Commit graph

8123 commits

Author SHA1 Message Date
taku0
52fc63e37b thunderbird-bin: 60.3.0 -> 60.3.1 2018-11-15 09:12:46 +09:00
Piotr Bogdan
3e7b6b5bfa firefoxen: remove unused gstreamer dependencies
Firefox and, by extension, Tor browser don't support gstreamer any more, this
removes what are effectively unused dependencies.

https://bugzilla.mozilla.org/show_bug.cgi?id=1234092 "Remove gstreamer support"
2018-11-14 22:29:48 +00:00
Andreas Rammhold
66e16843b3
firefox: apply patch for newer rust-cbindgen
rust-cbindgen did apply some breaking changes which requires the added
patch in order to compile until a firefox version with the fix gets
released. Firefox 63.0.3 is supposed to carry the required patches. This
should only be required for a short term.
2018-11-14 20:51:19 +01:00
Renaud
cde945a165
Merge pull request #48044 from schneefux/pkg/fetchfromgithub
treewide: Use fetchFromGitHub instead of fetchurl
2018-11-14 09:48:22 +01:00
Herwig Hochleitner
4b5ffcb964 chromium: 70.0.3538.77 -> 70.0.3538.102 2018-11-14 02:51:13 +01:00
Matthew Bauer
73951bc0c8
Merge pull request #50293 from matthewbauer/cleanups2
Add setup-hooks for scons and waf
2018-11-13 19:17:00 -06:00
Matthew Bauer
bfbfe941ab treewide: use scons setup hook
Lots of packages can use it. Here is the list:

- jackmix
- klick
- mixx
- nova-filters
- rhvoice
- giv
- mypaint
- swift-im
- bombono
- mapnik
- serf
- nuitka
- pyexiv2
- godot
- hammer
- toluapp
- btanks
- dxx-rebirth
- endless-sky
- globulation
- the-powder-toy
- fceux
- gpsd
- mongodb
- rippled
- mariadb
- lprof
2018-11-13 19:14:10 -06:00
Tobias Happ
159b3f2a0d teamspeak_server: 3.4.0 -> 3.5.0 2018-11-13 21:59:20 +01:00
taku0
4c2d254a7f flashplayer: 31.0.0.122 -> 31.0.0.148 2018-11-13 21:13:48 +09:00
Frederik Rietdijk
3b052406ea Merge staging-next into staging 2018-11-12 19:01:36 +01:00
Frederik Rietdijk
daf3297cb4 Merge master into staging-next 2018-11-12 18:59:08 +01:00
Vincent Demeester
37b50c08eb
openshift: use go instead of go_1_10
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
2018-11-12 18:17:33 +01:00
Vincent Demeester
1ccea556a1 openshift: 3.10 -> 3.11
Using go 1.10 instead of 1.9

Signed-off-by: Vincent Demeester <vincent@sbr.pm>
2018-11-12 18:16:57 +01:00
Silvan Mosberger
03187b7497
Merge pull request #49685 from rht/brave-0.55.22
brave: 0.25.2 -> 0.56.12
2018-11-11 22:13:49 +01:00
rht
e46f25addc
brave: 0.25.2 -> 0.56.12 2018-11-11 20:42:10 +00:00
Frederik Rietdijk
1d3bff25db Merge staging-next into staging 2018-11-11 14:28:08 +01:00
Jörg Thalheim
8905ca4d71
Merge pull request #50219 from worldofpeace/wire-desktop/no-explicit-phases
wire-desktop: don't explicitly set phases
2018-11-11 11:06:28 +00:00
Frederik Rietdijk
7863aae5b2 Merge master into staging-next 2018-11-11 08:59:44 +01:00
worldofpeace
48a3ea0f81 wire-desktop: don't explicitly set phases
part of #28910
2018-11-10 22:01:44 -05:00
Silvan Mosberger
337f8f7301
Merge pull request #50213 from worldofpeace/syncplay/1.6.0
syncplay: 1.5.5 -> 1.6.0
2018-11-11 02:11:53 +01:00
worldofpeace
627d656949 syncplay: 1.5.5 -> 1.6.0 2018-11-10 19:44:45 -05:00
Jörg Thalheim
3a46305542
Merge pull request #50034 from stephengroat/patch-1
terraform-providers: bump versions
2018-11-10 22:10:29 +00:00
Michael Weiss
39a9e2d65f tdesktopPackages.preview: 1.4.4 -> 1.4.7
TODO: We're still using the old API ID (like the Arch package) which
should be used for testing only.
I've tried to contact the Telegram team multiple times via different
channels but didn't get a response so far. See [0],[1] for more details.

[0]: https://github.com/telegramdesktop/tdesktop/issues/4717
[1]: 65b2db2160
2018-11-10 22:10:28 +01:00
Stephen
b6b4f702ff terragrunt: 0.16.6 -> 0.17.2 (#50036) 2018-11-10 16:49:56 +01:00
Silvan Mosberger
bed0e8b089
Merge pull request #49806 from colemickens/falkon-qtwayland
falkon: enable qtwayland
2018-11-10 14:52:39 +01:00
Frederik Rietdijk
53d00c3351 Merge master into staging-next 2018-11-10 11:08:54 +01:00
Stephen
d9695af1ee
terraform-providers.aws: 1.43.0 -> 1.43.1 2018-11-09 18:19:27 -08:00
Renaud
caf2390efa
Merge pull request #49636 from colemickens/google-chrome-unstable-fix
google-chrome-dev: add at-spi2-core dependency
2018-11-09 23:01:49 +01:00
Jaka Hudoklin
9edc4a114c
Merge pull request #50071 from r-ryantm/auto-update/kubernetes
kubernetes: 1.12.1 -> 1.12.2
2018-11-09 22:53:16 +01:00
R. RyanTM
ad6bfada7a kubernetes: 1.12.1 -> 1.12.2
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/kubernetes/versions
2018-11-09 13:28:28 -08:00
Stephen
c19c051123
slack: 3.2.1 -> 3.3.3
closes #50009
2018-11-09 10:37:24 -08:00
Orivej Desh
4c9729ab53 psi-plus: 1.3.422 -> 1.4.404 2018-11-09 18:29:05 +00:00
Stephen
647d1eb077
terraform-providers: bump versions 2018-11-09 08:40:30 -08:00
Renaud
bfab4b1623
Merge pull request #49925 from r-ryantm/auto-update/toxic
toxic: 0.8.2 -> 0.8.3
2018-11-09 14:02:40 +01:00
Jörg Thalheim
d0c96dc3de
Merge pull request #49934 from r-ryantm/auto-update/syncthing
syncthing: 0.14.51 -> 0.14.52
2018-11-08 21:26:24 +00:00
Vladyslav M
0d19059b5d
Merge pull request #49931 from r-ryantm/auto-update/transmission-remote-gtk
transmission-remote-gtk: 1.3.1 -> 1.4.0
2018-11-08 21:57:54 +02:00
R. RyanTM
3e7e648510 syncthing: 0.14.51 -> 0.14.52
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/syncthing/versions
2018-11-08 11:39:57 -08:00
R. RyanTM
72cbe8be4b transmission-remote-gtk: 1.3.1 -> 1.4.0
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/transmission-remote-gtk/versions
2018-11-08 10:57:14 -08:00
R. RyanTM
2f742cbd35 toxic: 0.8.2 -> 0.8.3
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/toxic/versions
2018-11-08 09:44:16 -08:00
Michael Raskin
213407d471 firefox-bin: 63.0 -> 63.0.1 2018-11-08 20:23:33 +03:00
Michael Raskin
108de151f8 firefox: 63.0 -> 63.0.1; firefox-esr: 60.2.2esr -> 60.3.0esr 2018-11-08 20:23:33 +03:00
Maximilian Bosch
5d9add49a2
weechat: remove obsolete aggregate-commands patch
This was the rebased version of a patch which landed in WeeChat 2.3
which is now used on nixpkgs master (see 2702772d2d).
2018-11-08 15:47:38 +01:00
Michael Raskin
adf41ed942
Merge pull request #49864 from oxij/pkgs/tiny-things
trivial: tiny cleanups and fixes
2018-11-08 06:28:10 +00:00
Jan Malakhovski
d2d80e6d30 firefox: disable pulseaudio support on non-Linux by default 2018-11-08 05:20:18 +00:00
Andreas Rammhold
faf57d2b95
Merge pull request #49690 from mat8913/unstable_firefox-esr-60.3.0
firefox-esr-60: 60.2.2 -> 60.3.0 [critical security fixes]
2018-11-07 21:18:12 +01:00
Andreas Rammhold
551ef1ac41 firefox: provide clang configure flags on i686
With the upgrade to firefox 62 clang flags are now required on i686.

(cherry picked from commit acf4a4eff315a52d8f9c944a167ecb373bc1fdf9)
2018-11-07 19:44:01 +01:00
Andreas Rammhold
c8d45086d1
firefox-esr-60: drop skia patch on aarch64 2018-11-07 16:47:24 +01:00
Rafael García Gallego
ded5faa82e flashplayer: add libglvnd dep 2018-11-07 16:36:30 +01:00
Cole Mickens
4d26a57d50 falkon: enable qtwayland on linux 2018-11-05 22:23:51 -08:00
zimbatm
cef08f162e
remmina: use pname instead of name
Co-Authored-By: Synthetica9 <git@hilhorst.be>
2018-11-06 00:17:04 +01:00
Patrick Hilhorst
e2ea0573fc
enhanced-ctorrent: follow versioning guidelines 2018-11-06 00:17:04 +01:00
Patrick Hilhorst
a3042c92e6
salut-a-toi: don't define name and pname as incompatible things 2018-11-06 00:17:03 +01:00
Patrick Hilhorst
1c69e58e61
treewide: use unstable-date instead of hash as version 2018-11-06 00:17:02 +01:00
Patrick Hilhorst
b0e9fc131c
treewide: Fix packages using name where they should use pname 2018-11-06 00:06:17 +01:00
John Ericson
48caae5045 Merge remote-tracking branch 'upstream/master' into HEAD 2018-11-05 15:19:33 -05:00
Matthew Bauer
a35dae70c3 notmuch: cleanup 2018-11-05 13:30:43 -06:00
Jan Tojnar
1d077e6286
remmina: fix version 2018-11-05 00:09:22 +01:00
Frederik Rietdijk
795f4b31b9 canto-{curses,daemon}: use python3 instead of python34 2018-11-04 18:48:24 +01:00
Frederik Rietdijk
322f87137c Merge master into staging-next 2018-11-04 11:33:17 +01:00
Renaud
386691027f
Merge pull request #49603 from dtzWill/feature/slack-term
slack-term: init at 0.4.1
2018-11-04 09:53:47 +01:00
Frederik Rietdijk
cb4ff927a1 Merge master into staging-next 2018-11-04 08:49:24 +01:00
Vladimír Čunát
f3cca2f83c
Merge #49677: thunderbird*: 60.2.1 -> 60.3.0
Critical security fixes.
2018-11-03 13:10:08 +01:00
Matthew Harm Bekkema
9973a266ab firefox-esr-60: 60.2.2 -> 60.3.0 [critical security fixes]
This update bumps the package to the latest stable version containing a
few security fixes:

- CVE-2018-12392: Crash with nested event loops
  When manipulating user events in nested loops while opening a document
  through script, it is possible to trigger a potentially exploitable
  crash due to poor event handling.

- CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript
  A potential vulnerability was found in 32-bit builds where an integer
  overflow during the conversion of scripts to an internal UTF-16
  representation could result in allocating a buffer too small for the
  conversion. This leads to a possible out-of-bounds write.
  Note: 64-bit builds are not vulnerable to this issue.

- CVE-2018-12395: WebExtension bypass of domain restrictions through header rewriting
  By rewriting the Host request headers using the webRequest API, a
  WebExtension can bypass domain restrictions through domain fronting.
  This would allow access to domains that share a host that are
  otherwise restricted.

- CVE-2018-12396: WebExtension content scripts can execute in disallowed contexts
  A vulnerability where a WebExtension can run content scripts in
  disallowed contexts following navigation or other events. This allows
  for potential privilege escalation by the WebExtension on sites where
  content scripts should not be run.

- CVE-2018-12397: Missing warning prompt when WebExtension requests local file access
  A WebExtension can request access to local files without the warning
  prompt stating that the extension will "Access your data for all
  websites" being displayed to the user. This allows extensions to run
  content scripts in local pages without permission warnings when a
  local file is opened.

- CVE-2018-12389: Memory safety bugs fixed in Firefox ESR 60.3
  Mozilla developers and community members Daniel Veditz and Philipp
  reported memory safety bugs present in Firefox ESR 60.2. Some of these
  bugs showed evidence of memory corruption and we presume that with
  enough effort that some of these could be exploited to run arbitrary
  code.

- CVE-2018-12390: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
  Mozilla developers and community members Christian Holler, Bob Owen,
  Boris Zbarsky, Calixte Denizet, Jason Kratzer, Jed Davis, Taegeon Lee,
  Philipp, Ronald Crane, Raul Gurzau, Gary Kwong, Tyson Smith, Raymond
  Forbes, and Bogdan Tara reported memory safety bugs present in Firefox
  62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory
  corruption and we presume that with enough effort that some of these
  could be exploited to run arbitrary code.

Source: https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/
2018-11-03 22:51:36 +11:00
Frederik Rietdijk
64e19fdeda Merge staging into staging-next
Merging staging into staging-next even though we haven't merged staging-next into master yet.
The motivation for this merge is that it's been a while since we merged into master causing
the 3 branches to diverge too much.
2018-11-03 12:45:23 +01:00
taku0
09d49a1c5d thunderbird: 60.2.1 -> 60.3.0 2018-11-03 18:39:32 +09:00
Will Dietz
86cee9771b
Merge pull request #48672 from dtzWill/update/w3m-2018
w3m: 20161120 -> 20180125
2018-11-02 19:05:00 -05:00
zimbatm
f9bf6cef54
terraform_0_11: 0.11.8 -> 0.11.10 2018-11-03 00:52:24 +01:00
Arian van Putten
13effc913d terraform-providers: Bump all releases (#49582)
Does what it says on the tin. Auto-generated.
2018-11-03 00:50:35 +01:00
Cole Mickens
45fd44c66d google-chrome-dev: add at-spi2-core dependency 2018-11-02 02:01:51 -07:00
Domen Kožar
89ede978a0
chromium: use jumbo builds to speedup compilation
On Hetzner machine with 1 core: 4h40m
On Hetzner machine with 8 cores: 1h20m
2018-11-01 17:51:51 +00:00
Will Dietz
81f39ee22f slack-term: init at 0.4.1 2018-11-01 11:17:05 -05:00
taku0
73344be7bf thunderbird-bin: 60.2.1 -> 60.3.0 2018-11-01 09:12:12 +09:00
Michael Weiss
e075748769 signal-desktop: 1.17.2 -> 1.17.3 2018-10-31 22:02:41 +01:00
Arnaud
67c1815d0a protonmail-bridge: 1.0.6-1 -> 1.1.0-1 (#49517) 2018-10-31 20:24:58 +01:00
leenaars
363f28f1de tribler: 7.0.2 -> 7.1.2 (#49386) 2018-10-31 20:08:18 +01:00
Ales Huzik
6d34e36ed7
modem-manager-gui: init at 0.0.19.1 2018-10-30 21:55:15 +01:00
Jan Tojnar
628b6cc679
Merge pull request #49254 from jtojnar/remmina-cleanup
remmina: clean up
2018-10-30 21:36:07 +01:00
Benjamin Hipple
baf0703010 pythonPackages.pythondaemon: rename to pythonPackages.python-daemon
This commit renames the pythondaemon module to match its module name, github
name, and pypi name, which makes it easier to find and reference. In order to
avoid breaking any external users, I've left an alias with a deprecated warning.
2018-10-30 21:09:34 +01:00
Michael Weiss
46f5debb94 signal-desktop: 1.17.1 -> 1.17.2 2018-10-30 19:40:00 +01:00
adisbladis
1756b0fb75
firefox-beta-bin: 64.0b3 -> 64.0b5 2018-10-30 18:33:04 +00:00
adisbladis
22c7bc1e0f
firefox-devedition-bin: 64.0b3 -> 64.0b5 2018-10-30 18:32:58 +00:00
Jörg Thalheim
9f88282862
Merge pull request #49450 from Mic92/rambox
rambox: fix crash when downloading files to disk
2018-10-30 13:32:19 +00:00
Robert Schütz
cc161d738b qutebrowser: 1.5.1 -> 1.5.2 2018-10-30 14:10:44 +01:00
Jörg Thalheim
9d9f7d27a1
SenchaCmd: 6.5.3.6 -> 6.6.0.13
This package is internally used by rambox
2018-10-30 11:42:11 +00:00
Jörg Thalheim
ac8acb283c
rambox: fix crash when native filesystem dialogs are created 2018-10-30 11:41:52 +00:00
Joachim F
3272b9a2e9
Merge pull request #49173 from oxij/pkgs/update-tor-browser-again
firefoxPackages.tor-browser: 8.0.2 -> 8.0.3
2018-10-29 09:54:17 +00:00
Herwig Hochleitner
ed91407784 Revert "chromium: make gcc8 build available via buildWithGcc flag"
This partially reverts commit
b70ab5c405 (except for depending gnome2)

see #48922
2018-10-28 17:10:53 +01:00
Herwig Hochleitner
17585ff6d8 chromium: 70.0.3538.67 -> 70.0.3538.77 2018-10-28 16:00:46 +01:00
Herwig Hochleitner
b70ab5c405 chromium: make gcc8 build available via buildWithGcc flag 2018-10-28 16:00:46 +01:00
Herwig Hochleitner
7eea24db5d chromium/plugins: specify gcc instead of stdenv.cc 2018-10-28 16:00:46 +01:00
volth
d2daf0dd6f chromium: build with clang 2018-10-28 16:00:45 +01:00
Jan Tojnar
b4c54485bf
remmina: clean up
Desktop file is included now, so no need to create it manually.
libgnome-keyring is not used anymore, libsecret replaced it.
2018-10-28 11:10:08 +01:00
R. RyanTM
0325373b56 inboxer: 1.1.5 -> 1.2.1 (#49299)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/inboxer/versions
2018-10-27 20:07:16 -04:00
Yurii Izorkin
69fb8a811a znc: add configure options (#48683)
* znc: add option to disable IPv6

* znc: add option to enable debugging

* znc: add option to enable zlib support

* zncModules: match znc build inputs

znc-buildmod expects modules to be aware of the same libs znc itself is linked to.
Before this: znc-buildmod was passing -lz but zlib was not in the include path
2018-10-27 22:50:06 +02:00
Michael Bishop
18d88709cb
Merge pull request #49242 from cleverca22/wireshark-add-headers
wireshark: include headers in wireshark.dev, to support building wireshark plugins
2018-10-27 08:39:51 -03:00
Michael Bishop
1795ca14c3 wireshark: include headers in wireshark.dev, to support building wireshark plugins 2018-10-27 08:15:31 -03:00
Silvan Mosberger
4994ef817a
Merge pull request #49123 from romildo/upd.vivaldi
vivaldi: 2.0.1309.29-2 -> 2.1.1337.36-1; vivaldi-ffmpeg-codecs: 69.0.3497.73 -> 70.0.3538.77
2018-10-27 12:38:12 +02:00
SLNOS
87d0fe0049 firefoxPackages.tor-browser: 8.0.2 -> 8.0.3 2018-10-26 18:02:05 +00:00
adisbladis
5673b57c68
Merge pull request #49140 from r-ryantm/auto-update/riot-web
riot-web: 0.16.5 -> 0.17.0
2018-10-26 17:01:51 +01:00
R. RyanTM
5d88d542e3 riot-web: 0.16.5 -> 0.17.0
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/riot-web/versions
2018-10-26 01:48:11 -07:00
Michael Weiss
6021a94062 signal-desktop: 1.17.0 -> 1.17.1 2018-10-26 09:50:38 +02:00
José Romildo Malaquias
34964d6f3b vivaldi-ffmpeg-codecs: 69.0.3497.73 -> 70.0.3538.77 2018-10-25 18:28:59 -03:00
José Romildo Malaquias
3cd8c2240b vivaldi: 2.0.1309.29-2 -> 2.1.1337.36-1 2018-10-25 18:27:49 -03:00
Alyssa Ross
2702772d2d
weechat: 2.2 -> 2.3
Fixes https://github.com/NixOS/nixpkgs/issues/48798.
2018-10-25 11:44:22 +00:00
Andreas Rammhold
d17ab805fd
Merge pull request #48862 from andir/firefox
firefox{,bin}: 62.0.3 -> 63.0 & nss: 3.38-> 3.39
2018-10-25 07:29:07 +02:00
Herwig Hochleitner
bb03fbc2c8 chromium: 69.0.3497.100 -> 70.0.3538.67 2018-10-24 19:38:51 +02:00
Will Dietz
8324a938e7 tor-browser-bundle-bin: 8.0.2 -> 8.0.3
https://gitweb.torproject.org/builders/tor-browser-build.git/tree/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt?h=tbb-8.0.3-build1
2018-10-24 10:45:55 -05:00
adisbladis
515f89bc3a
firefox-beta-bin: 63.0b14 -> 64.0b3 2018-10-24 13:57:07 +01:00
adisbladis
19b7cf3abd
firefox-devedition-bin: 63.0b14 -> 64.0b3 2018-10-24 13:57:06 +01:00
Austin Seipp
46dc76b60b cloudflared: init at 2018.10.3
'cloudflared' is a multi-purpose client-side tool for CloudFlare Argo
Tunnel, CloudFlare Access, as well as including a simple DNS-over-HTTP
(DoH) proxy tool as well.

However, 'cloudflared' is NOT available under an open source license.
Furthermore, the exact terms of redistribution (namely, if we are able
to redistribute binaries at all) are not entirely clear to me. As a
result, I have filed the following bug report concerning the terms of
redistribution for the source code and binaries:

  https://github.com/cloudflare/cloudflared/issues/53

'cloudflared' does have source code available, however, and it
encourages users to use 'go install' in order to set it up, in fact (or
download their prebuilt, compiled binaries). So using the source seems
to be encouraged. Even then, I'm still not sure if Hydra can serve these
binaries.

In lieu of a more pointed answer regarding source/binary licensing, and
to avoid keeping this expression in my private tree, I've marked it as
'unfree' (to avoid Hydra serving it in any way) as well as compiled from
source (to avoid any 'redistribution allowed while unmodified' terms
that may crop up).

The dependencies for this build were generated using 'dep2nix'.

Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-10-23 15:20:35 -05:00
Michael Weiss
f346289ea6 signal-desktop: 1.16.3 -> 1.17.0 2018-10-23 20:47:55 +02:00
Alyssa Ross
e20e1e5c2c weechat: add perl.withPackages (#48815)
Allows for adding Perl libraries in the same way as for Python. Doesn't
really need to be a function, since there's only one perlPackages in
nixpkgs, but I went for consistency with the python plugin.
2018-10-23 12:23:47 +02:00
Jörg Thalheim
29373797c4
Merge pull request #48860 from r-ryantm/auto-update/wavebox
wavebox: 4.3.0 -> 4.4.0
2018-10-23 10:42:21 +01:00
Andreas Rammhold
5137c04770
firefox-bin: 62.0.3 -> 63.0 2018-10-23 10:15:48 +02:00
Andreas Rammhold
277da59e47
firefox: 62.0.3 -> 63.0 2018-10-23 10:15:46 +02:00
R. RyanTM
2fb21f220e wavebox: 4.3.0 -> 4.4.0
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/wavebox/versions
2018-10-23 00:49:54 -07:00
Joachim F
c54c00465f
Merge pull request #48715 from oxij/pkgs/update-tor-browser
firefoxPackages.tor-browser: 7.5.6 -> 8.0.2
2018-10-22 18:28:14 +00:00
Jörg Thalheim
119d539d72
Merge pull request #47864 from uskudnik/add-brave-browser
brave: init at 0.24.0
2018-10-22 11:01:22 +01:00
隠岐奈
32abab455a zeronet: 0.6.2 -> 0.6.4 2018-10-21 16:02:03 -05:00
SLNOS
0e3df42d64 firefoxPackages.tor-browser-8-0: apply a fix from bugzilla 2018-10-21 19:18:28 +00:00
Andrew Childs
773c8807c9 mumble: fix hang on reconfiguring audio 2018-10-21 21:48:11 +09:00
Renaud
dc6e4f9b37
Merge pull request #48102 from Shados/update/pidgin-opensteamworks/git-2018-08-02
pidgin-opensteamworks: 1.6.1 -> git-2018-08-02
2018-10-21 10:09:30 +02:00
Frederik Rietdijk
86c7662be0 Merge staging-next into master 2018-10-21 08:37:30 +02:00
Jörg Thalheim
7e51738957
Merge pull request #48751 from unode/freerdp
freerdp: 2.0.0-rc2 -> 2.0.0-rc3
2018-10-21 00:12:03 +01:00
Jörg Thalheim
27f51b4884
Merge pull request #48759 from mayflower/pkg/stern
stern: 1.8.0 -> 1.10.0
2018-10-20 23:59:26 +01:00
Jaka Hudoklin
8ff3df3eef
Merge pull request #48736 from mayflower/pkg/minishift
minishift: init at 1.25.0
2018-10-20 22:14:06 +02:00
Franz Pletz
672ff7eb0e
docker-machine-kvm2: use minikube version & source 2018-10-20 21:44:32 +02:00
Franz Pletz
5d45de1fc1
docker-machine-kvm: 0.8.2 -> 0.10.0 2018-10-20 21:44:31 +02:00
Franz Pletz
02ca5c10ef
stern: 1.8.0 -> 1.10.0 2018-10-20 21:43:36 +02:00
Renato Alves
7cd0cec3f4
freerdp: 2.0.0-rc2 -> 2.0.0-rc3 2018-10-20 16:53:15 +02:00
Frederik Rietdijk
ca6ee8f519 Merge master into staging-next 2018-10-20 09:40:09 +02:00
Franz Pletz
c6b09766aa
minishift: init at 1.25.0 2018-10-20 06:08:29 +02:00
worldofpeace
9d49b19ea5 eolie: 0.9.41 -> 0.9.45 (#48719) 2018-10-20 00:12:54 +02:00
Jan Malakhovski
9f32d79ef4 remmina: reindent 2018-10-19 19:14:31 +00:00
Jan Malakhovski
972ec8b3be remmina: make gnome support optional
There's no runtime option to disable GNOME stuff, and storing things in
GNOME Keyring is very inconvenient for non-GNOME users.
2018-10-19 19:14:25 +00:00
Jan Malakhovski
8ec6322711 remmina: remove webkitgtk dependency
It was used by "survey" module which was removed in revision
d97920eb9b32dbe17b85f8eff12928d26c19fd3d of their repository
on 2016-12-13.

Meanwhile, WebKit plugin is a separate package
https://aur.archlinux.org/packages/remmina-plugin-webkit/
not packaged in nixpkgs.
2018-10-19 19:12:36 +00:00
SLNOS
bd7c0c8a6c firefoxPackages.tor-browser: 7.5.6 -> 8.0.2
Mostly usable now.
2018-10-19 16:46:55 +00:00
SLNOS
b21b9bbd6c firefoxPackages: indent 2018-10-19 16:46:41 +00:00
SLNOS
5ec27f3033 firefoxPackages: cleanup
Misc cleanups, but mainly this:

Before:
- `version` could mean either Firefox or TorBrowser version,
- `configureFlags` was hacky.

Now:
- `ffversion` is Firefox version, `tbversion` is TorBrowser version,
- `configureFlags` is much less hacky.
2018-10-19 16:46:28 +00:00
Drakonis
a2d7574ebe rclone-browser: init at 1.2 (#44589) 2018-10-19 11:01:24 +02:00
volth
337d140953 chromium: propagate stdenv for "chromium.override{ stdenv=gcc8Stdenv; }" (#48615) 2018-10-18 23:09:12 +02:00
Izorkin
503318127a znc: add option to enable unicode support 2018-10-18 22:47:25 +03:00
Will Dietz
4249f77260 w3m: 20161120 -> 20180125
https://raw.githubusercontent.com/tats/w3m/v0.5.3+git20180125/NEWS

Include some CVE fixes it would appear.
2018-10-18 11:17:00 -05:00
Frederik Rietdijk
8d8dc1fa34 Merge master into staging 2018-10-18 11:43:54 +02:00
volth
d767ba9996 chromium 71+: there is no more option 'use_gtk3' (#48595) 2018-10-17 23:04:15 +02:00
volth
d039722d0e chromium 71+: add at-spi2-core dependency (#48594) 2018-10-17 23:03:43 +02:00
Michael Weiss
ea691fc8ee tdesktopPackages.preview: 1.4.3 -> 1.4.4 2018-10-17 19:40:54 +02:00
Linus Heckemann
d968906517
Merge pull request #48545 from mayflower/poezio-bump
Update poezio
2018-10-17 18:10:05 +02:00
Anatolii Prylutskyi
4051fc901b
rambox: fix invalid sha256 2018-10-17 09:31:09 +01:00
Linus Heckemann
d6a003e953 poezio: move out of python-packages.nix 2018-10-17 10:08:01 +02:00
Frederik Rietdijk
89349fdae9 Merge staging-next into staging 2018-10-17 08:36:28 +02:00
Mateusz Kowalczyk
4eaf659d89
Merge pull request #48504 from r-ryantm/auto-update/imapfilter
imapfilter: 2.6.11 -> 2.6.12
2018-10-17 08:59:40 +09:00
volth
0c8cdb53f6 chromium: fix aarch64 build (#48586)
* chromium: fix aarch64 build

* chromium: use more stable urls
2018-10-17 01:21:29 +02:00
sjau
6a23e11e65 Flexget: 2.15.1 -> 2.16.2 (#48583) 2018-10-17 00:48:23 +02:00
Michael Weiss
5edc1dd7a8 signal-desktop: 1.16.2 -> 1.16.3 2018-10-16 21:39:54 +02:00
Urban Skudnik
c90ad779a0
brave: init at 0.25.2 2018-10-16 20:19:37 +02:00
zimbatm
7786575c6c
terraform-providers.libvirt: fix plugin output (#48577)
Terraform depends on this binary name format to detect the provider
version.
2018-10-16 19:35:45 +02:00
volth
2ad99a662d chromium plugins: add meta.platforms (#48495)
to prevent their installation on aarch64
2018-10-16 18:11:41 +02:00
Jörg Thalheim
d29f1ab07e
Merge pull request #48518 from r-ryantm/auto-update/frostwire
frostwire-bin: 6.7.2 -> 6.7.4
2018-10-16 12:09:01 +01:00
Jörg Thalheim
45a419ab5a
Merge pull request #48537 from dywedir/rclone
rclone: 1.43.1 -> 1.44
2018-10-16 10:33:58 +01:00
Michael Raskin
c457d2359a
Merge pull request #48542 from r-ryantm/auto-update/baresip
baresip: 0.5.10 -> 0.5.11
2018-10-16 07:54:35 +00:00
R. RyanTM
dec0417347 baresip: 0.5.10 -> 0.5.11
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/baresip/versions
2018-10-16 00:37:15 -07:00
Vladyslav Mykhailichenko
2012f61d98 rclone: 1.43.1 -> 1.44 2018-10-16 10:11:33 +03:00
R. RyanTM
4b43a79a5a frostwire-bin: 6.7.2 -> 6.7.4
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/frostwire/versions
2018-10-15 22:36:28 -07:00
R. RyanTM
d953d8d424 imapfilter: 2.6.11 -> 2.6.12
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/imapfilter/versions
2018-10-15 20:56:02 -07:00
Tycho Grouwstra
72128fcd9d skypeforlinux: 8.28.0.41 -> 8.32.0.44 (#48391)
* skypeforlinux: 8.28.0.41 -> 8.32.0.44

Fixes 404 on https://repo.skype.com/deb/pool/main/s/skypeforlinux/skypeforlinux_8.28.0.41_amd64.deb, as only [more recent versions](https://repo.skype.com/deb/pool/main/s/skypeforlinux/) are still available, as previously noted at #31047. Avoiding `x.y.76.z` releases as per the comment.

* update sha256
2018-10-15 00:46:38 +03:00
Jörg Thalheim
07ae76f0e1
Merge pull request #48397 from Mic92/rambox
rambox: 0.5.17 -> 0.6.1
2018-10-14 20:52:12 +01:00
Silvan Mosberger
0e0340e422
Merge pull request #48405 from Infinisil/fix/tribler
tribler: Fix startup
2018-10-14 15:27:24 +02:00
Silvan Mosberger
fd6d6d9870
tribler: Fix startup
The python component of libtorrentRasterbar seems to now be in pythonPackages
2018-10-14 15:19:04 +02:00
Jörg Thalheim
a25e765dc9
rambox: 0.5.17 -> 0.6.1 2018-10-14 13:29:56 +01:00
R. RyanTM
34e8009dcb riot-web: 0.16.2 -> 0.16.5 2018-10-14 10:46:48 +00:00
R. RyanTM
77d29e5f06 wireshark: 2.6.3 -> 2.6.4
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/wireshark-qt/versions
2018-10-14 09:02:12 +02:00
R. RyanTM
91638e161e remmina: 1.2.31.4 -> 1.2.32
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/remmina/versions
2018-10-14 09:01:22 +02:00
R. RyanTM
caa6ab0048 qutebrowser: 1.4.2 -> 1.5.1
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/qutebrowser/versions
2018-10-14 08:58:45 +02:00
adisbladis
00d7ce7ef1
firefox-beta-bin: 63.0b13 -> 63.0b14 2018-10-14 11:24:12 +08:00
adisbladis
726dd79151
firefox-devedition-bin: 63.0b13 -> 63.0b14 2018-10-14 11:24:03 +08:00
Ryan Mulligan
07f8104707 treewide: fix evaluation with allowAliases = false 2018-10-13 15:32:07 -07:00
Jörg Thalheim
e6af8b5d8c
Merge pull request #48331 from dtzWill/update/gmailieer-0.10
gmailieer: 0.9 -> 0.10
2018-10-13 22:19:42 +01:00
Will Dietz
14a971d609 notmuch-bower: 0.8.1 -> 0.9 (#48332) 2018-10-13 22:22:32 +02:00
Will Dietz
7bffaa8efa gmailieer: 0.9 -> 0.10 2018-10-13 14:05:26 -05:00
Renaud
0f5f873e93
Merge pull request #47893 from bhipple/add/luigi
luigi: init at 2.7.9
2018-10-13 18:23:07 +02:00
Timo Kaufmann
6aef372528
Merge pull request #48313 from Gerschtli/update/ts3
teamspeak_server: 3.3.0 -> 3.4.0
2018-10-13 16:28:16 +02:00
volth
a974ecf803
Merge branch 'staging' into remove-top-perlXMLParser 2018-10-13 13:22:11 +00:00
Michael Weiss
972aa96f27 tdesktop: 1.4.2 -> 1.4.3
tdesktopPackages.preview: 1.4.2 -> 1.4.3
2018-10-13 14:54:16 +02:00
Benjamin Hipple
7472c5477a luigi: init at 2.7.9 2018-10-13 06:24:07 -04:00
Tobias Happ
4283eca265 teamspeak_server: 3.3.0 -> 3.4.0 2018-10-13 11:55:26 +02:00
xeji
756f1ce8a4
Merge pull request #48303 from dtzWill/update/notmuch-0.28
notmuch: 0.27 -> 0.28
2018-10-13 11:25:17 +02:00
lewo
276b99a847
Merge pull request #48100 from tenx-tech/feature/upgrade-helmfile
helmfile: update from 0.19.0 to 0.40.1
2018-10-13 08:53:59 +02:00
Will Dietz
13f3021bbb notmuch: fix zsh completions by specifying dir to use 2018-10-13 00:17:22 -05:00
Will Dietz
a838003c32 notmuch: 0.27 -> 0.28
https://notmuchmail.org/pipermail/notmuch/2018/027128.html
2018-10-13 00:04:15 -05:00
volth
c0fed1ba77 perlXMLParser -> perlPackages.XMLParser 2018-10-12 22:56:15 +00:00
R. RyanTM
fa3b0afe07 pjsip: 2.7.2 -> 2.8 (#47735)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/pjsip/versions
2018-10-12 23:09:51 +02:00
Léo Gaspard
ad992cbde1 nheko: mark as insecure (#48281)
The package is no longer maintained and includes potential security
vulnerabilities (a use-after-free and several crashes) that are known
and not fixed in the version present in nixpkgs. They don't look too bad
judging from the trigger vectors mentioned in the changelog, but with
the project going unmaintained one of them becoming a security
vulnerability would likely not be noticed.
2018-10-12 21:28:30 +02:00
R. RyanTM
992b13bd72 wavebox: 3.14.10 -> 4.3.0 (#47701)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/wavebox/versions
2018-10-12 16:23:00 +02:00
Will Dietz
ce6db5e36e chromium: update to 69.0.3497.100 (and others), ran update.sh 2018-10-12 12:20:35 +02:00
Will Dietz
4b7de150a8 chromium/update.sh: don't use remote builders, lots of copying for work 2018-10-12 12:20:35 +02:00
Periklis Tsirakidis
e5ee89f758 minikube: bump version 0.29.0 -> 0.30.0
This is a fix release for CVE-2018-1002103. More details in
https://github.com/kubernetes/minikube/issues/3208
2018-10-12 10:24:56 +02:00
zimbatm
e4f8d5c254
terraform-providers.gandi: init at 1.0.0 (#48223) 2018-10-11 21:53:30 +02:00
Niklas Hambüchen
8362673d4b nload: Include patch to fix screen corruption. (#48017)
See added comment for details.
2018-10-11 14:37:49 +02:00
Jörg Thalheim
3dec3de2d3
dino: 2018-09-05 -> 2018-09-21 2018-10-11 10:00:18 +01:00
Sarah Brofeldt
35bccdecc1
Merge pull request #48103 from johanot/kubernetes-1.12.1
kubernetes: 1.12.0 -> 1.12.1
2018-10-11 10:20:23 +02:00
xeji
bde4483d13
flashplayer: 31.0.0.108 -> 31.0.0.122 (#48126)
previous version was removed upstream (404)
2018-10-10 23:49:40 +02:00
Daniël de Kok
632ae0502e resilio-sync: 2.6.0 -> 2.6.1 (#47973)
Changelog: https://help.resilio.com/hc/en-us/articles/206216855-Sync-2-x-change-log
2018-10-10 23:47:09 +02:00
sjau
608f6b4f13 Flexget: 2.14.21 -> 2.15.1 (#48035) 2018-10-10 23:43:30 +02:00
Michael Weiss
f9d247a8d8 tdesktop: 1.4.0 -> 1.4.2
tdesktopPackages.preview: 1.4.0 -> 1.4.2
2018-10-10 20:40:06 +02:00
Alexei Robyn
8dd8360ad7 pidgin-opensteamworks: 1.6.1 -> unstable-2018-08-02 2018-10-10 22:08:53 +11:00
lewo
bacaeb2e4d
Merge pull request #48092 from tenx-tech/feature/build-helm-from-source
helm: build from source
2018-10-10 12:47:54 +02:00
Jörg Thalheim
fc847785d8
Merge pull request #48077 from Lassulus/bitlbee-discord
bitlbee-discord: 2017-12-27 -> 0.4.1
2018-10-09 23:32:43 +01:00
Andreas Rammhold
a00b820ddc
Merge pull request #47949 from yrashk/webkitgtk222x
webkitgtk222x: init at 2.22.2
2018-10-09 22:33:49 +02:00
Will Dietz
b32f26016d
Merge pull request #48027 from dtzWill/update/nheko-0.6.2
nheko: 0.6.1 -> 0.6.2
2018-10-09 11:55:07 -05:00
Johan Thomsen
8609055ac2 kubernetes: 1.12.0 -> 1.12.1 2018-10-09 12:41:47 +02:00
adisbladis
ffc899dab1
firefox-beta-bin: 63.0b9 -> 63.0b13 2018-10-09 17:36:43 +08:00
adisbladis
c19fc34926
firefox-devedition-bin: 63.0b9 -> 63.0b13 2018-10-09 17:36:42 +08:00
edude03
a0e41023ec helmfile: update from 0.19.0 to 0.40.1 2018-10-09 16:41:13 +08:00
edude03
c292638b40 helm: build from sources 2018-10-09 16:25:34 +08:00
lassulus
0ad87d7ae0 bitlbee-discord: 2017-12-27 -> 0.4.1 2018-10-08 22:54:55 +02:00
Matthew Bauer
15aa8caf57
Merge pull request #44511 from bignaux/soulseekqt
soulseekqt : refactoring appimage manipulation to be more generic.
2018-10-08 14:03:15 -05:00
Matthew Bauer
3d188ee320
Merge pull request #45605 from gnidorah/vk
vk-messenger: init
2018-10-08 13:59:27 -05:00
Joachim F
4b2aef2d36
Merge pull request #47792 from r-ryantm/auto-update/google-drive-ocamlfuse
google-drive-ocamlfuse: 0.6.25 -> 0.7.0
2018-10-08 17:48:35 +00:00
Eelco Dolstra
2be42950c3
thunderbird: Remove buildconfig
This reduces the closure size from 1689 MiB to 425 MiB.
2018-10-08 16:32:31 +02:00
schneefux
314593950e tdesktop: use fetchFromGitHub instead of fetchgit 2018-10-08 14:29:28 +02:00
Will Dietz
9a904b3a08 nheko: 0.6.1 -> 0.6.2 2018-10-07 20:21:37 -05:00
schneefux
aba5390bc5 sipcmd: add license 2018-10-07 19:02:01 +02:00
Timo Kaufmann
ec7d7e1f78
Merge pull request #47609 from mbode/heptio-ark_0_9_6
heptio-ark: 0.9.4 -> 0.9.6
2018-10-06 19:54:59 +02:00
Yurii Rashkovskii
f0e5a51c98
astroid: 0.13 -> 0.14 2018-10-06 09:16:29 -07:00
worldofpeace
fa3ec9c836 wire-desktop: 3.2.2840 -> 3.3.2872 (#47941) 2018-10-06 15:35:46 +02:00
worldofpeace
e5bea728ce eolie: 0.9.37 -> 0.9.41 (#47942) 2018-10-06 15:32:03 +02:00
Andreas Rammhold
248ed3575c tor-browser-bundle-bin: 8.0.1 -> 8.0.2
Update to latest version due to security updates and 8.0.1 not being
available on the mirrors anymore.

Release notes: https://blog.torproject.org/new-release-tor-browser-802
2018-10-06 14:49:19 +02:00
Matthew Bauer
505b7e23c3
Merge pull request #47315 from tobiasBora/master
signal-desktop: enable notifications
2018-10-05 22:36:46 -05:00
Matthew Bauer
8dccd8cd62
Merge pull request #47357 from coreyoconnor/firefox-no-update
firefox: disable auto updates using distribution policies.
2018-10-05 22:35:16 -05:00
Orivej Desh
dbc4ee75a2 psi-plus: 1.3.410 -> 1.3.422 2018-10-05 12:08:16 +00:00
Justin Humm
bea3f18185 notmuch: use test-database in checkPhase
for running all tests, notmuch requires a database file, which can be
downloaded at https://notmuchmail.org/releases/test-databases/

See test/README in notmuch sources for further info.
2018-10-05 12:36:12 +02:00
lewo
96ad503163
Merge pull request #47692 from nicknovitski/kubeval-init
kubeval: init at 0.7.3
2018-10-05 08:41:41 +02:00
Nick Novitski
78b9ab0713 kubeval: init at 0.7.3 2018-10-04 13:52:45 -07:00
zimbatm
d4ff6cae34
terraform: add plugins tests (#47861)
I wasn't sure if the plugins were downloaded from the Internet or not.
This makes sure that there is no regression in the plugin detection.
2018-10-04 22:41:19 +02:00
R. RyanTM
07ace1d24e kubernetes-helm: 2.10.0 -> 2.11.0
* kubernetes-helm: 2.10.0 -> 2.11.0

Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/helm/versions

* kubernetes-helm: 2.10.0 -> 2.11.0 (fix darwin hash)
2018-10-04 21:44:03 +02:00
Florian Klink
e4f4e9fd1d terraform-providers.matchbox: init at 0.2.2 (#47863) 2018-10-04 15:21:24 +02:00
Pascal Wittmann
b9e7935eff
Merge pull request #47603 from Mic92/bitlbee
nixos/bitlbee: add pam option
2018-10-04 12:48:09 +02:00
Sarah Brofeldt
9073176598
Merge pull request #46577 from uskudnik/tsung-add-package
tsung: init at 1.7.0
2018-10-03 23:35:30 +02:00
R. RyanTM
bbf519200a google-drive-ocamlfuse: 0.6.25 -> 0.7.0
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/google-drive-ocamlfuse/versions
2018-10-03 11:34:43 -07:00
Vincent Demeester
ba98a7aea1
minikube: 0.28.1 -> 0.29.0
Hard-code kubernetes version as the upstream python script is broken/not-up-to-date

Signed-off-by: Vincent Demeester <vincent@sbr.pm>
2018-10-03 16:41:03 +02:00
Corey O'Connor
ba2fe3c9a6 firefox: disable auto updates using distribution policies.
Resolves #33884
2018-10-03 07:22:49 -07:00
Urban Skudnik
a3378c5088
tsung: init at 1.7.0 2018-10-03 15:47:12 +02:00
Andreas Rammhold
1ba6a7bb43
Merge pull request #47748 from taku0/thunderbird-bin-60.2.1
thunderbird,  thunderbird-bin: 60.0 -> 60.2.1
2018-10-03 14:55:42 +02:00
taku0
d802524def thunderbird: 60.0 -> 60.2.1 2018-10-03 21:32:13 +09:00
Andreas Rammhold
246d2848ff
firefox-esr-60: 60.2.1 -> 60.2.2 [critical security fixes]
This update bumps the package to the latest stable version containing a
few security fixes:

- CVE-2018-12386: Type confusion in JavaScript
  A vulnerability in register allocation in JavaScript can lead to type
  confusion, allowing for an arbitrary read and write. This leads to
  remote code execution inside the sandboxed content process when
  triggered.

- CVE-2018-12387
  A vulnerability where the JavaScript JIT compiler inlines
  Array.prototype.push with multiple arguments that results in the stack
  pointer being off by 8 bytes after a bailout. This leaks a memory
  address to the calling function which can be used as part of an
  exploit inside the sandboxed content process.

Source: https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/
2018-10-03 09:51:13 +02:00
Andreas Rammhold
e7785f1148
firefox: 62.0.2 -> 62.0.3 [critical security fixes]
This update bumps the package to the latest stable version containing a
few security fixes:

- CVE-2018-12386: Type confusion in JavaScript
  A vulnerability in register allocation in JavaScript can lead to type
  confusion, allowing for an arbitrary read and write. This leads to
  remote code execution inside the sandboxed content process when
  triggered.

- CVE-2018-12387
  A vulnerability where the JavaScript JIT compiler inlines
  Array.prototype.push with multiple arguments that results in the stack
  pointer being off by 8 bytes after a bailout. This leaks a memory
  address to the calling function which can be used as part of an
  exploit inside the sandboxed content process.

Source: https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/
2018-10-03 09:51:13 +02:00
Andreas Rammhold
64d02660cb
firefox-bin: 62.0.2 -> 62.0.3 [critical security fixes]
This update bumps the package to the latest stable version containing a
few security fixes:

- CVE-2018-12386: Type confusion in JavaScript
  A vulnerability in register allocation in JavaScript can lead to type
  confusion, allowing for an arbitrary read and write. This leads to
  remote code execution inside the sandboxed content process when
  triggered.

- CVE-2018-12387
  A vulnerability where the JavaScript JIT compiler inlines
  Array.prototype.push with multiple arguments that results in the stack
  pointer being off by 8 bytes after a bailout. This leaks a memory
  address to the calling function which can be used as part of an
  exploit inside the sandboxed content process.

Source: https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/
2018-10-03 09:35:54 +02:00
taku0
d4de3b2d34 thunderbird-bin: 60.0 -> 60.2.1 2018-10-03 09:12:16 +09:00
Jörg Thalheim
1643967b8d
Merge pull request #47668 from jluttine/syncthing-0.14.51
syncthing: 0.14.50 -> 0.14.51
2018-10-02 20:19:55 +01:00