Commit graph

999 commits

Author SHA1 Message Date
Mario Rodas
9409f5ba2d
Merge pull request #85738 from marsam/update-lxd
lxd: 4.0.0 -> 4.0.1
2020-04-22 19:38:54 -05:00
Dmitry Kalinkin
712d1596ef
pulumi-bin: fix darwin build 2020-04-22 14:17:24 -04:00
Dmitry Kalinkin
ba13482494
pulumi-bin: use nativeBuildInputs 2020-04-22 14:17:16 -04:00
Mario Rodas
dc4547f498
lxd: 4.0.0 -> 4.0.1 2020-04-21 18:00:00 -05:00
Jörg Thalheim
f349aca12a
Merge pull request #85626 from filalex77/procs-0.10.0
procs: 0.9.20 -> 0.10.0
2020-04-20 18:20:58 +01:00
Oleksii Filonenko
7133c01a7a
procs: 0.9.20 -> 0.10.0 2020-04-20 19:15:05 +03:00
Emily
3112c0e7fa pebble: set maintainers to acme team 2020-04-20 01:39:31 +01:00
Emily
f3c18b2420 lego: set maintainers to acme team 2020-04-20 01:39:31 +01:00
Emily
6285d5eabd pebble: v2.2.2 -> v2.3.0
Also add myself to maintainers and correct meta.homepage.
2020-04-18 05:15:47 +01:00
xrelkd
5905597f51 eksctl: 0.16.0 -> 0.17.0 2020-04-16 09:58:46 +08:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
edef
7d4d98c227
Merge pull request #84412 from coderobe/patch-1
acme.sh: add bind.dnsutils to PATH
2020-04-10 16:08:01 +00:00
lewo
a3d6e49554
Merge pull request #84703 from purcell/docker-credential-gcr-2
docker-credential-gcr: 1.4.3 -> 2.0.1
2020-04-09 09:18:44 +02:00
Samuel Leathers
72cb7f81fd
Merge pull request #81442 from manveru/bundler-2.1.4
bundler: 1.17.3 -> 2.1.4
2020-04-08 12:44:54 -04:00
Steve Purcell
07e003deb1 docker-credential-gcr: 1.4.3 -> 2.0.1 2020-04-08 21:12:55 +12:00
Jonathan Ringer
8ed6d14632 azure-cli: freeze azure-batch 2020-04-06 11:55:26 -07:00
Michael Fellinger
f92600b406
update versions in Gemfile.lock 2020-04-06 15:02:13 +02:00
Robin B
2bc984ee86
acme.sh: fixup default.nix 2020-04-06 03:51:28 +02:00
Robin B
1d34740e0a
acme.sh: add bind.dnsutils to PATH
This is required for nsupdate
2020-04-06 02:45:01 +02:00
R. RyanTM
96c10499be eksctl: 0.15.0 -> 0.16.0 2020-04-05 12:06:59 +00:00
Frederik Rietdijk
866c5aa090 Merge master into staging-next 2020-04-05 08:33:39 +02:00
Kevin Cox
444801f739
Merge pull request #83830 from r-ryantm/auto-update/sewer
sewer: 0.7.9 -> 0.8.1
2020-04-04 08:42:23 -04:00
Marek Mahut
b6dbef4759
Merge pull request #81196 from prusnak/certbot
certbot: 1.0.0 -> 1.3.0
2020-04-04 08:18:20 +02:00
Frederik Rietdijk
92124ed660 Merge master into staging-next 2020-04-03 21:54:40 +02:00
Mario Rodas
96658e95d1
lxd: 3.23 -> 4.0.0 2020-04-02 04:20:00 -05:00
Jan Tojnar
3e0f4e202f
Merge branch 'master' into staging-next 2020-03-31 21:32:15 +02:00
Jon
1b6e225f63
Merge pull request #83831 from r-ryantm/auto-update/python-swiftclient
swiftclient: 3.6.0 -> 3.9.0
2020-03-30 22:35:55 -07:00
R. RyanTM
2cc64684d0 swiftclient: 3.6.0 -> 3.9.0 2020-03-31 03:27:58 +00:00
R. RyanTM
51eed2c4c7 sewer: 0.7.9 -> 0.8.1 2020-03-31 03:18:25 +00:00
zowoq
d67539de8a bubblewrap: 0.4.0 -> 0.4.1
https://github.com/containers/bubblewrap/releases/tag/v0.4.1
2020-03-31 00:21:48 +10:00
Frederik Rietdijk
a36be028f5 Merge staging-next into staging 2020-03-28 21:15:15 +01:00
Jörg Thalheim
774ddebd87
Merge pull request #83472 from Mic92/propragate-darwin-go
Propragate darwin go
2020-03-28 06:57:59 +00:00
Florian Klink
e1fc1d22f4 google-cloud-sdk: 281.0.0 -> 286.0.0 2020-03-27 18:09:05 +01:00
Jörg Thalheim
066db11215
Revert "Merge pull request #83099 from marsam/fix-buildGoModule-packages-darwin"
This reverts commit 4e6bf03504, reversing
changes made to afd997aab6.

Instead we propagate those frameworks from the compiler again
2020-03-27 07:33:21 +00:00
Mario Rodas
d85b0f745e
lxd: 3.22 -> 3.23
Release notes: https://discuss.linuxcontainers.org/t/lxd-3-23-has-been-released/7140
2020-03-24 04:20:00 -05:00
Jonathan Ringer
08616dbcc3 azure-cli: freeze azure-mgmt-cognitiveservices package 2020-03-24 18:19:59 -07:00
Jonathan Ringer
a306a8e3ec azure-cli: 2.1.0 -> 2.2.0 2020-03-24 12:13:46 -07:00
Jan Tojnar
986fbf4799
Merge branch 'staging-next' into staging 2020-03-24 01:51:55 +01:00
worldofpeace
37c62efad5
Merge pull request #81028 from mkg20001/ssh-import-id
ssh-import-id: init at 5.8
2020-03-23 15:50:54 -04:00
Orivej Desh
1b89aa3f7a Merge branch 'master' into staging 2020-03-23 00:53:16 +00:00
Mario Rodas
4e6bf03504
Merge pull request #83099 from marsam/fix-buildGoModule-packages-darwin
treewide: fix buildGoModule packages on darwin
2020-03-22 08:13:37 -05:00
Anders Kaseorg
1134b0bc6e
ansible: Use overridePythonAttrs to get the right name attribute (#83107)
Fixes #83105.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-03-22 03:09:42 -04:00
Mario Rodas
cd50659071 lego: fix build on darwin 2020-03-21 05:37:00 -05:00
Mario Rodas
4f8836ee99 iamy: fix build on darwin 2020-03-21 05:04:00 -05:00
Mario Rodas
da93b5a367 eksctl: fix build on darwin 2020-03-21 05:01:00 -05:00
Mario Rodas
b47c4218bb clair: fix build on darwin 2020-03-21 04:45:00 -05:00
Mario Rodas
91aacecb69 berglas: fix build on darwin 2020-03-21 04:44:00 -05:00
Mario Rodas
1da05f29db awsweeper: fix build on darwin 2020-03-21 04:43:00 -05:00
Mario Rodas
9fe9b59757 certigo: fix build on darwin 2020-03-21 04:41:00 -05:00
Mario Rodas
798569a534 aws-vault: fix build on darwin 2020-03-21 04:37:00 -05:00
Jonathan Ringer
9c8565f731 azure-cli: use pythonNamespaces 2020-03-18 12:20:51 -07:00
Matthew Bauer
67b0ddf3f3 Merge remote-tracking branch 'origin/staging' into mb-cross-fixes-march-2020 2020-03-16 14:34:03 -04:00
Matthew Bauer
c6b320a679
bubblewrap: put docbook_xsl, libxslt in nativeBuildInputs
Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>
2020-03-16 14:24:09 -04:00
Pavol Rusnak
d07543a98c
certbot: 1.0.0 -> 1.3.0 2020-03-15 13:12:03 +01:00
R. RyanTM
c6dd8929d6 eksctl: 0.13.0 -> 0.15.0 2020-03-14 23:30:49 +00:00
R. RyanTM
892827c0eb lego: 3.3.0 -> 3.4.0 2020-03-14 21:17:55 +00:00
R. RyanTM
98aa4da995
berglas: 0.5.0 -> 0.5.1 2020-03-14 15:54:07 +00:00
Izorkin
fd0c7cc4ec lego: 3.4.0 -> 3.5.0 2020-03-16 20:12:10 +03:00
Jonathan Ringer
fbafe7ca64 azure-cli: freeze azure-mgmt-rdms at 1.9.0 2020-03-15 15:15:44 -07:00
Mario Rodas
d580deacec procs: 0.9.18 -> 0.9.20 2020-03-14 01:24:45 +00:00
Mario Rodas
e6e040d573
Merge pull request #82494 from r-ryantm/auto-update/awsweeper
awsweeper: 0.4.1 -> 0.6.0
2020-03-13 18:49:10 -05:00
R. RyanTM
ceee45c346 awsweeper: 0.4.1 -> 0.6.0 2020-03-13 15:13:56 +00:00
wucke13
5d21d99575 lxd: 3.18 -> 3.22 2020-03-13 10:32:30 +01:00
Benjamin Hipple
df4ec15453
intecture-cli: upgrade cargo fetcher and cargoSha256 (#81982) 2020-03-08 19:18:22 -04:00
Benjamin Hipple
c1a78b7928
intecture-agent: upgrade cargo fetcher and cargoSha256 (#81981) 2020-03-08 19:17:12 -04:00
Benjamin Hipple
e9d492a896
intecture-auth: upgrade cargo fetcher and cargoSha256 (#81979) 2020-03-08 19:16:56 -04:00
Dillen Meijboom
c4f5f95d8d
Updated and fixed libstdc++ issue 2020-03-06 10:05:27 +01:00
Matthew Bauer
8c3160b619 bubblewrap: use buildInputs instead of nativeBuildInputs
these are all libraries.
2020-03-05 20:41:46 -05:00
Benjamin Hipple
c882a90bc6 procs: 0.9.11 -> 0.9.18 2020-03-05 01:30:08 -05:00
R. RyanTM
543c864f23
aws-google-auth: 0.0.33 -> 0.0.34 2020-03-01 09:16:22 +00:00
Mario Rodas
ef97505059
certigo: 1.11.0 -> 1.12.1 2020-02-28 19:20:00 -05:00
Maciej Krüger
5214b7244c
ssh-import-id: init at 5.8 2020-02-26 13:15:33 +01:00
Leigh Perry
7c8351de97
google-cloud-sdk: 268.0.0 -> 281.0.0 (#80944) 2020-02-24 17:12:25 +00:00
Suraj Barkale
4aaab192a7
aws-vault: 4.5.1 to 5.3.2 (#80949)
The aws-vault development has switched to using go modules.
Therefore this package has also been updated to use `buildGoModule`
helper.
2020-02-24 12:08:05 +00:00
Aaron Olson
9b8a14bb7e
google-cloud-sdk: fix Darwin build by only stripping local symbols (#80554)
Darwin won't strip relocatable symbols, so strip only local symbols
from cygrpc.so

See also 6ceebc441c (commitcomment-37355193)
2020-02-21 17:28:54 +00:00
Jonathan Ringer
4dd173560d azure-cli: 2.0.81 -> 2.1.0 2020-02-20 20:22:33 -08:00
Frederik Rietdijk
9fede4c38e
Merge pull request #76279 from PsyanticY/s3bro
s3bro: init at 2.8
2020-02-18 18:37:24 +01:00
edef
5bda7e7fb2 google-cloud-sdk: remove gsutil test
The command module references the tests, and since all command modules
get imported at startup, dbaafbbf73
turned it into a startup crash.

Unless you're actively hacking on gsutil, this command isn't much use,
so we're better off without it.
2020-02-18 13:31:42 +00:00
edef
0c403efde9 google-cloud-sdk: disable checking for gsutil updates
The update checking mechanism references the tests, and thus
dbaafbbf73 turned it into a crash at
startup.

It isn't much use in nixpkgs, so we're better off without it.
2020-02-18 13:31:42 +00:00
Oleksii Filonenko
f00f60ffbb procs: add filalex77 as a maintainer 2020-02-18 03:25:35 +02:00
Oleksii Filonenko
1e1ad96cf6 procs: 0.9.9 -> 0.9.11 2020-02-18 03:23:19 +02:00
Benjamin Hipple
eb11feaa0b treewide: change fetchCargoTarball default to opt-out
Changes the default fetcher in the Rust Platform to be the newer
`fetchCargoTarball`, and changes every application using the current default to
instead opt out.

This commit does not change any hashes or cause any rebuilds. Once integrated,
we will start deleting the opt-outs and recomputing hashes.

See #79975 for details.
2020-02-13 22:41:37 -08:00
Mario Rodas
d799e35079
procs: 0.9.6 -> 0.9.9 2020-02-13 04:20:00 -05:00
ahiaao
f216b03d5b tigervnc: fix compatibility with xorgserver 1.20.7 2020-02-11 09:46:24 +01:00
Jonathan Ringer
3f7f043dea azure-cli: force PEP420 for azure-mgmt packages 2020-02-10 16:45:11 -08:00
Frederik Rietdijk
ec3edaf7b5 Merge master into staging-next 2020-02-10 12:55:47 +01:00
Jonathan Ringer
259d76d541 azure-cli: 2.0.80 -> 2.0.81 2020-02-09 19:25:37 -08:00
Jonathan Ringer
d26288a514 azure-cli: freeze azure-mgmt-policyinsights 2020-02-09 19:25:37 -08:00
Florian
50ad81d76b lexicon: init at 3.3.17 2020-02-09 16:57:57 +01:00
Frederik Rietdijk
65dcb3f08f python: awscli: 1.16.266 -> 1.17.13
We force the use of docutils 0.16. If this does not work out, we
can still override the version as this is an application.
2020-02-09 09:17:31 +01:00
Oleg Pykhalov
9405324531 mycli: Add paramiko as a propagated build input
Fixes error:

    Cannot use SSH transport because paramiko isn't installed, please
    install paramiko or don't use --ssh-host=
2020-02-06 20:03:01 +01:00
Ryan Mulligan
ed762106d0
Merge pull request #79346 from r-ryantm/auto-update/procs
procs: 0.9.5 -> 0.9.6
2020-02-06 09:37:21 -08:00
R. RyanTM
1c0a1e2862 procs: 0.9.5 -> 0.9.6 2020-02-06 13:50:30 +00:00
Danylo Hlynskyi
437e1f69be
bash-my-aws: init at 20200111 (#76793)
* bash-my-aws: init at 20191231

Create bma-init

* Update
2020-02-05 22:37:52 +02:00
edef
6ceebc441c google-cloud-sdk: strip the Cython gRPC library
This reduces output size by 21 MiB.
2020-02-05 01:59:09 +00:00
edef
b7641eaa5a google-cloud-sdk: compact all the JSON
This reduces output size by 20 MiB.
2020-02-05 01:59:09 +00:00
edef
dbaafbbf73 google-cloud-sdk: remove tests directories
This reduces output size by 4.5 MiB.
2020-02-05 01:59:09 +00:00
edef
c484d6376c google-cloud-sdk: remove crcmod_osx as well
Both third_party/crcmod_osx and third_party/crcmod are only used in the
PYTHONPATH, and we already replace them with dependencies from nixpkgs.
2020-02-05 01:59:09 +00:00
Jonathan Ringer
727abb55c7 azure-cli: freeze azure-mgmt-deploymentmanager 2020-02-02 09:43:05 -08:00
Frederik Rietdijk
c195ef6aab
Merge pull request #78928 from NixOS/staging-next
Staging next
2020-02-02 15:35:18 +01:00
Mario Rodas
77f2d9bf1c
procs: 0.9.2 -> 0.9.5 2020-01-31 04:20:00 -05:00
Frederik Rietdijk
5cc0468a20 Merge staging into staging-next 2020-01-31 00:16:31 +01:00
Bruno Bigras
3922c927ab lego: 3.2.0 -> 3.3.0 2020-01-29 20:51:25 -05:00
xrelkd
5648d92acc eksctl: 0.12.0 -> 0.13.0 2020-01-29 03:24:07 +08:00
Frederik Rietdijk
cdff57e1fc Merge staging-next into staging 2020-01-28 10:48:36 +01:00
Mario Rodas
e39afd4095
procs: 0.9.0 -> 0.9.2 2020-01-26 04:20:00 -05:00
Mario Rodas
476a4fa40d
Merge pull request #78149 from talyz/nomachine-6.9.2
nomachine-client: 6.8.1 -> 6.9.2
2020-01-25 03:25:53 -05:00
Mario Rodas
4dbba7a143
procs: 0.8.16 -> 0.9.0 2020-01-23 09:00:00 -05:00
Jonathan Ringer
1474940ea4 ansible_2_8: 2.8.6 -> 2.8.7 2020-01-22 01:12:28 -08:00
Jonathan Ringer
3444d76c1b ansible_2_*: overridePythonAttrs -> overrideAttrs 2020-01-22 01:12:28 -08:00
Jonathan Ringer
99eb9231d4 ansible_2_9: init at 2.9.2 2020-01-22 01:12:28 -08:00
zimbatm
f8df74be4b
vncdo: fix build 2020-01-21 13:16:01 +01:00
talyz
62af7804ef nomachine-client: 6.8.1 -> 6.9.2 2020-01-21 10:29:39 +01:00
Mario Rodas
949c5f8451
Merge pull request #78068 from r-ryantm/auto-update/acme.sh
acme-sh: 2.8.3 -> 2.8.5
2020-01-20 07:36:58 -05:00
R. RyanTM
02fad0d598 acme-sh: 2.8.3 -> 2.8.5 2020-01-20 03:00:35 +00:00
Mario Rodas
30a7902609
sewer: enable on darwin 2020-01-19 04:20:00 -05:00
Mario Rodas
fc408d55e6 sewer: 0.7.3 -> 0.7.9 2020-01-19 04:20:00 -05:00
R. RyanTM
d97a34cfcf sewer: 0.7.0 -> 0.7.3 2020-01-17 10:44:46 +00:00
Robin Gloster
aa489adfd8
Merge pull request #77686 from alyssais/urllib3
Revert "Re-revert "awscli: Get rid of runtime -dev dependencies""
2020-01-17 00:38:52 +01:00
Mario Rodas
5f586605df
Merge pull request #77670 from amarrella/update/eksctl
eksctl: 0.11.1 -> 0.12.0
2020-01-14 21:49:58 -05:00
Alyssa Ross
76af9e8438
Revert "Re-revert "awscli: Get rid of runtime -dev dependencies""
This reverts commit a1eacb900e.

Adding dev outputs to python packages means they can't be included in
a Python environment created with python3.withPackages, because
makePythonPath will include the dev output, which is empty apart from
nix-support, rather than the out output, which contains all the Python
code.
2020-01-14 16:00:00 +00:00
Alessandro Marrella
730371336b
eksctl: 0.11.1 -> 0.12.0 2020-01-14 11:55:10 +00:00
Jonathan Ringer
32b5c579b0 azure-cli: 2.0.79 -> 2.0.80 2020-01-13 14:27:30 -08:00
Tom Bereknyei
621bb74bd8 Update 2020-01-11 19:54:23 -05:00
edef
178ac3cb99 google-cloud-sdk: include openssl(1) in PATH (#77277)
Otherwise, it might fail with a mysterious error:

    ERROR: (gcloud.beta.compute.reset-windows-password) Your platform does not support OpenSSL.
2020-01-10 09:42:37 +00:00
Jonathan Ringer
26aa690447 azure-cli: 2.0.78 -> 2.0.79 2020-01-09 10:09:02 -08:00
Jonathan Ringer
94dea31ea2 azure-cli: freeze azure-mgmt-iotcentral 2020-01-09 10:09:02 -08:00
worldofpeace
dfd115a116 swiftclient: add setuptools
Traceback (most recent call last):
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/bin/.swift-wrapped", line 7, in <module>
    from swiftclient.shell import main
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/__init__.py", line 20, in <module>
    from .client import *  # noqa
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/client.py", line 33, in <module>
    from swiftclient import version as swiftclient_version
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/version.py", line 15, in <module>
    import pkg_resources
ModuleNotFoundError: No module named 'pkg_resources'
2020-01-08 11:06:47 -05:00
Simonas Kazlauskas
0320725e86 berglas: 0.2.1 -> 0.5.0 2020-01-07 14:20:10 +02:00
Tom Bereknyei
e5208af780 bash-my-aws: init at 20191231
Create bma-init
2020-01-01 14:53:15 -05:00
Maximilian Bosch
839c0ea7a5
treewide: *Inputs are flat lists 2019-12-31 01:10:02 +01:00
Robin Gloster
760e23136a
treewide: *inputs are lists 2019-12-31 01:09:25 +01:00
Jonathan Ringer
8043df949b aws_shell: fix dep issues 2019-12-30 16:46:51 +01:00
Jonathan Ringer
fe058ee1ed awscli: fix build 2019-12-30 16:46:51 +01:00
Jonathan Ringer
e1bb62f9bc azure-cli: 2.0.77 -> 2.0.78 2019-12-30 16:46:50 +01:00
Jan Tojnar
a69e309794
Merge branch 'staging-next' into staging 2019-12-30 05:24:03 +01:00
Florian Klink
0aa09d3c75 simpl_le: 0.16.0 -> 0.17.0 2019-12-29 19:30:31 +01:00
Florian Klink
d07796b871 certbot: 0.39.0 -> 1.0.0 2019-12-29 19:30:31 +01:00
Frederik Rietdijk
5aed91512d Merge staging-next into staging 2019-12-29 10:20:05 +01:00
Maximilian Bosch
fa28c7750a
Merge pull request #76442 from r-ryantm/auto-update/tigervnc
tigervnc: 1.10.0 -> 1.10.1
2019-12-26 20:31:01 +01:00
Jan Tojnar
4bbc6cc66f
Merge branch 'staging-next' into staging 2019-12-25 05:18:52 +01:00
R. RyanTM
e91f467811 tigervnc: 1.10.0 -> 1.10.1 2019-12-24 12:01:35 -08:00
PsyanticY
c82658ac4a s3bro: init at 2.8 2019-12-23 17:18:23 +01:00
Mario Rodas
2f2047c378
Merge pull request #75196 from r-ryantm/auto-update/bubblewrap
bubblewrap: 0.3.3 -> 0.4.0
2019-12-22 18:11:52 -05:00
Mario Rodas
932f5f6b88
clair: 2.0.9 -> 2.1.2 2019-12-22 00:00:00 -05:00
Terje Larsen
7a99d1e392
awscli: pin colorama to 0.4.1
This is pinned to 0.4.1 in the upstream awscli package.
2019-12-20 14:23:12 +01:00
Mario Rodas
b066646e04
docker-credential-helpers: init at 0.6.3 2019-12-15 18:18:18 -05:00
Andreas Rammhold
b21b92947e ansible_2_6: 2.6.17 -> 2.6.20
This addresses the following security issues:

  * CVE-2019-14846 - Several Ansible plugins could disclose aws
    credentials in log files. inventory/aws_ec2.py, inventory/aws_rds.py,
    lookup/aws_account_attribute.py, and lookup/aws_secret.py,
    lookup/aws_ssm.py use the boto3 library from the Ansible process. The
    boto3 library logs credentials at log level DEBUG. If Ansible's
    logging was enabled (by setting LOG_PATH to a value) Ansible would set
    the global log level to DEBUG. This was inherited by boto and would
    then log boto credentials to the file specified by LOG_PATH. This did
    not affect aws ansible modules as those are executed in a separate
    process. This has been fixed by switching to log level INFO
  * Convert CLI provided passwords to text initially, to prevent unsafe
    context being lost when converting from bytes->text during post
    processing of PlayContext. This prevents CLI provided passwords from
    being incorrectly templated (CVE-2019-14856)
  * properly hide parameters marked with no_log in suboptions when
    invalid parameters are passed to the module (CVE-2019-14858)
  * resolves CVE-2019-10206, by avoiding templating passwords from
    prompt as it is probable they have special characters.
  * Handle improper variable substitution that was happening in
    safe_eval, it was always meant to just do 'type enforcement' and have
    Jinja2 deal with all variable interpolation. Also see CVE-2019-10156

Changelog: 9bdb89f740/changelogs/CHANGELOG-v2.6.rst
2019-12-15 21:25:07 +01:00
Andreas Rammhold
64e2791092 ansible_2_7: 2.7.11 -> 2.7.15
This fixes the following security issues:
  * Ansible: Splunk and Sumologic callback plugins leak sensitive data
    in logs (CVE-2019-14864)
  * CVE-2019-14846 - Several Ansible plugins could disclose aws
    credentials in log files. inventory/aws_ec2.py, inventory/aws_rds.py,
    lookup/aws_account_attribute.py, and lookup/aws_secret.py,
    lookup/aws_ssm.py use the boto3 library from the Ansible process. The
    boto3 library logs credentials at log level DEBUG. If Ansible's
    logging was enabled (by setting LOG_PATH to a value) Ansible would set
    the global log level to DEBUG. This was inherited by boto and would
    then log boto credentials to the file specified by LOG_PATH. This did
    not affect aws ansible modules as those are executed in a separate
    process. This has been fixed by switching to log level INFO
  * Convert CLI provided passwords to text initially, to prevent unsafe
    context being lost when converting from bytes->text during post
    processing of PlayContext. This prevents CLI provided passwords from
    being incorrectly templated (CVE-2019-14856)
  * properly hide parameters marked with no_log in suboptions when invalid
    parameters are passed to the module (CVE-2019-14858)
  * resolves CVE-2019-10206, by avoiding templating passwords from
    prompt as it is probable they have special characters.
  * Handle improper variable substitution that was happening in
    safe_eval, it was always meant to just do 'type enforcement' and have
    Jinja2 deal with all variable interpolation. Also see CVE-2019-10156

Changelog: 0623dedf2d/changelogs/CHANGELOG-v2.7.rst (v2-7-15)
2019-12-15 21:24:59 +01:00
itsHMR
a46e3ebae5 tigervnc: add perl to buildInputs (#75367)
tigervnc ships vncserver, quote from the documentation:
vncserver - a wrapper script which makes starting Xvnc more convenient vncserver requires Perl.
2019-12-14 18:06:01 +01:00