summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* pkgs: Add _type = "pkgs"origin/release-19.03Robert Hensing2022-05-021-0/+15
| | | | | (cherry picked from commit ad1e2500efd0aa49b0dc7427bf69d4879f3b0ff5) (cherry picked from commit aec730a0af4c977513ce28236cbecaca72af6901)
* ninja: fix 404'ing patchCole Helbling2020-04-261-2/+1
| | | | | | | | | Kyndig on IRC noticed that building `ninja` from source would fail due to a patch 404'ing (because the repo appears to no longer exist). Fetch from upstream instead. (cherry picked from commit 91d4e9aa97ab19a1364159a7617336aeb6a864f8) cc #85742
* ruby_2_6: 2.6.5 -> 2.6.6Mario Rodas2020-04-012-4/+4
| | | | | Changelog: https://www.ruby-lang.org/en/news/2020/03/31/ruby-2-6-6-released/ (cherry picked from commit b312ecf34e110d2d1fda3601c7b5a5a46a41dbfd)
* ruby_2_5: 2.5.7 -> 2.5.8Mario Rodas2020-04-012-4/+4
| | | | | Changelog: https://www.ruby-lang.org/en/news/2020/03/31/ruby-2-5-8-released/ (cherry picked from commit 99b09d6b8f201379bb34f01a1acacdc1c3950c46)
* mesos: switch to https for mavenorigin/nixpkgs-19.03-darwinorigin/nixos-19.03-smallorigin/nixos-19.03Dmitry Kalinkin2020-02-101-1/+1
| | | | | | Fixes: #78702 Closes: #79260 (cherry picked from commit 157f392f57ddcb3a0c8b7062dc01469c6b43fdce)
* file: fix download url for CVE-2019-18218Dmitry Kalinkin2020-01-261-1/+5
| | | | | | (cherry picked from commit 5c39e8c8adba37e6f18d067d678e879062c6ea49) cc #78479
* Merge branch 'staging-19.03' into release-19.03Vladimír Čunát2020-01-144-2/+34
|\
| * pythonPackages.pyopenssl: fix build, fixes #76879origin/staging-19.03Frederik Rietdijk2020-01-131-0/+22
| | | | | | | | (cherry picked from commit e279676f480c0bce3ea9baea90cf926f07071de1)
| * openssl_1_0_2: 1.0.2t -> 1.0.2u (low-severity security)Vladimír Čunát2020-01-111-2/+2
| | | | | | | | | | | | | | Fixes #77266: CVE-2019-1551 https://www.openssl.org/news/secadv/20191206.txt (cherry picked from commit 961d0cf9f5f5e762eacb1ceda10d45cd35a81662)
| * fribidi: add patch for CVE-2019-18397 (#73718)Robert Scott2019-11-241-0/+5
| | | | | | (adjusted cherry-pick from 55b583d334005cc0e51226f7b73f33ee2aed3938)
| * aspell: add patch for CVE-2019-17544 (#74039)Robert Scott2019-11-241-0/+5
| | | | | | (cherry picked from commit b8920d3dba0e594ab6a8e37fb227af9462fa0590)
* | Merge branch 'revert-add-doc-to-ghc-wrapper' into release-19.03Matthew Bauer2020-01-111-12/+2
|\ \
| * | Revert "add doc to ghc wrapper"Matthew Bauer2020-01-111-12/+2
| | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 93aabab7605c21f5962df2dffa7fee9ac17ba848. This reverts commit e9156086187b09970e5cdb5178450c73ae59ecd6. Based on change in master at d1bd0fbfcc0ee6b0fcaf662cca5ee4ba8932f141 opened in https://github.com/NixOS/nixpkgs/pull/77442
* | | disnix: 0.9 -> 0.9.1Sander van der Burg2020-01-081-3/+3
| | | | | | | | | | | | (cherry picked from commit 3f0fee752d6f5f5d0774cc7d9bcf8491562b453b)
* | | Merge branch 'fix-doc-in-ghc-wrapper' into release-19.03Matthew Bauer2020-01-071-2/+12
|\| |
| * | haskell/with-packages-wrapper.nix: remove /bin symlink if it existsMatthew Bauer2020-01-061-0/+9
| | | | | | | | | | | | | | | The wrapper need a writable directory to work, so remove the symlink to a read-only one if it occurs.
| * | haskell/with-packages-wrapper.nix: install "doc" outputsMatthew Bauer2020-01-021-2/+3
| | | | | | | | | | | | | | | | | | | | | We were previously just installing the "out" output which broke when we recently changed to generating multiple outputs. Fixes #76837
* | | ffmpeg_2_8: 2.8.14 -> 2.8.15zowoq2020-01-041-2/+2
| | | | | | | | | | | | (cherry picked from commit c13f1a508d6128d7cdea247d21015b5df8e44132)
* | | ffmpeg: 3.4.6 -> 3.4.7 (security)Vladimír Čunát2019-12-291-2/+2
| | | | | | | | | | | | | | | | | | | | | Fixes #75964 and #68560 (many CVEs). https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/289a79d545e83a:/Changelog (cherry picked from commit 37e1da287483eac4a62597c73f31708389bfad19)
* | | Merge pull request #73580 from risicle/ris-dpdk-17.11.9-r19.03Niklas Hambüchen2019-12-181-2/+2
|\ \ \ | | | | | | | | [r19.03] dpdk: 17.11.2 -> 17.11.9, addressing CVE-2019-14818
| * | | dpdk: 17.11.2 -> 17.11.9 (security)Robert Scott2019-11-171-2/+2
| | | | | | | | | | | | | | | | addressing CVE-2019-14818
* | | | Merge pull request #75470 from edef1c/git-2.19.3Graham Christensen2019-12-101-2/+2
|\ \ \ \ | | | | | | | | | | git: 2.19.2 -> 2.19.3
| * | | | git: 2.19.2 -> 2.19.3edef2019-12-111-2/+2
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354, CVE-2019-1387 Link: https://lore.kernel.org/git/xmqqr21cqcn9.fsf@gitster-ct.c.googlers.com/
* | | | Merge pull request #74877 from d-goldin/djvulibre_sec_patches_1903Christian Kauhaus2019-12-047-0/+344
|\ \ \ \ | | | | | | | | | | [19.03] djvulibre: patching multiple CVEs
| * | | | [19.03] djvulibre: patching multiple CVEsDima2019-12-037-0/+344
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Addresses: https://github.com/NixOS/nixpkgs/issues/73624 https://github.com/NixOS/nixpkgs/issues/70086 (cherry picked from commit be7e51a083f3cc5560b3683d915248c32b317acc)
* | | | libvncserver: 0.9.11 -> 0.9.12Renaud2019-11-291-19/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (#74514) Vuln roundup #73664 -- r19.03 channel Version bump from 0.9.11 to 0.9.12 fixes: * CVE-2018-6307 * CVE-2018-15126 * CVE-2018-15127 * CVE-2018-20019 * CVE-2018-20020 * CVE-2018-20021 * CVE-2018-20022 * CVE-2018-20023 * CVE-2018-20024 * CVE-2018-20748 * CVE-2018-20749 Plus add two upstream patches to fix: * CVE-2018-20750 * CVE-2019-15681 (cherry picked from commit 3fb4e09812bb17d0d33087dc7c3255eccec2e5fb)
* | | | mosquitto: 1.5.8 -> 1.5.9 (security)Robert Scott2019-11-261-2/+2
| | | | | | | | | | | | | | | | addressing CVE-2019-11779
* | | | tightvnc: add patches for four CVEsRobert Scott2019-11-245-0/+74
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security fixes for: * CVE-2019-8287 * CVE-2019-15678 * CVE-2019-15679 * CVE-2019-15680 mostly adapted from patches fixing similar issues in the actively maintained libvnc (#73970) (cherry picked from commit 2482f8b8dca0f57466d20f9dcf2ff3d5cd16adbf)
* | | | tnef: 1.4.17 -> 1.4.18 (security)Robert Scott2019-11-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Backport of #73882 addresses CVE-2019-18849 (cherry picked from commit b9d458d91c1d39b8b5954c84afc862b044cf84d5)
* | | | Merge pull request #73947 from risicle/ris-slurm-CVE-2019-12838-r19.03markuskowa2019-11-231-1/+16
|\ \ \ \ | | | | | | | | | | [r19.03] slurm: add patch addressing CVE-2019-12838
| * | | | slurm: add patch addressing CVE-2019-12838Robert Scott2019-11-231-1/+16
|/ / / / | | | | | | | | | | | | including a prerequisite patch to allow the actual fix to apply cleanly
* | | | libextractor: add patch for CVE-2019-15531Robert Scott2019-11-221-1/+10
| | | | | | | | | | | | | | | | (#73792) (cherry picked from commit 593def2396e2a88dbf9a26dcc892772b39c773a7)
* | | | Merge pull request #73370 from risicle/ris-samba-CVEs-r19.03Christian Kauhaus2019-11-191-0/+44
|\ \ \ \ | | | | | | | | | | [19.03] samba: add patches for CVE-2019-3880, CVE-2019-10218, CVE-2019-14833 & CVE-2019-14847
| * | | | samba: add patches for CVE-2019-3880, CVE-2019-10218, CVE-2019-14833 & ↵Robert Scott2019-11-151-0/+44
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CVE-2019-14847 using patches from the 4.8 & 4.9 branches, but luckily these all apply and work against 4.7
* | | | | ledger-udev-rules: update to 2019-05-30Matthew Bauer2019-11-181-3/+3
| |/ / / |/| | | | | | | | | | | | | | | | | | | Fixes #71201 (cherry picked from commit ff066a107bbaf17808462d7d986ff43234c66535)
* | | | electrum-dash: mark as vulnerablec0bw3b2019-11-161-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | CVE-2018-1000022 in electrum (cherry picked from commit a50507a6cce1bf49a667de23fb7d3355eedb8f3d)
* | | | Merge #72958: libexif: fix CVE-2018-20030Vladimír Čunát2019-11-161-7/+18
| | | | | | | | | | | | | | | | | | | | (cherry picked from commit 908f6240d89293dbcdc41758ac0b6f2c1a7107e8) Fixes #57153.
* | | | Merge #73253: gdal: patch CVE-2019-17545Vladimír Čunát2019-11-161-0/+9
|\ \ \ \
| * | | | gdal: add patch for CVE-2019-17545Robert Scott2019-11-111-0/+9
| | | | |
* | | | | Merge #72808: ghostscript: security patchesVladimír Čunát2019-11-162-0/+60
|\ \ \ \ \
| * | | | | ghostscript: add patches for CVE-2019-10216, CVE-2019-14811, CVE-2019-14812, ↵Robert Scott2019-11-042-0/+50
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CVE-2019-14813 and some of CVE-2019-14817 as with master, not all of the CVE-2019-14817 patch applies cleanly, but the parts that do should provide some protection (cherry picked from commit bd3f644a9067e3c70e296cca8a4cdbb8b6bbc2f5)
| * | | | | ghostscript: add patches for CVE-2019-3839Robert Scott2019-11-041-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | (cherry picked from commit f55969bbb365f63d4608876a4dc3522712d4c737)
* | | | | | flashplayer: 32.0.0.270 -> 32.0.0.293Herwig Hochleitner2019-11-163-10/+10
| |_|/ / / |/| | | | | | | | | | | | | | (cherry picked from commit 8c997725a288f140703b3fbb836e70acf58557e3)
* | | | | opencv4: add patches for CVE-2019-14491, CVE-2019-14492, CVE-2019-14493 & ↵Robert Scott2019-11-131-1/+19
| | | | | | | | | | | | | | | | | | | | | | | | | CVE-2019-15939 (#73073)
* | | | | Merge branch 'staging-19.03' into release-19.03Vladimír Čunát2019-11-122-1/+14
|\ \ \ \ \ | |_|/ / / |/| | | / | | |_|/ | |/| |
| * | | libtiff: Patch CVE-2019-7663 (PR #72092)Daniel Schaefer2019-11-091-0/+5
| | | | | | | | | | | | | | | | | | | | (cherry picked from commit 5270c3a03ee5657551f16b31da057dda81c8b0f9) /cc #57158.
| * | | Merge pull request #72798 from risicle/ris-file-CVE-2019-18218-r19.03Florian Klink2019-11-041-1/+9
| |\ \ \ | | |/ / | |/| | [r19.03] file: add patch for CVE-2019-18218
| | * | file: add patch for CVE-2019-18218Robert Scott2019-11-041-1/+9
| |/ / | | | | | | | | | | | | | | | | | | | | | upstream patch https://github.com/file/file/commit/46a8443f76cec4b41ec736eca396984c74664f84.patch doesn't apply directly, debian have a version which has been adapted for 5.37. (cherry picked from commit 99273fc55533db11748750f5337f0791e8233cee)
* | | bundler: 1.17.2 -> 1.17.3talyz2019-11-111-2/+2
| | | | | | | | | | | | | | | | | | Extracted from https://github.com/NixOS/nixpkgs/pull/70216. (cherry picked from commit 96a1dbac972c4f67aea7ee548f4e5531003f8ab0)
* | | facetimehd-firmware: 1.43_4 -> 1.43_5Jaka Hudoklin2019-11-101-5/+5
| | | | | | | | | | | | | | | | | | (cherry picked from commit c115659884612bce7d98ca57948e1258cb4370b6) cc #72804
generated by cgit v1.2.3 (git 2.52.0) at 2026-08-20 01:15:21 +0000