Martin Weinelt
bb4f46855f
openssl: 1.1.1f → 1.1.1g
...
Fixes: CVE-2020-1967
Segmentation fault in SSL_check_chain (CVE-2020-1967)
=====================================================
Severity: High
Server or client applications that call the SSL_check_chain() function during or
after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a
result of incorrect handling of the "signature_algorithms_cert" TLS extension.
The crash occurs if an invalid or unrecognised signature algorithm is received
from the peer. This could be exploited by a malicious peer in a Denial of
Service attack.
OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This
issue did not affect OpenSSL versions prior to 1.1.1d.
Affected OpenSSL 1.1.1 users should upgrade to 1.1.1g
This issue was found by Bernd Edlinger and reported to OpenSSL on 7th April
2020. It was found using the new static analysis pass being implemented in GCC,
- -fanalyzer. Additional analysis was performed by Matt Caswell and Benjamin
Kaduk.
2020-04-22 02:14:44 +02:00
Frederik Rietdijk
dabf3f8a0b
Merge staging-next into staging
2020-04-21 20:00:25 +02:00
Frederik Rietdijk
23be4a8b4d
Merge master into staging-next
2020-04-21 19:59:56 +02:00
Frederik Rietdijk
ec21df329a
Merge pull request #85636 from matthewbauer/blas-lapack-fix-fallout-from-83888
...
BLAS/LAPACK fix fallout from #83888
2020-04-21 19:59:16 +02:00
Frederik Rietdijk
e7593313a6
Merge pull request #84354 from bandresen/clj-kondo_2020.03.20->2020.04.05
...
clj-kondo: 2020.03.20 -> 2020.04.05
2020-04-21 19:51:08 +02:00
Jörg Thalheim
b1e93ddf4d
ferm: 2.4.1 -> 2.5.1
2020-04-21 19:48:29 +02:00
gnidorah
b4a7b66d82
openmpt123: 0.4.11 -> 0.4.12
2020-04-21 19:47:06 +02:00
Elis Hirwing
09d82f63a4
transifex-client: 0.13.6 -> 0.13.9
2020-04-21 19:46:48 +02:00
Raphael Borun Das Gupta
c970d3b105
ili2c: 5.0.0 -> 5.0.8
2020-04-21 19:45:55 +02:00
Roman Volosatovs
de14e60d02
sidequest: 0.8.7-> 0.10.2
2020-04-21 19:45:27 +02:00
Nikolay Korotkiy
42d290316c
xournalpp: 1.0.17 -> 1.0.18
2020-04-21 19:45:02 +02:00
Christian Kampka
55061fcd0b
trilium: 0.40.5 -> 0.40.7
2020-04-21 19:44:40 +02:00
Kevin Rauscher
080e82493b
metals: 0.8.3 -> 0.8.4
2020-04-21 19:43:53 +02:00
David Anderson
0d0dd76a7a
tailscale: 0.97-0 -> 0.97-219.
...
Signed-off-by: David Anderson <dave@natulte.net>
2020-04-21 19:43:32 +02:00
Linus Heckemann
31edad38b1
kanboard: 1.2.13 -> 1.2.14
2020-04-21 19:42:24 +02:00
Justin Bedo
d8d6ecc418
mosdepth: 0.2.6 -> 0.2.9
2020-04-21 19:42:05 +02:00
Frederik Rietdijk
05b4bf64d6
Merge pull request #85630 from Gerschtli/update/dwm-status
...
dwm-status: 1.6.3 -> 1.6.4
2020-04-21 19:41:29 +02:00
misuzu
6ca23cac61
psi-plus: 1.4.984 -> 1.4.1086
2020-04-21 19:41:01 +02:00
sternenseemann
c93e4cba92
apostrophe: unstable-2020-03-29 -> 2.2.0.2
2020-04-21 19:37:32 +02:00
Peter Hoeg
e43a6c9468
mu: minor cleanup
2020-04-21 19:36:47 +02:00
Maximilian Bosch
edeaab2929
Merge pull request #85608 from obadz/citrix-2004
...
citrix_workspace: add 2004
2020-04-21 19:20:23 +02:00
geistesk
790748c249
openrct2: 0.2.4 -> 0.2.6
2020-04-21 19:14:59 +02:00
worldofpeace
9b20a24d4d
Merge pull request #85643 from petabyteboy/feature/generate-config
...
nixos/tools: adapt for renamed console options
2020-04-21 12:50:55 -04:00
Frederik Rietdijk
4b0a0d96cd
libyaml: 0.2.3 -> 0.2.4
2020-04-21 18:44:09 +02:00
Frederik Rietdijk
bae8756c1a
libyaml: 0.2.3 -> 0.2.4
2020-04-21 18:43:47 +02:00
Maximilian Bosch
25b9bca759
mongodb_3_4: fix license
...
As noted in #83433 , the 3.4 branch of `mongodb` is still licensed under
AGPL[1].
[1] https://github.com/mongodb/mongo/blob/r3.4.24/README
2020-04-21 18:05:15 +02:00
Maximilian Bosch
68684b6376
stellarium: 0.20.0 -> 0.20.1
...
https://github.com/Stellarium/stellarium/releases/tag/v0.20.1
2020-04-21 18:05:15 +02:00
Maximilian Bosch
c844633cc7
mautrix-whatsapp: 2020-04-12 -> 2020-04-21
2020-04-21 18:05:15 +02:00
Matthew Bauer
3c41d61514
doc/overlays.xml: update documentation for BLAS/LAPACK
...
This expands the documentation and explains how to assert LP64.
2020-04-21 11:03:10 -05:00
Domen Kožar
a85868fee9
Merge pull request #85685 from nh2/remove-unused-allSupportedNixpkgs
...
release-combined: Remove unused value `allSupportedNixpkgs`
2020-04-21 17:01:30 +02:00
Niklas Hambüchen
1da6613de1
release-combined: Remove unused value allSupportedNixpkgs
.
...
It was made obsolete by commit
2de3caf0
- nixos/release-combined.nix: List constituents of the 'tested' job by name
see also f996744fd3 (r38642487)
.
2020-04-21 16:41:41 +02:00
Mario Rodas
9d81c54b31
opam: add marsam to maintainers
2020-04-21 15:49:43 +02:00
Mario Rodas
05cfa5ff99
opam: 2.0.6 -> 2.0.7
2020-04-21 15:49:43 +02:00
José Romildo Malaquias
663d995b7b
Merge pull request #85229 from romildo/fix.icon-theme-inheritance
...
tree-wide: add missing parent icon themes
2020-04-21 10:31:09 -03:00
José Romildo Malaquias
adcb685ec0
Merge branch 'staging' into fix.icon-theme-inheritance
2020-04-21 10:29:12 -03:00
Mario Rodas
6a03fa96ea
Merge pull request #85411 from anmonteiro/anmonteiro/bs-platform-7.3.1
...
bs-platform: 7.2.0 -> 7.3.1
2020-04-21 08:01:11 -05:00
Michael Weiss
666042141e
git: Fix the update.sh script and use HTTPS
...
The syntax is ${parameter:-word} (i.e. previously this used
"latestTag" instead of the actual value).
(Fixes a regression from #85278.)
Also: Even though getting the latest tag isn't really security critical
(as long as Git itself is secure against untrusted input), I'd prefer to
switch from the Git to the HTTPS protocol (for authentication of the
server and encryption + uses a standard port).
2020-04-21 14:30:11 +02:00
Mario Rodas
77cb7ad618
Merge pull request #84938 from doronbehar/package-gjo
...
gjo: init at 1.0.2
2020-04-21 07:25:00 -05:00
Mario Rodas
ab7c117805
Merge pull request #85619 from kuznero/vscode
...
vscode, vscodium: 1.44.1 -> 1.44.2
2020-04-21 07:21:37 -05:00
Mario Rodas
d43ea8caf8
Merge pull request #85651 from marsam/update-chezmoi
...
chezmoi: 1.7.18 -> 1.8.0
2020-04-21 07:16:57 -05:00
Mario Rodas
357054b656
Merge pull request #85648 from xrelkd/update/cargo-expand
...
cargo-expand: 0.4.19 -> 0.5.0
2020-04-21 07:16:13 -05:00
Jörg Thalheim
6d446c1dc9
Merge pull request #85628 from xaverdh/enable-add-type
2020-04-21 10:53:15 +01:00
Frederik Rietdijk
04deda9be4
Merge staging into staging-next
2020-04-21 11:21:56 +02:00
Frederik Rietdijk
cf1a68360e
python2: 2.7.17 -> 2.7.18
2020-04-21 11:21:39 +02:00
Vincent Laporte
22a3bf9fb9
Merge pull request #85142 from sternenseemann/mirage-crypto
...
ocamlPackages: jackline: switch to mirage-crypto and update dependencies
2020-04-21 08:56:52 +02:00
Mario Rodas
1a36927174
ocamlformat: 0.14.0 -> 0.14.1
...
Changelog: https://github.com/ocaml-ppx/ocamlformat/releases/tag/0.14.1
2020-04-21 08:56:19 +02:00
Dominik Xaver Hörl
0412bde942
treewide: add bool type to enable options, or make use of mkEnableOption
...
Add missing type information to manually specified enable options or replace them by mkEnableOption where appropriate.
2020-04-21 08:55:36 +02:00
Vincent Laporte
974920ccd4
ocamlPackages.alcotest: 0.8.5 → 1.0.1
2020-04-21 08:47:40 +02:00
Vincent Laporte
fc317e100a
ocamlPackages.digestif: fix tests for alcotest ≥ 1.0
2020-04-21 08:47:40 +02:00
Vincent Laporte
36632263e0
ocamlPackages.base64: fix tests for alcotest ≥ 1.0
2020-04-21 08:47:40 +02:00