Commit graph

1712 commits

Author SHA1 Message Date
Tim Steinbach
cbd458a1b1
Merge pull request #31365 from andir/fix-cvs-CVE-2017-12836
cvs: fix CVE-2017-12836
2017-11-07 17:12:15 +00:00
Andreas Rammhold
d0c8c66068
cvs: fix CVE-2017-12836
This patch is based on the work of the patch from Thorsten Glaser (MirBSD) [1]

[1] http://www.mirbsd.org/cvs.cgi/src/gnu/usr.bin/cvs/src/rsh-client.c.diff?r1=1.6;r2=1.7
2017-11-07 17:01:45 +01:00
Servilio Afre Puentes
f2ac5e0acf gitlab: 10.0.2 -> 10.1.1 2017-11-06 14:50:53 -05:00
Servilio Afre Puentes
fa0148abf8 gitlab-workhorse: 3.0.0 -> 3.2.0 2017-11-06 14:50:53 -05:00
Servilio Afre Puentes
c9bb6ac1fd gitlab-shell: 5.9.0 -> 5.9.3 2017-11-06 14:50:52 -05:00
Servilio Afre Puentes
3e90cbe268 gitlab-shell: make the patches apply cleanly 2017-11-06 14:50:52 -05:00
Servilio Afre Puentes
2aa4517d4f gitaly: 0.38.0 -> 0.43.1 2017-11-06 14:50:52 -05:00
Alex Feldman-Crough
00fe37217e
gitea: 1.2.1 -> 1.2.3 2017-11-05 10:02:15 -08:00
gjeusel
ba885e1d7d tortoisehg: 4.1.1 -> 4.3.1
Signed-off-by: gjeusel <jeusel.guillaume@gmail.com>
2017-11-04 11:48:38 +01:00
c0bw3b
525380b472 treewide: abandon Google Code homepages 2017-11-03 18:52:28 +00:00
Tim Steinbach
c912a8fdf3
Merge pull request #30967 from NeQuissimus/git_2_15_0
git: 2.14.3 -> 2.15.0
2017-10-31 06:58:12 -04:00
zimbatm
0a46a71a6e gitAndTools.git-codeowners: init at 0.1.1 2017-10-30 15:14:24 +00:00
Tim Steinbach
7fd58b57b1
git: 2.14.3 -> 2.15.0 2017-10-30 09:04:23 -04:00
Robert Helgesson
000b68c226
git-hub: 0.11.1 -> 1.0.0 2017-10-26 12:54:58 +02:00
Tim Steinbach
124e462455
git: 2.14.2 -> 2.14.3 2017-10-23 08:46:15 -04:00
Graham Christensen
346dcfdcf0 Merge pull request #30714 from phunehehe/git-crypt-path
git-crypt: add runtime dependencies to PATH
2017-10-23 07:12:43 -04:00
Hoang Xuan Phu
acbe3a869c git-crypt: add runtime dependencies to PATH
git-crypt won't work if git and git-crypt are not in PATH. This surfaced
after dbb8958. Test like this:

```
PATH= $(nix-build --no-out-link '<nixpkgs>' --attr git-crypt)/bin/git-crypt unlock
```
2017-10-23 19:05:59 +08:00
Kevin Cox
5f8cf0048e rust: update cargo builder to fetch registry dynamically
The biggest benefit is that we no longer have to update the registry
package. This means that just about any cargo package can be built by
nix. No longer does `cargo update` need to be feared because it will
update to packages newer then what is available in nixpkgs.

Instead of fetching the cargo registry this bundles all the source code
into a "vendor/" folder.

This also uses the new --frozen and --locked flags which is nice.

Currently cargo-vendor only provides binaries for Linux and
macOS 64-bit. This can be solved by building it for the other
architectures and uploading it somewhere (like the NixOS cache).

This also has the downside that it requires a change to everyone's deps
hash. And if the old one is used because it was cached it will fail to
build as it will attempt to use the old version. For this reason the
attribute has been renamed to `cargoSha256`.

Authors:
* Kevin Cox <kevincox@kevincox.ca>
* Jörg Thalheim <Mic92@users.noreply.github.com>
* zimbatm <zimbatm@zimbatm.com>
2017-10-23 00:30:47 +01:00
Robin Gloster
d1c8c04ea6
git-lfs: 2.3.3 -> 2.3.4 2017-10-22 14:14:13 +02:00
Robin Gloster
922e747f58
gitAndTools.git-extras: 4.2.0 -> 4.4.0 2017-10-22 14:10:00 +02:00
Samuel Leathers
717436b4aa gitea: init at 1.2.1 2017-10-18 00:16:33 -04:00
Jörg Thalheim
e935fbf43f Merge pull request #30458 from sigma/pr/ghq-0.8.0
ghq: 0.7.4 -> 0.8.0
2017-10-17 02:42:57 +01:00
Markus Mueller
60b0db0e08
gitlab: link tmp/ directory to writable path 2017-10-16 14:58:02 +02:00
Yann Hodique
b6d3d7cfc4 ghq: 0.7.4 -> 0.8.0 2017-10-15 21:21:20 -07:00
Vladimír Čunát
3ee33f35f8
Merge branch 'staging'
Contains security fixes in X server and X libs.
On Hydra, the amount to rebuild on master is now higher than on staging;
the comparison looks OK.
2017-10-15 13:59:18 +02:00
Matthias Beyer
5a21efdcdf gitAndTools.git-dit: 0.1.0 -> 0.3.0 2017-10-15 11:59:30 +01:00
Vladimír Čunát
6525c22ef1
Merge branch 'master' into staging
Hydra: ?compare=1401528
2017-10-14 10:36:13 +02:00
Mathias Schreck
bd559dcea7 git-lfs: 2.2.1 -> 2.3.3 2017-10-10 23:47:24 +02:00
Daniel Peebles
416979f3f7 Merge pull request #30150 from copumpkin/no-rpath-nonsense
Get rid of most @rpath nonsense on Darwin
2017-10-08 16:21:27 -04:00
Dan Peebles
b426c85ce2 Get rid of most @rpath nonsense on Darwin
This requires some small changes in the stdenv, then working around the
weird choice LLVM made to hardcode @rpath in its install name, and then
lets us remove a ton of annoying workaround hacks in many of our Go
packages. With any luck this will mean less hackery going forward.
2017-10-08 16:13:46 -04:00
Tim Steinbach
f46b30e9b8 Merge pull request #30197 from pbogdan/update-subversion
subversion18: 1.8.18 -> 1.8.19
2017-10-07 15:37:29 -04:00
Piotr Bogdan
351b1ad8e2 subversion18: 1.8.18 -> 1.8.19
For CVE-2017-9800, see
https://subversion.apache.org/security/CVE-2017-9800-advisory.txt
2017-10-07 18:44:46 +01:00
Vladimír Čunát
ef41fc7f51
Merge branch 'master' into staging
Hydra: ?compare=1399476
2017-10-07 10:17:42 +02:00
Joachim F
1ad383fa7f Merge pull request #30041 from bricewge/patch-2
git-crypt: patch don't hard code path to git-crypt
2017-10-06 07:58:09 +00:00
Orivej Desh
f137004179 Merge branch 'master' into staging
* master: (81 commits)
  Add NixOS 17.09 AMIs
  gradle: 4.2 -> 4.2.1
  maintainers.nix: use my GitHub handle as maintainer name
  fcitx-engines.rime: init at 0.3.2
  brise: init at 2017-09-16
  librime: init at 1.2.9
  marisa: init at 0.2.4
  opencc: build shared library and programs
  josm: 12712 -> 12914
  exa: 0.7.0 -> 0.8.0
  krb5: add deprecation date for old configuration
  rustRegistry: 2017-09-10 -> 2017-10-03
  go-ethereum: Fix libusb segmentation faults on Darwin
  tor-browser-bundle-bin: 7.0.5 -> 7.0.6
  libsodium: 1.0.13 -> 1.0.15
  tor-browser-bundle: geoip support
  tor-browser-bundle: support transports obfs2,obfs3
  tor-browser-bundle: bump https-everywhere to 2017.9.12
  tint2: limit platforms to Linux since macOS is not supported and fails the tests
  eclipse-plugin-vrapper: init at 0.72.0
  ...
2017-10-03 17:46:39 +00:00
bricewge
dbb8958fef git-crypt: patch don't hard code path to git-crypt
Fix #30034
2017-10-03 00:27:25 +02:00
Bob van der Linden
41c2fb3f25 gogs: patch gogs to include default STATIC_ROOT_PATH 2017-10-02 23:15:13 +02:00
Bob van der Linden
9d841295f3 gogs: avoid creating symlinks each run 2017-10-02 22:11:46 +02:00
Mathieu Boespflug
f795d78d86 git: Properly wrap Git commands that are implemented in Perl. (#30001)
Some Git commands are implemented as Perl scripts. Some of these
scripts use Perl modules from CPAN. Without wrapping these programs to
set `GITPERLLIB`, these programs would not be fully functional because
some Perl libraries are found to be missing at runtime.

Fixes #29996
2017-10-02 14:25:12 +01:00
Orivej Desh
fda26c8476 Merge branch 'master' into staging
* master: (271 commits)
  pysmbc: clarify license
  pysmbc: fix license
  bazel: 0.5.4 -> 0.6.0 (#29990)
  googler: init at 3.3
  go: declare support for aarch64
  firefox-beta-bin: 56.0b5 -> 57.0b4
  spotify: 1.0.64.401.g9d720389-21 -> 1.0.64.407.g9bd02c2d-26
  gogs: 0.11.19 -> 0.11.29
  grafana: 4.5.1 -> 4.5.2
  mopidy-iris: 3.4.1 -> 3.4.9
  nextcloud: 12.0.2 -> 12.0.3
  haskell-json-autotype: jailbreak to fix build within LTS 9.x
  kore: fix up
  kore: init at 2.0.0
  glusterfs service: fix issues with useRpcbind
  tig: 2.2.2 -> 2.3.0
  haskell-hspec-core: enable test suite again
  hackage-packages.nix: automatic Haskell package set update
  librsvg: fix thumbnailer path
  awscli: 1.11.108 -> 1.11.162
  ...
2017-10-02 00:22:12 +00:00
Bob van der Linden
549a454f45 gogs: 0.11.19 -> 0.11.29 2017-10-01 23:14:13 +02:00
Yann Hodique
e4615f880c tig: 2.2.2 -> 2.3.0 2017-10-01 09:11:21 -07:00
Robin Gloster
57ed9e7e1d
gitlab: 9.5.5 -> 10.0.2 2017-09-28 23:14:31 +02:00
John Ericson
f037625f87 Merge remote-tracking branch 'upstream/staging' into deps-reorg 2017-09-28 12:32:57 -04:00
Franz Pletz
faed026cd4
fossil: 2.2 -> 2.3
Fixes XSS vulnerability on the /help webpage. No CVE known.
2017-09-28 16:59:40 +02:00
Tim Steinbach
5a2a35aef3
git: 2.14.1 -> 2.14.2 2017-09-26 08:50:00 -04:00
mimadrid
80a14bf5fb
gsource: 0.44 -> 0.47 2017-09-23 00:38:03 +02:00
John Ericson
ed14223f8c treewide: Manual fix more pkg-config build-inputs 2017-09-21 15:49:54 -04:00
John Ericson
531e4b80c9 misc pkgs: Basic sed to get fix pkgconfig and autoreconfHook buildInputs
Only acts on one-line dependency lists.
2017-09-21 15:49:53 -04:00
Robin Gloster
e2822f6384
gitlab: 9.5.2 -> 9.5.5 2017-09-21 20:26:12 +02:00