22991 from layus/deprecate-kde4-ktikz
qtikz: update to Qt5; remove ktikz
2017-02-20 08:37:47 -06:00
Nikolay Amiantov ec2c9d57b5 Merge pull request #22568 from abbradar/chromium-updates
Chromium updates
2017-02-20 15:49:04 +03:00
Robin Gloster dcba6eae1b Merge pull request #22116 from LnL7/darwin-cmus
cmus: fix darwin
2017-02-20 13:02:30 +01:00
Frederik Rietdijk c79371b823 kdeconnect: 1.0 -> 1.0.3 2017-02-20 11:44:14 +01:00
Frederik Rietdijk ffe6935ea8 kile: 2016-10-24 -> 2017-02-09 2017-02-20 11:44:14 +01:00
Frederik Rietdijk 9d48d3774e Merge pull request #22713 from richardlarocque/antfs-cli
antfs-cli and openant: init at unstable-2017-02-11
2017-02-20 09:06:02 +01:00
Richard Larocque 13884d6de1 antfs-cli: init at unstable-2017-02-11 2017-02-19 16:22:21 -08:00
Graham Christensen a21455d989 firefox-bin: Add gpg verification to updater (#22270) 2017-02-19 18:33:31 +00:00
Maximilian Bosch 10a453c61b
geogebra: add ma27 as maintainer 2017-02-19 16:51:01 +01:00
Maximilian Bosch 5d62724e27
geogebra: 5-0-328-0 -> 5-0-331-0 2017-02-19 16:44:49 +01:00
vbgl d31577cfd3 Merge pull request #22871 from FlorentBecker/default_ocaml_402
Default ocaml 402
2017-02-19 15:54:54 +01:00
Tuomas Tynkkynen e5e1bdca53 firefox, thunderbird: Use common-updater/update-source-version script
Replace the custom patching code with the common script.

Also use callPackage and makeBinPath
2017-02-19 16:51:17 +02:00
Florent Becker e7953d20d2 orpie: fix build with ocaml 4.02+ 2017-02-19 13:05:45 +01:00
Florent Becker 47cb2a9f3e monotone-viz: fix build with ocaml 4.02+ 2017-02-19 13:05:45 +01:00
Guillaume Maudoux 9016be4589 qtikz: update to Qt5; remove ktikz 2017-02-19 12:26:51 +01:00
aszlig 6d6cf3f24a
Merge pull request #22551 (paperwork locale path)
Fixes the locale path, which I got wrong in
7199f1bd94.

It should have been "$out/share", because Paperwork itself already
appends /locale to the path.

Thanks to @symphorien for the fix.
2017-02-19 06:36:24 +01:00
Gauthier POGAM--LE MONTAGNER 326fa70896 idea.webstorm: 2016.3.2 -> 2016.3.3 2017-02-19 03:10:50 +01:00
Peter Hoeg 993d2db029 libreoffice-fresh: build on hydra 2017-02-19 00:09:41 +01:00
ndowens e3f5ebd38f worker: add version to name and so some minor cleanups (#22949) 2017-02-18 20:26:18 +01:00