Commit graph

258124 commits

Author SHA1 Message Date
Linus Heckemann 5978c30736
Merge pull request #106598 from Ma27/nextcloud-update
nextcloud: 19.0.4 -> 19.0.6, 20.0.1 -> 20.0.3, mark v19 as insecure
2020-12-11 14:30:28 +01:00
Marek Mahut 36b6b3a9f7
Merge pull request #106556 from onsails/github-commenter
github-commenter: add darwin platform
2020-12-11 14:18:51 +01:00
Martin Weinelt 7fdefbe374
Merge pull request #105633 from alyssais/colorize_nicks
weechatScripts.colorize_nicks: init at 27
2020-12-11 14:17:08 +01:00
Jonas Chevalier 9b09b16cab
Merge pull request #106657 from zimbatm/terraform-providers-updates
###### Motivation for this change
2020-12-11 13:11:38 +00:00
Mario Rodas 8006772a05
Merge pull request #106612 from alyssais/cedille
cedille: 1.1.1 -> 1.1.2; fix build
2020-12-11 07:37:18 -05:00
Mario Rodas e019ae8cc6
Merge pull request #106629 from marsam/update-mcfly
mcfly: 0.5.1 -> 0.5.2
2020-12-11 07:36:33 -05:00
Mario Rodas a91ec89845
Merge pull request #106630 from r-ryantm/auto-update/vis
vis: 0.6 -> 0.7
2020-12-11 07:36:19 -05:00
Mario Rodas 2dc6dd6024
Merge pull request #106631 from r-ryantm/auto-update/vultr-cli
vultr-cli: 2.0.0 -> 2.0.1
2020-12-11 07:35:28 -05:00
Mario Rodas 19b754311b
Merge pull request #106649 from r-ryantm/auto-update/bottom
bottom: 0.5.3 -> 0.5.4
2020-12-11 07:34:03 -05:00
Thomas Tuegel e772531ce8
Merge pull request #104474 from doronbehar/pkg/qt515/qtwebkit
qt515.qtwebkit: unbreak
2020-12-11 05:43:59 -06:00
Maximilian Bosch 520b10453f
nextcloud: 19.0.4 -> 19.0.6, 20.0.1 -> 20.0.3, mark v19 as insecure
ChangeLogs:

* https://nextcloud.com/changelog/#20-0-3
* https://nextcloud.com/changelog/#19-0-6

For Nextcloud 20, security advisories for CVE-2020-8259[1] &
CVE-2020-8152[2] were published. The only way to fix those is to upgrade
to v20, although v19 and v18 are supported, the issue won't be fixed
there[3].

Even though both CVEs are only related to the encryption module[4] which
is turned off by default, I decided to add a vulnerability note to
`nextcloud19` since CVE-2020-8259's is rated as "High" by NIST (in
contrast to Nextcloud which rates it as "Low").

If one is not affected by the issue, `nextcloud19` can still be used by
declaring `permittedInsecurePackages`[5].

[1] https://nvd.nist.gov/vuln/detail/CVE-2020-8259,
    https://nextcloud.com/security/advisory/?id=NC-SA-2020-041
[2] https://nvd.nist.gov/vuln/detail/CVE-2020-8152,
    https://nextcloud.com/security/advisory/?id=NC-SA-2020-040
[3] https://help.nextcloud.com/t/fixes-for-cve-2020-8259-cve-2020-8152-in-nextcloud-18-19/98289
[4] https://docs.nextcloud.com/server/20/admin_manual/configuration_files/encryption_configuration.html
[5] https://nixos.org/manual/nixpkgs/stable/#sec-allow-insecure

Closes #106212
2020-12-11 12:39:57 +01:00
zimbatm 0dc2e6d068
terraform-providers.postgresql: 1.7.1 -> 1.8.1
This also changes the origin of the code. Hashicorp decided to stop
maintaining that provider and passed on the buck to cyrilgdn.
2020-12-11 12:08:20 +01:00
zimbatm e1c709b87b
terraform-providers.aws: 3.15.0 -> 3.20.0 2020-12-11 12:00:03 +01:00
Robert Hensing 2abae8433e
Merge pull request #101325 from dbirks/add-lens
lens: init at 3.6.7
2020-12-11 11:41:51 +01:00
R. RyanTM 04de674c5e bottom: 0.5.3 -> 0.5.4 2020-12-11 10:39:54 +00:00
Raghav Sood 10fafe2125
Merge pull request #106596 from r-ryantm/auto-update/monero-gui
monero-gui: 0.17.1.5 -> 0.17.1.6
2020-12-11 09:57:23 +00:00
Michael Weiss 397a5ee2ee
chromiumDev: 89.0.4343.0 -> 89.0.4350.4 2020-12-11 10:54:19 +01:00
Raghav Sood d1d2da4135
Merge pull request #106628 from r-ryantm/auto-update/turbo-geth
turbo-geth: 2020.12.01 -> 2020.12.02
2020-12-11 09:50:25 +00:00
Michael Weiss c8dd31a60b
signal-desktop: 1.38.2 -> 1.39.2 2020-12-11 10:47:07 +01:00
Raghav Sood b57adc97be
Merge pull request #106640 from RaghavSood/ethereum/1.9.25
go-ethereum: 1.9.24 -> 1.9.25
2020-12-11 09:45:50 +00:00
Pavol Rusnak 8915ddba91
Merge pull request #105217 from prusnak/sdl2_mixer
SDL2_mixer: enable midi by default, cleanup package
2020-12-11 10:41:58 +01:00
Raghav Sood 348eb9083e
go-ethereum: 1.9.24 -> 1.9.25 2020-12-11 08:32:03 +00:00
Sandro e68a4f856e
Merge pull request #102136 from siraben/remarkable-which 2020-12-11 09:25:15 +01:00
Peter Hoeg aa995fb0b7 nixos/sshguard: do not do IPv6 setup/teardown unconditionally 2020-12-11 16:19:45 +08:00
Sandro 9a39c1be2c
Merge pull request #106464 from drewrisinger/dr-pr-fast-psautohint-tests 2020-12-11 09:16:56 +01:00
Peter Simons 901cde2623
Merge pull request #106581 from mdorman/aqbanking
aqbanking & gwenhywfar: update to latest versions
2020-12-11 09:15:56 +01:00
Peter Simons 21b8fe302f
Merge pull request #106580 from rissson/nixos-postfix-fix-mastercf-type
nixos/postfix: fix masterCf type
2020-12-11 09:14:47 +01:00
Sandro 998653ad85
Merge pull request #105216 from prusnak/smpeg2
smpeg2: 412 -> unstable-2017-10-18
2020-12-11 08:59:46 +01:00
Sandro cdbbe25fc9
Merge pull request #105363 from veprbl/pr/rivet_3_1_3 2020-12-11 08:58:39 +01:00
Sandro d68e9a7507
Merge pull request #97266 from colemickens/nlohmann_json
nlohmann_json: 3.7.3 -> 3.9.1
2020-12-11 08:55:18 +01:00
Ben Siraphob 12d1b76db8 remarkable-toolchain: use which instead of patching with sed 2020-12-11 14:50:49 +07:00
Sandro 17345770a7
Merge pull request #101788 from tex/tex/xarchiver
xarchiver: fix running
2020-12-11 08:46:27 +01:00
Jörg Thalheim a1cacefde5
Merge pull request #106480 from SCOTT-HAMILTON/spdlog 2020-12-11 07:45:06 +00:00
Sandro 4edafadc03
Merge pull request #105784 from phile314/mucmd-jdk11
mucommander: Use jdk11 & gradle6
2020-12-11 08:44:06 +01:00
Merlin Göttlinger 4f9da3341b
inboxer: remove (#105613)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2020-12-11 08:42:14 +01:00
Sandro 73237f997b
Merge pull request #103207 from herrwiese/for-master/chrysalis-init-0.7.9
chrysalis: init at 0.7.9
2020-12-11 08:28:31 +01:00
Sandro a6947a5761
Merge pull request #102563 from onsails/terraform-ls
terraform-ls: 0.7.0 -> 0.11.0, switch to buildGoModule
2020-12-11 08:19:52 +01:00
Sandro 6fc24a94d8
Merge pull request #104371 from 06kellyjac/octant 2020-12-11 08:13:18 +01:00
Sandro 6704a98ca2
Merge pull request #105741 from aanderse/kodi-python
kodi: accept plugins without extraRuntimeDependencies
2020-12-11 08:12:33 +01:00
Sandro 9b9ac6436b
Merge pull request #106420 from IvarWithoutBones/fix-tldextract
pythonPackages.tldextract: add missing dependency
2020-12-11 08:08:34 +01:00
Sandro 9df5f33e72
Merge pull request #106426 from danieldk/1password-gui-0.9.7
_1password-gui: 0.9.6 -> 0.9.7
2020-12-11 08:03:19 +01:00
Sandro f1e3b5160e
Merge pull request #103338 from hjones2199/siril 2020-12-11 07:35:23 +01:00
Sarah Brofeldt db4ca0b58c
Merge pull request #106538 from johanot/kubernetes-1.19.5
kubernetes: 1.19.4 -> 1.19.5
2020-12-11 07:30:34 +01:00
Hunter Jones 69741a7a48 siril: init at 0.99.6 2020-12-11 00:07:30 -06:00
Sandro 3e96635e90
Merge pull request #106361 from SFrijters/maestral-1.3 2020-12-11 07:06:16 +01:00
Sandro d33fb82b8c
Merge pull request #101947 from edbentley/audiowaveform 2020-12-11 07:03:57 +01:00
Sandro f097374754
Merge pull request #105938 from virusdave/dnicponski/scratch/add_osx-cpu-temp
osx-cpu-temp: Init at 1.0
2020-12-11 06:56:57 +01:00
Sandro 771b78d88b
Merge pull request #105149 from onsails/tabnine
tabnine: fix binary permissions
2020-12-11 06:56:39 +01:00
con-f-use 5c0b0f33e4
mcomix3: manpage location, app icon (#105450)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2020-12-11 06:47:20 +01:00
Sandro f01161226a
Merge pull request #105681 from avdv/q-text-as-data-2.0.19
q-text-as-data: 1.7.4 -> 2.0.19
2020-12-11 06:45:31 +01:00