Thomas Tuegel
9d6bfacc85
kde4: remove inessential KDE 4 modules
2017-02-24 16:49:02 -06:00
Thomas Tuegel
f927276513
Remove kde4.rsibreak
...
- No maintainer in Nixpkgs
- No upstream activity
- Original source unavailable
2017-02-24 16:49:02 -06:00
Thomas Tuegel
7e77aaf221
Remove kde4.kwooty
...
- No maintainer in Nixpkgs
- No upstream activity
2017-02-24 16:49:02 -06:00
Thomas Tuegel
b1d78393bd
Remove kde4.ktorrent
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:49:01 -06:00
Thomas Tuegel
f344817a3e
Remove Oxygen GTK themes
...
- Not useful without the KDE 4 desktop
2017-02-24 16:49:01 -06:00
Thomas Tuegel
25378a6aa0
Remove kde4.qtcurve
...
- Not useful without the KDE 4 desktop
2017-02-24 16:49:01 -06:00
Thomas Tuegel
dab94220fa
Remove kde4.polkit_kde_agent
...
- Already updated to KDE 5 in Nixpkgs
- Not useful without the KDE 4 desktop
2017-02-24 16:49:01 -06:00
Thomas Tuegel
9be791656f
Remove kde4.plasma-nm and its dependencies
...
- Already updated to KDE 5 in Nixpkgs
- Not useful without the KDE 4 desktop
2017-02-24 16:49:01 -06:00
Thomas Tuegel
2d7f558661
Remove kde4.ksshaskpass
...
- Already updated to KDE 5 in Nixpkgs
- Not useful without the KDE 4 desktop
2017-02-24 16:49:00 -06:00
Thomas Tuegel
b12f87beb8
Remove kde4.kde_wacomtablet
...
- Not useful without the KDE 4 desktop
2017-02-24 16:49:00 -06:00
Thomas Tuegel
00dce4e29f
Remove kde4.kde_gtk_config
...
- Already updated to KDE 5 in Nixpkgs
- Not useful without the KDE 4 desktop
2017-02-24 16:49:00 -06:00
Thomas Tuegel
db5ab73ec8
Remove kde4.eventlist
...
- Not useful without the KDE 4 desktop
2017-02-24 16:49:00 -06:00
Thomas Tuegel
eedbb61eb3
Remove kde4.colord-kde4
...
- Already updated to KDE 5 in Nixpkgs
- Not useful without the KDE 4 desktop
2017-02-24 16:49:00 -06:00
Thomas Tuegel
d237f44928
Remove kde4.bluedevil
...
- Already updated to KDE 5 in Nixpkgs
- Not useful without the KDE 4 desktop
2017-02-24 16:48:59 -06:00
Thomas Tuegel
fabce0c4a8
Remove kde4.yakuake
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:48:59 -06:00
Thomas Tuegel
d768dcd4f3
Remove kde4.skrooge
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:48:59 -06:00
Thomas Tuegel
a8c58cf6ab
Remove kde4.quassel
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:48:59 -06:00
Thomas Tuegel
545e675cef
Remove kde4.konversation
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:48:59 -06:00
Thomas Tuegel
14b8fa7017
Remove kde4.krename
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:48:58 -06:00
Thomas Tuegel
c9de5eca0f
Remove kde4.kdiff3
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:48:32 -06:00
Thomas Tuegel
0757d49800
Remove kde4.kdevelop
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:48:32 -06:00
Thomas Tuegel
e5e0f89612
Remove kde4.kdeconnect
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:48:32 -06:00
Thomas Tuegel
855690ba1d
Remove kde4.digikam
...
- Already updated to KDE 5 in Nixpkgs
2017-02-24 16:48:32 -06:00
Thomas Tuegel
68baf639a1
kde4: Use lib.makeScope
2017-02-24 16:47:07 -06:00
Joachim F
e2f837f743
Merge pull request #23119 from romildo/upd.idea
...
idea.clion: 2016.3.2 -> 2016.3.3
2017-02-24 23:15:53 +01:00
Joachim F
1edc3efa0c
Merge pull request #23132 from ljli/rnv-init
...
rnv: init at 1.7.11
2017-02-24 23:15:35 +01:00
Charles Strahan
4abbe3c5fc
gocode: 20150904 -> 20170219
...
Go completion wasn't working (at least from youcompleteme); this fixes
that.
2017-02-24 17:11:25 -05:00
Franz Pletz
7eb7126f5a
Revert "lxc: fix build for glibc-2.25"
...
This reverts commit 76ae7e19a9
.
2017-02-24 21:45:29 +01:00
Vincent Laporte
690968df54
ocamlPackages.utop: 1.19.2 -> 1.19.3
2017-02-24 19:21:29 +00:00
Vincent Laporte
9493ced9f7
ocamlPackages.{ojquery,tuntap,uri}: adds ocamlbuild as dependency
2017-02-24 19:02:48 +00:00
Vincent Laporte
71739f348e
Revert "ocamlPackages.spacetime: only build with ocaml-4.04"
...
This reverts commit f18ac15dca
.
2017-02-24 19:02:48 +00:00
Joachim F
01fdaee031
Merge pull request #23113 from demin-dmitriy/opera
...
opera: 42.0.2393.517 -> 43.0.2442.991
2017-02-24 19:24:27 +01:00
Joachim F
5abcebe9bf
Merge pull request #23131 from ljli/wlc-update
...
wlc: 0.0.5 -> 0.0.8
2017-02-24 19:23:28 +01:00
Joachim F
5bf8047cfe
Merge pull request #23146 from romildo/upd.xdgmenumaker
...
xdgmenumaker: 1.1 -> 1.4
2017-02-24 18:55:15 +01:00
Joachim F
a9555f580e
Merge pull request #23141 from romildo/upd.greybird
...
greybird: 2016-11-15 -> 2017-02-17
2017-02-24 18:55:03 +01:00
Joachim F
5502efb782
Merge pull request #23138 from leenaars/quickd
...
quickder: 1.0-RC1 -> 1.0-RC2
2017-02-24 18:54:13 +01:00
Joachim F
ad0770fb42
Merge pull request #23144 from romildo/upd.numix-gtk-theme
...
numix-gtk-theme: 2016-11-19 -> 2017-02-15
2017-02-24 18:50:48 +01:00
Joachim F
859f00a6c2
Merge pull request #23145 from romildo/upd.paper-icon-theme
...
paper-icon-theme: 2016-11-05 -> 2017-02-13
2017-02-24 18:50:36 +01:00
Joachim F
63d251f2e3
Merge pull request #23147 from romildo/upd.zuki-themes
...
zuki-themes: 2016-10-20 -> 2017-02-17
2017-02-24 18:50:22 +01:00
Franz Pletz
76ae7e19a9
lxc: fix build for glibc-2.25
2017-02-24 17:57:41 +01:00
Franz Pletz
f15cebd28c
jool: 3.5.0 -> 3.5.2
2017-02-24 17:57:41 +01:00
Franz Pletz
114ae6baab
unbound: 1.6.0 -> 1.6.1
2017-02-24 17:57:41 +01:00
Franz Pletz
7cc86f79b4
mumble: 1.2.17 -> 1.2.19
2017-02-24 17:57:41 +01:00
Joachim F
2b5b14fd9b
Merge pull request #23139 from romildo/upd.moka-icon-theme
...
moka-icon-theme: 2016-10-06 -> 2017-02-13
2017-02-24 17:51:12 +01:00
Joachim F
2646d314ff
Merge pull request #23137 from romildo/upd.blackbird
...
blackbird: 2016-07-04 -> 2017-02-20
2017-02-24 17:50:57 +01:00
Joachim F
91101645e7
Merge pull request #23142 from romildo/upd.jwm
...
jwm: 1580 -> 1582
2017-02-24 17:50:31 +01:00
Robin Gloster
bb486ff975
Merge pull request #23125 from Ma27/update/nodejs-v7
...
nodejs: 7.2.1 -> 7.6.0
2017-02-24 17:11:55 +01:00
Michiel Leenaars
1fe6ed5392
hexio: unstable -> 1.0-RC1
2017-02-24 17:03:49 +01:00
Peter Hoeg
eae1866c28
sensu: 0.17.1 -> 0.28.0
2017-02-25 00:00:58 +08:00
Bjørn Forsman
64d058f472
Revert "sensu: 0.17.1 -> 0.28.0"
...
This reverts commit 4588f94396
.
Because it breaks nixpkgs evaluation.
2017-02-24 15:13:57 +01:00
Jörg Thalheim
0eefe9bc62
lxc: fix glibc 2.25 incompatibility
2017-02-24 14:00:23 +01:00
Robin Gloster
8f60b43d9c
Merge pull request #23130 from grahamc/insecure-packages-with-docs
...
nixpkgs: allow packages to be marked insecure (this time with docs)
2017-02-24 13:44:28 +01:00
Graham Christensen
30cea5f022
libplist: mark as insecure
...
Patches currently available don't seem to apply.
2017-02-24 07:41:11 -05:00
Graham Christensen
a9c875fc2e
nixpkgs: allow packages to be marked insecure
...
If a package's meta has `knownVulnerabilities`, like so:
stdenv.mkDerivation {
name = "foobar-1.2.3";
...
meta.knownVulnerabilities = [
"CVE-0000-00000: remote code execution"
"CVE-0000-00001: local privilege escalation"
];
}
and a user attempts to install the package, they will be greeted with
a warning indicating that maybe they don't want to install it:
error: Package ‘foobar-1.2.3’ in ‘...default.nix:20’ is marked as insecure, refusing to evaluate.
Known issues:
- CVE-0000-00000: remote code execution
- CVE-0000-00001: local privilege escalation
You can install it anyway by whitelisting this package, using the
following methods:
a) for `nixos-rebuild` you can add ‘foobar-1.2.3’ to
`nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
like so:
{
nixpkgs.config.permittedInsecurePackages = [
"foobar-1.2.3"
];
}
b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
‘foobar-1.2.3’ to `permittedInsecurePackages` in
~/.config/nixpkgs/config.nix, like so:
{
permittedInsecurePackages = [
"foobar-1.2.3"
];
}
Adding either of these configurations will permit this specific
version to be installed. A third option also exists:
NIXPKGS_ALLOW_INSECURE=1 nix-build ...
though I specifically avoided having a global file-based toggle to
disable this check. This way, users don't disable it once in order to
get a single package, and then don't realize future packages are
insecure.
2017-02-24 07:41:05 -05:00
Eelco Dolstra
8e1fa01f3a
nix: 1.11.6 -> 1.11.7
2017-02-24 12:53:53 +01:00
Jascha Geerds
a49be4fcaf
Merge pull request #23143 from romildo/upd.numix-icon-theme
...
numix-icon-theme: 2016-11-13 -> 2017-01-25
2017-02-24 12:20:40 +01:00
Nick Hu
cbe765043f
fdr: init at 4.2.0
2017-02-24 11:00:02 +00:00
romildo
b474c5cd30
zuki-themes: 2016-10-20 -> 2017-02-17
2017-02-24 07:49:15 -03:00
romildo
767e50867c
xdgmenumaker: 1.1 -> 1.4
2017-02-24 07:24:16 -03:00
romildo
08749dd231
paper-icon-theme: 2016-11-05 -> 2017-02-13
2017-02-24 06:57:19 -03:00
romildo
9ae7fb4b60
numix-gtk-theme: 2016-11-19 -> 2017-02-15
2017-02-24 06:48:09 -03:00
romildo
aaa93d32aa
numix-icon-theme: 2016-11-13 -> 2017-01-25
2017-02-24 06:37:46 -03:00
romildo
1872f24c1b
jwm: 1580 -> 1582
2017-02-24 06:29:24 -03:00
romildo
e27a7a3686
greybird: 2016-11-15 -> 2017-02-17
2017-02-24 06:22:42 -03:00
Peter Hoeg
9e59945383
calibre: 2.79.1 -> 2.80.0
2017-02-24 17:20:23 +08:00
romildo
e4ab4a733c
moka-icon-theme: 2016-10-06 -> 2017-02-13
2017-02-24 06:10:52 -03:00
Michiel Leenaars
29d6460084
quickder: 1.0-RC1 -> 1.0-RC2
2017-02-24 10:02:13 +01:00
romildo
5b2199fcc6
blackbird: 2016-07-04 -> 2017-02-20
2017-02-24 05:45:11 -03:00
Pascal Wittmann
3af06724fa
Merge pull request #23136 from ljli/global-enhance
...
global: support universal-ctags
2017-02-24 08:37:39 +01:00
Peter Hoeg
4588f94396
sensu: 0.17.1 -> 0.28.0
2017-02-24 15:30:15 +08:00
Leon Isenberg
d556f53517
rnv: init at 1.7.11
2017-02-24 08:26:09 +01:00
Leon Isenberg
3211ff1b50
global: support universal-ctags
2017-02-24 07:51:39 +01:00
Leon Isenberg
1eaf76ac7a
wlc: 0.0.5 -> 0.0.8
2017-02-24 06:58:19 +01:00
Peter Hoeg
8e3d0b8323
awless: 0.0.13 -> 0.0.14
2017-02-24 11:15:26 +08:00
Graham Christensen
d36b1ccc13
Revert "Revert "linux kernels: patch against DCCP double free (CVE-2017-6074)""
...
This reverts commit 53a2baabbe
.
2017-02-23 19:23:29 -05:00
Graham Christensen
53a2baabbe
Revert "linux kernels: patch against DCCP double free (CVE-2017-6074)"
...
This reverts commit 1d68edbef4
.
2017-02-23 18:47:16 -05:00
Graham Christensen
1d68edbef4
linux kernels: patch against DCCP double free (CVE-2017-6074)
2017-02-23 18:44:43 -05:00
Shea Levy
c71bae0330
long-shebang: 1.1.0 -> 1.2.0
2017-02-23 18:27:12 -05:00
Tim Steinbach
82aae8f631
kernel: 4.4.50 -> 4.4.51
2017-02-23 17:47:51 -05:00
Tim Steinbach
18c2be2862
kernel: 4.9.11 -> 4.9.12
2017-02-23 17:47:18 -05:00
Maximilian Bosch
e20575cf5f
nodejs: 7.2.1 -> 7.6.0
2017-02-23 23:38:35 +01:00
Domen Kožar
afb7d04dd6
elmPackages: fix #22932
2017-02-23 22:58:40 +01:00
Bjørn Forsman
52eab0376c
spotify: 1.0.49.125.g72ee7853-83 -> 1.0.49.125.g72ee7853-111
2017-02-23 22:20:49 +01:00
Pascal Wittmann
04dcda3da4
homebank: 5.1.3 -> 5.1.4
2017-02-23 22:18:45 +01:00
romildo
f67a097488
idea.clion: 2016.3.2 -> 2016.3.3
2017-02-23 16:55:18 -03:00
John Wiegley
6bbddcf7d1
xcbuild: Guard a glibc-only postPatch with \!isDarwin
2017-02-23 11:32:52 -08:00
Vincent Laporte
75b187b0f7
ocamlPackages.eliom: adds ocamlbuild as a dependency
2017-02-23 19:10:33 +00:00
Vincent Laporte
a9b0c95ad4
ocamlPackages.ppx_sexp_conv: init at 113.33.01+4.03
2017-02-23 19:07:38 +00:00
Vincent Laporte
7ca9e6776d
ocamlPackages.ppx_type_conv: init at 113.33.02+4.03
2017-02-23 19:04:01 +00:00
Vincent Laporte
d6bc0c9236
ocamlPackages.ppx_optcomp: init at 113.33.0[01]+4.03
2017-02-23 18:34:17 +00:00
Vincent Laporte
63796fd38f
ocamlPackages.ppx_core: init at 113.33.01+4.03
2017-02-23 18:28:15 +00:00
Vincent Laporte
be427d6e51
ocamlPackages.sexplib: init at 113.33.00+4.03
2017-02-23 18:25:56 +00:00
Joachim Fasting
b92501f0d8
grsecurity: 4.9.11-201702181444 -> 201702222257
2017-02-23 19:18:39 +01:00
Jason A. Donenfeld
67b4f726c8
wireguard: 0.0.20170214 -> 0.0.20170223
...
Simple version bump.
2017-02-23 19:07:42 +01:00
Franz Pletz
4730993ca6
Merge pull request #23109 from dtzWill/update/neo4j
...
neo4j: update and fix JVM parameters in NixOS module
2017-02-23 19:02:32 +01:00
Profpatsch
8e54fced98
flpsed: ghostscript patch, fixes, new url
...
gs was called at runtime, fix the execvp call.
The url changed to its own domain.
A little face-lift for the package code.
2017-02-23 18:52:30 +01:00
Robin Gloster
b707552b5b
phpPackages.xdebug: 2.4.0RC3 -> 2.5.0
...
fixes #23098
2017-02-23 18:51:53 +01:00
Franz Pletz
d508ef88f7
Merge pull request #23082 from mayflower/graylog_update
...
graylog: update + module plugin support
2017-02-23 17:42:57 +01:00
Demin Dmitriy
db0316d8b2
opera: 42.0.2393.517 -> 43.0.2442.991
2017-02-23 19:25:20 +03:00
Vladimír Čunát
cb63a0b2da
knot-resolver: maintenance 1.2.2 -> 1.2.3
...
Just tiny fixes for some rare circumstances.
https://lists.nic.cz/pipermail/knot-dns-users/2017-February/001066.html
2017-02-23 16:23:23 +01:00
Franz Pletz
a689c7c792
pythonPackages.xdot: fix wrapper
2017-02-23 16:07:41 +01:00
Graham Christensen
59d61ef34a
Revert "nixpkgs: allow packages to be marked insecure"
2017-02-23 09:41:42 -05:00
Will Dietz
2da2731045
neo4j: 3.0.6 -> 3.1.1
2017-02-23 08:41:28 -06:00
Tristan Helmich
7420922806
graylog module: add plugin support
2017-02-23 15:21:29 +01:00
Jascha Geerds
11d86725df
idea-ultimate: 2016.3.3 -> 2016.3.4
2017-02-23 15:07:59 +01:00
Vladimír Čunát
0bfbd039f9
dnsperf: init at 2.1.0.0
2017-02-23 14:03:49 +01:00
Graham Christensen
037c489b10
Merge pull request #22890 from grahamc/mark-as-insecure
...
nixpkgs: allow packages to be marked insecure
2017-02-23 07:12:18 -05:00
Nikolay Amiantov
0c50a62912
octoprint: jailbreak Jinja2
2017-02-23 13:15:58 +03:00
Nikolay Amiantov
cf29810281
haskellPackages.lambdabot: jailbreak
2017-02-23 13:13:22 +03:00
Nikolay Amiantov
a4353270c4
lttng-ust: 2.5.1 -> 2.9.0
2017-02-23 13:04:23 +03:00
Nikolay Amiantov
ba43d6bdc9
lttng-tools: 2.5.2 -> 2.9.3
2017-02-23 13:04:23 +03:00
Nikolay Amiantov
fd29b10606
linuxPackages.lttng-modules: 2.8.3 -> 2.9.1
2017-02-23 13:04:23 +03:00
Pascal Wittmann
f1e5dce762
Merge pull request #23101 from bflyblue/master
...
unifi: 5.2.9 -> 5.4.11
2017-02-23 10:28:46 +01:00
Peter Hoeg
84fd5daafc
terragrunt: 0.10.2 -> 0.10.3
2017-02-23 17:14:45 +08:00
Shaun Sharples
265a288bee
unifi: 5.2.9 -> 5.4.11
2017-02-23 10:26:05 +02:00
sternenseemann
8352e0b38c
ocaml-ipaddr: 2.6.1 -> 2.7.2
...
Keeps the legacy version under attribute `ipaddr_p4`;
it is needed for OCaml < 4.02 and some libraries (eg `conduit`).
2017-02-23 08:01:29 +00:00
Itai Zukerman
59bb3d1f3f
bazel: remove dependence on buildFHSUserEnv
2017-02-22 20:42:21 -08:00
Graham Christensen
c8859b7264
libplist: mark as insecure
...
Patches currently available don't seem to apply.
2017-02-22 21:09:14 -05:00
Graham Christensen
6c37a92b2b
firebird: 2.5.6.27020-0 -> 2.5.7.27050-0 for '2.5.7.27050-0' bypass
2017-02-22 20:52:15 -05:00
Jörg Thalheim
f25ff18c98
cmus: let ffmpeg handle mp4/aac
2017-02-23 01:47:45 +01:00
Jörg Thalheim
ceac00d82b
mp4v2: 1.9.1p4 -> 2.0.0
2017-02-23 01:47:45 +01:00
Jörg Thalheim
e868669c4a
cmus: mp4 support
2017-02-23 01:47:45 +01:00
Jörg Thalheim
744ce7e8e2
cmus: enable aac support
2017-02-23 01:47:45 +01:00
Thomas Lotze
4689dd2a79
cmus: enable opus support (re #23051 )
...
Opus support was enabled since it didn't work in the past; I found it to be
working when I gave it a try now.
2017-02-23 01:47:44 +01:00
Jörg Thalheim
df4c0aeff8
shellcheck: reduce closure size
...
from 1.5GB to 20mb
2017-02-22 23:37:52 +00:00
Peter Hoeg
354243c784
Merge pull request #23091 from peterhoeg/u/lynx
...
lynx: 2.8.8rel.2 -> 2.8.9dev.11
2017-02-23 07:35:28 +08:00
Peter Hoeg
a3bf71b76f
lynx: 2.8.8rel.2 -> 2.8.9dev.11
2017-02-23 07:32:55 +08:00
Peter Simons
7803a696cd
smartmontools: update drivedb.h to latest SVN version 4391
2017-02-23 00:18:40 +01:00
Jascha Geerds
77670c04c7
Merge pull request #22937 from jgeerds/gnome
...
gnome-shell, gnome-tweak-tool: Don't propagate python
2017-02-22 22:06:21 +01:00
Joachim F
f764ccc7f1
Merge pull request #22812 from phi-gamma/afio
...
afio: init at 2.5.1
2017-02-22 22:05:51 +01:00
Vincent Laporte
cb6d15549a
ocamlPackages.mparser: init at 1.2.1
...
MParser is a simple monadic parser combinator library for OCaml.
Homepage: https://github.com/cakeplus/mparser/
2017-02-22 19:23:06 +00:00
Frederik Rietdijk
de4643eb80
diffoscope: 63 -> 77
2017-02-22 19:45:54 +01:00
Tristan Helmich
a43fd5af38
graylog: 2.1.2 -> 2.2.1
2017-02-22 19:03:48 +01:00
Vladimír Čunát
f5eea8ba1d
libevent: apply security patches from Debian
...
/cc #23072 . As with curl, it's nontrivial rebuild but security...
https://lwn.net/Alerts/714571/
2017-02-22 19:00:04 +01:00
Vladimír Čunát
ebf782829a
Merge #23063 : curl: 7.52.1 -> 7.53.0
2017-02-22 18:11:05 +01:00
Vladimír Čunát
145d3ea81c
Merge branch 'master' into staging
2017-02-22 17:47:49 +01:00
Vladimír Čunát
d6cff5783e
gnutls: drop -lunistring on Darwin as well
...
I didn't intend this substitution to be conditional; I looked wrong.
2017-02-22 17:44:06 +01:00
Gabriel Ebner
b66ec6026c
idris: jailbreak
...
Fixes #23048
2017-02-22 17:36:36 +01:00
Vladimír Čunát
2f1945dcd3
python-3.6: fix random numbers with glibc-2.25
...
I missed this upstream patch. /cc #22874 .
2017-02-22 17:34:33 +01:00
Vladimír Čunát
fe8aa284c2
xcbuild: fixup build with glibc-2.25
2017-02-22 16:58:45 +01:00
Vladimír Čunát
7ccd6f25f0
reptyr: fixup build with glibc-2.25
2017-02-22 16:54:40 +01:00
Vladimír Čunát
1d1dc2dcc3
open-vm-tools: fixup build with glibc-2.25
2017-02-22 16:54:07 +01:00
Vladimír Čunát
7ccaa9e652
solvespace: fixup build with glibc-2.25
2017-02-22 16:45:08 +01:00
Moritz Ulrich
51134cdbfe
digikam5: Fix build after kde merge.
2017-02-22 16:44:08 +01:00
Vladimír Čunát
a04849502d
fstrm: init at 0.3.1
2017-02-22 15:03:21 +01:00
Frederik Rietdijk
3bcd3d2c34
Merge pull request #23061 from nixy/pythonPackages.snakeviz
...
pythonPackages.snakeviz: init at 0.4.1
2017-02-22 14:31:26 +01:00
Michael Raskin
194d137bd3
wireshark: patch for CVE-2017-6041
2017-02-22 14:17:02 +01:00
Michael Raskin
a8bf87681c
kde5.applications.kig: init at 16.12.2
2017-02-22 14:17:02 +01:00
Andrew R. M
99754b2527
pythonPackages.snakeviz: init at 0.4.1
2017-02-22 08:14:53 -05:00
Graham Christensen
cc4919da89
xen: patch for XSAs: 197, 199, 207, 208, 209
...
XSA-197 Issue Description:
> The compiler can emit optimizations in qemu which can lead to double
> fetch vulnerabilities. Specifically data on the rings shared
> between qemu and the hypervisor (which the guest under control can
> obtain mappings of) can be fetched twice (during which time the
> guest can alter the contents) possibly leading to arbitrary code
> execution in qemu.
More: https://xenbits.xen.org/xsa/advisory-197.html
XSA-199 Issue Description:
> The code in qemu which implements ioport read/write looks up the
> specified ioport address in a dispatch table. The argument to the
> dispatch function is a uint32_t, and is used without a range check,
> even though the table has entries for only 2^16 ioports.
>
> When qemu is used as a standalone emulator, ioport accesses are
> generated only from cpu instructions emulated by qemu, and are
> therefore necessarily 16-bit, so there is no vulnerability.
>
> When qemu is used as a device model within Xen, io requests are
> generated by the hypervisor and read by qemu from a shared ring. The
> entries in this ring use a common structure, including a 64-bit
> address field, for various accesses, including ioport addresses.
>
> Xen will write only 16-bit address ioport accesses. However,
> depending on the Xen and qemu version, the ring may be writeable by
> the guest. If so, the guest can generate out-of-range ioport
> accesses, resulting in wild pointer accesses within qemu.
More: https://xenbits.xen.org/xsa/advisory-199.html
XSA-207 Issue Description:
> Certain internal state is set up, during domain construction, in
> preparation for possible pass-through device assignment. On ARM and
> AMD V-i hardware this setup includes memory allocation. On guest
> teardown, cleanup was erroneously only performed when the guest
> actually had a pass-through device assigned.
More: https://xenbits.xen.org/xsa/advisory-207.html
XSA-209 Issue Description:
> When doing bitblt copy backwards, qemu should negate the blit width.
> This avoids an oob access before the start of video memory.
More: https://xenbits.xen.org/xsa/advisory-208.html
XSA-208 Issue Description:
> In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine
> cirrus_bitblt_cputovideo fails to check wethehr the specified memory
> region is safe.
More: https://xenbits.xen.org/xsa/advisory-209.html
2017-02-22 08:00:45 -05:00