Commit Graph

40742 Commits

Author SHA1 Message Date
Sandro 503638304e
Merge pull request #125526 from wizeman/u/fix-libraspberrypi-url-backport
[21.05] libraspberrypi: fix URL
2021-06-04 17:18:22 +02:00
Martin Weinelt 715c85757b polkit: Fix local privilege escalation vulnerability
Fixes a local privilege escalation using polkit_system_bus_name_get_creds_sync()

Fixes: CVE-2021-3560
(cherry picked from commit 26ac1d5db953292d78f0585dd8baccd9a36a44a4)
2021-06-04 00:36:44 +00:00
Ricardo M. Correia 3b96c770a8 libraspberrypi: fix URL
(cherry picked from commit 3915d2fd27e2d8a62cff752bd1e4146317c76f31)
2021-06-03 18:08:13 +02:00
Martin Weinelt bdf95a994e
lasso: Fix signature verification in AuthnResponse messages
Fixes: CVE-2021-28091
2021-06-02 16:49:11 +02:00
Ben Wolsieffer 8c6a3a60e5 libccd: fix pkgconfig file paths
libccd has the common bug of assuming CMAKE_INSTALL_*DIR is relative. I have
submitted the fix upstream, but don't have much hope of getting it merged
because there have been no updates since 2018.

(cherry picked from commit 3d2092ab58fe83e89a3162728e9d4b733295b561)
2021-06-01 16:06:26 +00:00
Jonathan Ringer 7b601ada77
Merge remote-tracking branch 'origin/release-21.05' into staging-next-21.05 2021-05-31 12:44:56 -07:00
Robert Schütz 6cac8dd5d9 libxlsxwriter: 1.0.5 -> 1.0.6
https://github.com/jmcnamara/libxlsxwriter/releases/tag/RELEASE_1.0.6
(cherry picked from commit 5d873fde2352061fa487e7c4b73c0d1f840c77c2)
2021-05-31 10:15:28 +00:00
SCOTT-HAMILTON 91efaf3393 libiio: fix build with wrong libxml2 find_package
Co-authored-by: Dmitry Kalinkin <dmitry.kalinkin@gmail.com>
(cherry picked from commit 660c4a822c1631016060ab3420ae467dabaa508e)
2021-05-31 02:40:27 -04:00
Dmitry Kalinkin b0e7f01080 arrow-cpp: 4.0.0 -> 4.0.1
(cherry picked from commit cff04883e8c21fe614dad85a96b3da93909eb8c8)
2021-05-31 00:02:29 +00:00
Robert Scott bae3f3be2a
Merge pull request #124928 from NixOS/backport-124713-to-release-21.05
[Backport release-21.05] getdata: add security patch from Debian
2021-05-30 12:46:21 +01:00
Simon Bruder bad208a3e6 vapoursynth: improve plugin dependency resolution
Some python packages (e.g. functools32) are conditionally disabled for
certain interpreter versions by having them return null instead of a
derivation. `getRecursivePropagatedBuildInputs` fails if such a package
is part of the dependency tree. This commit makes it only recurse into
derivations and ignore everything else.

This also deduplicates the final plugin list to improve startup time.

(cherry picked from commit 9b3a2e66b141733fe7cb5372f64d30b66445cccd)
2021-05-30 08:26:24 +00:00
Sandro 4330bdd244 Update pkgs/development/libraries/getdata/default.nix
(cherry picked from commit 1b77912d10ba5a5e8ddf7853f00ac3cb841d59bf)
2021-05-30 02:08:03 +00:00
Vincent Laporte 81c84a9194 getdata: add security patch from Debian
(cherry picked from commit 14bb4b8f9aed4b1e04c0edab0851c31144ccd7e3)
2021-05-30 02:08:03 +00:00
Dmitry Kalinkin 7198e20169 webkitgtk: fix on darwin
(cherry picked from commit 61e49ba58b487b49832028a1829f50fd2abcab06)
2021-05-29 18:39:16 -04:00
Markus Kowalewski 58ba40336c mpich: 3.4.1 -> 3.4.2
(cherry picked from commit 0853275727138c6bb9ade80aa8d2e0f298044f47)
2021-05-29 20:17:55 +00:00
Zhaofeng Li a5cbb1a436 nv-codec-headers-10: init at 10.0.26.2
(cherry picked from commit 13f114593bb7796010fccaffbdb0686852a1de27)
2021-05-28 21:39:53 -04:00
Dmitry Kalinkin 46a5d32fc9
qhull: add fixDarwinDylibNames
(cherry picked from commit e34b55910991a52b432f97cddfb2e8a2b4b13f97)
cc #124578
2021-05-27 16:55:02 -04:00
Trolli Schmittlauch 611cedc127 poppler: build with nss by default for signature support
Since 21.01, poppler supports PDF signing. As applications like okular
start to make use of that feature, nss support for poppler is enabled by
default to avoid unnecessary package duplication.
When building a `minimal` version of poppler, nss is disabled as well.

closes #120928

(cherry picked from commit 5f9862d524ee0ec1edcaa450fff4f54f4f5cc68e)
2021-05-27 03:48:21 -04:00
Jonathan Ringer 7e49e3ea89
Merge remote-tracking branch 'origin/release-21.05' into staging-next-21.05 2021-05-25 00:02:45 -07:00
Jan Tojnar 1b1608a7b8 libxml2: Work around lxml API misuse
(cherry picked from commit 7099f24c4a1788e074c4851d68fc7d56d7c8e3a7)
2021-05-24 23:56:08 -07:00
Jonathan Ringer befda3568c exempi: disable tests for i686
Unable to find boost unittest framework.

Tests are still ran on the x86_64 platform

(cherry picked from commit 266f6ee63a562016b28d9a155fc4d84006d746d0)
2021-05-24 23:53:37 -07:00
Jörg Thalheim ee76949241
spdk: 20.04.1 -> 21.04
(cherry picked from commit 00a7a0f609352bd077b6c4d5dab88bddb70458fc)
2021-05-24 09:18:27 +02:00
Atemu 036b557bd9 libndctl: build docs with asciidoc instead of asciidoctor
Removes dependency on ruby 2.7 and isn't much slower

(cherry picked from commit 786579c0b8ee5311af04feb036d04b78efd4b5b2)
2021-05-23 22:04:25 +02:00
Robert Scott 0548d93697
Merge pull request #124145 from dotlambda/igraph-arpack-darwin-blas-paths
[21.05] igraph,arpack: correct libblas.dylib's path on darwin, fixing python3Packages.python-igraph
2021-05-23 16:02:09 +01:00
Robert Scott b7e6b86c74 igraph: fix libblas.dylib's path on darwin
(cherry picked from commit 73df171f26f426d1e2201e04ad0a7fa556eca17b)
2021-05-23 13:52:32 +02:00
Robert Scott 6514fc8f6b arpack: fix libblas.dylib's path on darwin
(cherry picked from commit 1241d9fae3451b824506277174b6053a379f4db7)
2021-05-23 13:52:32 +02:00
Florian Klink 075ab49dc2 qtwebengine: only set -webengine-webrtc-pipewire with qt >= 5.15
This fails the build of qt514.qtwebengine otherwise:

```
QMAKEPATH=/nix/store/29n056mi3pji6si51b128pa67b1qr7wq-qtbase-5.14.2-dev:/nix/store/g7wady1f1r23wlmy4q1f3b8j2fj5q2sq-qtdeclarative-dev:/nix/store/xfqnh2pma99915d4gsanls68z1jikcpx-qtsvg-dev:/nix/store/zlnsjdj5yv1ivi1miq49j9gp382byl35-qtlocation-dev:/nix/store/lb7cidi60cabpa7swv51xnss9045vqzi-qtmultimedia-dev:/nix/store/jrk6bcqihxwsszwy6rwy2vnfc2sb4rv9-qtwebchannel-dev
qmake PREFIX=/nix/store/pa3jhipp59f6ykh9k8l8z8jf88k52bz8-qtwebengine NIX_OUTPUT_OUT=/nix/store/pa3jhipp59f6ykh9k8l8z8jf88k52bz8-qtwebengine NIX_OUTPUT_DEV=/nix/store/jngs3qilw9iiv97rawb9sb9sd6qdbp2s-qtwebengine-dev NIX_OUTPUT_BIN=/nix/store/91hqv88qvg2wb91lv1h1pd4d8wwrkd5d-qtwebengine-bin NIX_OUTPUT_DOC=/nix/store/jngs3qilw9iiv97rawb9sb9sd6qdbp2s-qtwebengine-dev/share/doc/qt-5.14.2 NIX_OUTPUT_QML=/nix/store/91hqv88qvg2wb91lv1h1pd4d8wwrkd5d-qtwebengine-bin/lib/qt-5.14.2/qml NIX_OUTPUT_PLUGIN=/nix/store/91hqv88qvg2wb91lv1h1pd4d8wwrkd5d-qtwebengine-bin/lib/qt-5.14.2/plugins CONFIG+=release -- -system-ffmpeg -webengine-webrtc-pipewire -proprietary-codecs
Info: creating stash file /build/qtwebengine-everywhere-src-5.14.2/.qmake.stash
Info: creating cache file /build/qtwebengine-everywhere-src-5.14.2/.qmake.cache
ERROR: Unknown command line option '-webengine-webrtc-pipewire'.
builder for '/nix/store/g6dvr7789sswmahlxc6zs5pr8k2g5pgy-qtwebengine.drv' failed with exit code 3
```

Also, only bring in pipewire_0_2 if we enable pipewire support.

(cherry picked from commit 4cbb20402a88abee9a68b53a8786df5af87b4101)
2021-05-23 12:37:07 +02:00
Jonathan Ringer d9de79194a
Merge pull request #123279 from NixOS/staging-next
Staging next
2021-05-22 18:46:35 -07:00
Mario Rodas c9fd31e591
Merge pull request #123988 from r-ryantm/auto-update/actor-framework
caf: 0.18.1 -> 0.18.3
2021-05-22 20:40:41 -05:00
Jonathan Ringer 11a9ac00fc
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
 pkgs/tools/networking/xh/default.nix
2021-05-22 18:19:10 -07:00
Sandro 900115a4f7
Merge pull request #124038 from r-ryantm/auto-update/glibmm
glibmm_2_68: 2.68.0 -> 2.68.1
2021-05-23 02:05:53 +02:00
R. RyanTM bd441a1339 liblinphone: 4.5.15 -> 4.5.17 2021-05-22 16:37:13 -07:00
Gabriel Ebner fc9a86afb0
Merge pull request #124030 from gebner/abseil202103241
abseil-cpp: 20200923.3 -> 20210324.1
2021-05-22 19:18:03 +02:00
R. RyanTM c6bf23a12e glibmm_2_68: 2.68.0 -> 2.68.1 2021-05-22 15:30:04 +00:00
Gabriel Ebner a6d48f9c2a or-tools: 8.1 -> 9.0 2021-05-22 16:57:32 +02:00
Gabriel Ebner fc4f549d39 abseil-cpp: 20200923.3 -> 20210324.1 2021-05-22 16:57:32 +02:00
R. RyanTM 31aab8c980 cairomm_1_16: 1.16.0 -> 1.16.1 2021-05-22 16:56:55 +02:00
Tal Walter 4509181d6c
cereal: add patch for CVE-2020-11105 (#121574)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-05-22 15:21:54 +02:00
github-actions[bot] 563389a7fd
Merge master into staging-next 2021-05-22 12:27:09 +00:00
sohalt be01cb8b97 nixos/spacenavd: run as user service 2021-05-22 12:48:12 +02:00
R. RyanTM 15af55ebe3 caf: 0.18.1 -> 0.18.3 2021-05-22 07:53:59 +00:00
Jonathan Ringer 7507aed4e1
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
 pkgs/development/tools/rust/cargo-expand/default.nix
 pkgs/tools/misc/blflash/default.nix
2021-05-21 19:49:05 -07:00
Mario Rodas 6bf9e13e82
Merge pull request #123855 from marsam/update-grpc
grpc: 1.37.1 -> 1.38.0
2021-05-21 20:53:20 -05:00
github-actions[bot] 901fb5e64e
Merge master into staging-next 2021-05-22 00:56:03 +00:00
Michael Weiss 9452353abf intel-media-driver: 21.2.0 -> 21.2.1 2021-05-21 16:34:48 -07:00
Ben Wolsieffer cd49262ab2 octomap: 1.9.6 -> 1.9.7 2021-05-21 16:29:30 -07:00
Robert Schütz da4a86ac3d
Merge pull request #123366 from dotlambda/linphone-ffmpeg
linphone: use ffmpeg instead of ffmpeg_3
2021-05-21 20:44:36 +02:00
github-actions[bot] 5efa447c88
Merge master into staging-next 2021-05-21 18:39:29 +00:00
Robert Schütz b65a64086f
libsForQt5.applet-window-buttons: 0.8.1 -> 0.9.0 (#122611)
https://github.com/psifidotos/applet-window-buttons/releases/tag/0.9.0
2021-05-21 20:36:38 +02:00
Vladimír Čunát acb7a605e2
poppler: drop patches already contained in src 2021-05-21 09:09:20 +02:00