nixpkgs/pkgs/development
aszlig c67a7ee731
Merge branch 'chromium-update-with-gn'
This brings in the new stable version 54 which also introduces a lot of
security fixes:

  CVE-2016-5198: Out of bounds memory access in V8
  CVE-2016-5181: Universal XSS in Blink
  CVE-2016-5182: Heap overflow in Blink
  CVE-2016-5183: Use after free in PDFium
  CVE-2016-5184: Use after free in PDFium
  CVE-2016-5185: Use after free in Blink
  CVE-2016-5187: URL spoofing
  CVE-2016-5188: UI spoofing
  CVE-2016-5192: Cross-origin bypass in Blink
  CVE-2016-5189: URL spoofing
  CVE-2016-5186: Out of bounds read in DevTools
  CVE-2016-5191: Universal XSS in Bookmarks
  CVE-2016-5190: Use after free in Internals
  CVE-2016-5193: Scheme bypass

Detailed announcements about these changes can be found here (latest to
oldest):

https://googlechromereleases.blogspot.de/2016/11/stable-channel-update-for-desktop.html
https://googlechromereleases.blogspot.de/2016/10/stable-channel-update-for-desktop_20.html
https://googlechromereleases.blogspot.de/2016/10/stable-channel-update-for-desktop.html

The update process of Chromium has been a bit bumpy on our side, because
version 54 also did the switch from GYP to GN so it wasn't just a matter
of updating the upstream-info file.

I've tested the Flash plugin (which runs fine) and WideVine manually,
although I couldn't get WideVine to work (I was running this within a VM
though).

So if people want to use WideVine they need to use Chrome instead until
we got this sorted out.

VM test results along with builds for all platforms can be found here:

https://headcounter.org/hydra/eval/339328

I'm going to backport these changes to stable as soon as the
tests/builds succeed there as well.

Closes: #19565
Closes: #20120
2016-11-09 09:55:31 +01:00
..
arduino ino: use python2 2016-10-18 23:14:36 +02:00
beam-modules
bower-modules/generic
compilers haskell.compiler.ghcHEAD: Update to latest upstream 2016-11-08 10:03:05 +00:00
coq-modules coqPackages.fiat_HEAD: New package for Coq 8.4pl6 and 8.5pl2 2016-10-31 16:22:04 -07:00
dotnet-modules/patches
eclipse/ecj Remove jdt-sdk 2016-11-03 21:12:39 -04:00
em-modules/generic
go-modules buildGoPackage: introduce extraSrcPaths option 2016-10-29 05:18:16 +02:00
guile-modules guile_ncurses: Use absolute path to load libguile-ncurses 2016-10-12 20:47:55 +01:00
haskell-modules haskell-diff-parse: jailbreak to fix test suite build 2016-11-09 08:47:27 +01:00
idris-modules Merge pull request #19003 from siddharthist/lightyear/init 2016-09-29 16:16:10 +02:00
interpreters Merge pull request #20227 from michalrus/octave 2016-11-07 13:42:41 +01:00
libraries bobcat: 4.02.00 -> 4.03.00 2016-11-09 02:24:44 +01:00
lisp-modules asdf: 3.1.6 -> 3.1.7 2016-09-26 15:49:30 +02:00
lua-modules
misc loc: 0.3.0 -> 0.3.3 2016-10-30 16:45:04 -04:00
mobile androidenv: Add API sources 2016-10-09 19:11:55 +09:00
node-packages nodePackages.parsoid: init 2016-11-03 19:20:19 +03:00
ocaml-modules ocamlPackage.ppx_import: init at 1.1 2016-11-08 15:38:45 +01:00
perl-modules Net::Amazon::S3: 0.60 -> 0.80 2016-09-26 17:35:53 +02:00
pharo
pure-modules
python-modules pythonPackages.mezzanine: Fix template project 2016-10-31 16:38:45 +01:00
qtcreator
r-modules r-modules: add more environment documentation 2016-10-13 22:18:16 +00:00
ruby-modules add defaultConfig for mysql ruby gem 2016-11-03 17:19:25 -07:00
tools Merge branch 'chromium-update-with-gn' 2016-11-09 09:55:31 +01:00
web twitterBootstrap3: init at 3.3.7 (#19852) 2016-11-07 12:55:10 +01:00