-
-
Notifications
You must be signed in to change notification settings - Fork 104
Comparing changes
Open a pull request
base repository: NixOS/nixpkgs-channels
base: 19a0543c6284
head repository: NixOS/nixpkgs-channels
compare: 48b4e1c6bf2d
Commits on Jan 30, 2019
-
(cherry picked from commit 776c962)
Configuration menu - View commit details
-
Copy full SHA for fc0c9a2 - Browse repository at this point
Copy the full SHA fc0c9a2View commit details -
qt59.qtvirtualkeyboard: fix CVE-2018-19865
CVE-2018-19865 tracks the issue of qtvirtualkeyboard where it logs all user input. With this commit we are applying the recommended patches form the upstream project. More details can be obtained from the Qt annoucement [1]. [1] https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ (cherry picked from commit 6660128)
Configuration menu - View commit details
-
Copy full SHA for 0d6c4a8 - Browse repository at this point
Copy the full SHA 0d6c4a8View commit details
Commits on Feb 2, 2019
-
qt56.qtvirtualkeyboard: init at 5.6.3
This adds the "missing" qtvirtualkeyboard module of qt56. I just add this so I can apply (& test) the patches for a CVE in the next commit. This might seem strange but in case anyone decided to add / use this in the future we are on the safe(r) side. (cherry picked from commit 295a210)
Configuration menu - View commit details
-
Copy full SHA for a3c82b9 - Browse repository at this point
Copy the full SHA a3c82b9View commit details -
qt56: fix CVE-2018-{15518,19873,19870,19871,19865,19869}
* CVE-2018-15518, Qt Base: “double free or corruption” in QXmlStreamReader * CVE-2018-19873, Qt Base: QBmpHandler segfault on malformed BMP file * CVE-2018-19870, Qt Base: Check for QImage allocation failure in qgifhandler * CVE-2018-19871, Qt Imageformats: QImage: QTgaFile CPU exhaustion * CVE-2018-19865, Qt Virtual Keyboard: Qt Virtual Keyboard logs all key presses * CVE-2018-19869, Qt Svg: Fix crash when parsing malformed url reference More details can be obtained from the Qt annoucement [1]. [1] https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ (cherry picked from commit 066be85)
Configuration menu - View commit details
-
Copy full SHA for 0948f87 - Browse repository at this point
Copy the full SHA 0948f87View commit details -
This fixes * CVE-2018-15518, Qt Base: “double free or corruption” in QXmlStreamReader * CVE-2018-19873, Qt Base: QBmpHandler segfault on malformed BMP file * CVE-2018-19870, Qt Base: Check for QImage allocation failure in qgifhandler * CVE-2018-19871, Qt Imageformats: QImage: QTgaFile CPU exhaustion * CVE-2018-19865, Qt Virtual Keyboard: Qt Virtual Keyboard logs all key presses * CVE-2018-19869, Qt Svg: Fix crash when parsing malformed url reference More details can be obtained from the Qt annoucement [1]. [1] https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ (cherry picked from commit 2f5d37b)
Configuration menu - View commit details
-
Copy full SHA for 89049f3 - Browse repository at this point
Copy the full SHA 89049f3View commit details -
Configuration menu - View commit details
-
Copy full SHA for 1e2c3be - Browse repository at this point
Copy the full SHA 1e2c3beView commit details
Commits on Feb 16, 2019
-
qt511: add patch for macOS sdk
Unfortunately we don’t have access to NSWindowStyleMask. These patches should go away once we switch to a newer SDK. (cherry picked from commit 8153104)
Configuration menu - View commit details
-
Copy full SHA for 82434e7 - Browse repository at this point
Copy the full SHA 82434e7View commit details -
CVE-2018-0734: https://www.openssl.org/news/vulnerabilities.html#2018-0734 CVE-2018-5407: https://www.openssl.org/news/vulnerabilities.html#2018-5407 No patches can any longer be shared between 1.0.2 and 1.1, so reorganize patches into subdirectories (and remove an unused one). (cherry picked from commit ae29a9e)
Configuration menu - View commit details
-
Copy full SHA for 9c75f20 - Browse repository at this point
Copy the full SHA 9c75f20View commit details -
Configuration menu - View commit details
-
Copy full SHA for d7225e0 - Browse repository at this point
Copy the full SHA d7225e0View commit details -
Configuration menu - View commit details
-
Copy full SHA for fe00e77 - Browse repository at this point
Copy the full SHA fe00e77View commit details -
Configuration menu - View commit details
-
Copy full SHA for af6b20c - Browse repository at this point
Copy the full SHA af6b20cView commit details
Commits on Feb 17, 2019
-
Merge branch 'staging-18.09' into release-18.09
Security updates for qt5* and openssl. We can't afford to wait for darwin rebuild - it would take far too long.
Configuration menu - View commit details
-
Copy full SHA for f4ddc31 - Browse repository at this point
Copy the full SHA f4ddc31View commit details -
unzip: patch CVE-2018-18384 (PR #55927)
Patch from https://sourceforge.net/p/infozip/bugs/53/ (cherry picked from commit 705167a)
Configuration menu - View commit details
-
Copy full SHA for 8d226d8 - Browse repository at this point
Copy the full SHA 8d226d8View commit details -
adoptopenjdk: pick expression structure from master
They seem to be uninteresting changes just hindering backports of version bumps.
Configuration menu - View commit details
-
Copy full SHA for a332973 - Browse repository at this point
Copy the full SHA a332973View commit details -
Merge #54576: adoptopenjdk-bin: 11.0.1 -> 11.0.2
Includes security fixes. (cherry picked from commit 94b518f)
Configuration menu - View commit details
-
Copy full SHA for ef02c63 - Browse repository at this point
Copy the full SHA ef02c63View commit details -
Configuration menu - View commit details
-
Copy full SHA for 347bccc - Browse repository at this point
Copy the full SHA 347bcccView commit details -
Merge pull request #55949 from eadwu/backports/20190217
[18.09] vscode backports - 2019-02-17
Configuration menu - View commit details
-
Copy full SHA for ea08208 - Browse repository at this point
Copy the full SHA ea08208View commit details
Commits on Feb 18, 2019
-
Configuration menu - View commit details
-
Copy full SHA for fd65170 - Browse repository at this point
Copy the full SHA fd65170View commit details
Commits on Feb 19, 2019
-
postgresql: Don't move libs unnecessarily out of $lib.
In particular, when static linking pkgconfig expects libpq.a in $lib (cherry picked from commit bb52ff3)
Configuration menu - View commit details
-
Copy full SHA for c007ecf - Browse repository at this point
Copy the full SHA c007ecfView commit details -
chromium: 72.0.3626.96 -> 72.0.3626.109
(cherry picked from commit c414e5b)
Configuration menu - View commit details
-
Copy full SHA for 7e5b599 - Browse repository at this point
Copy the full SHA 7e5b599View commit details -
Configuration menu - View commit details
-
Copy full SHA for 28f9452 - Browse repository at this point
Copy the full SHA 28f9452View commit details -
systemd: 239.20190110 -> 239.20190219
Fix CVE-2019-6454. (cherry picked from commit e949145)
Configuration menu - View commit details
-
Copy full SHA for 90f99f4 - Browse repository at this point
Copy the full SHA 90f99f4View commit details -
gitlab-workhorse: 8.0.1 -> 8.0.2
(cherry picked from commit 75f66b1)
Configuration menu - View commit details
-
Copy full SHA for ba65001 - Browse repository at this point
Copy the full SHA ba65001View commit details -
(cherry picked from commit 7f6351a)
Configuration menu - View commit details
-
Copy full SHA for 5db0361 - Browse repository at this point
Copy the full SHA 5db0361View commit details -
(cherry picked from commit f4a7c16)
Configuration menu - View commit details
-
Copy full SHA for 185ab27 - Browse repository at this point
Copy the full SHA 185ab27View commit details
Commits on Feb 20, 2019
-
autojump: creates links required by oh-my-zsh for autojump.
The autojump plugin in oh-my-zsh assumes autojump.zsh resides in /run/current-system/sw/share/autojump/ but these links are not created by default. The new programs.autojump.enable option forces the creation of these links. (cherry picked from commit 0d749e5) Signed-off-by: Domen Kožar <domen@dev.si>
Configuration menu - View commit details
-
Copy full SHA for 1e9c144 - Browse repository at this point
Copy the full SHA 1e9c144View commit details -
autodump: pulling package when programs.autojump.enable is true
(cherry picked from commit 0bca738) Signed-off-by: Domen Kožar <domen@dev.si>
Configuration menu - View commit details
-
Copy full SHA for 8e4e54b - Browse repository at this point
Copy the full SHA 8e4e54bView commit details -
autojump: autoload when programs.autojump.enable is set.
(cherry picked from commit cd8ffef) Signed-off-by: Domen Kožar <domen@dev.si>
Configuration menu - View commit details
-
Copy full SHA for 3cd9396 - Browse repository at this point
Copy the full SHA 3cd9396View commit details -
openscad: enableParallelBuilding = false;
Discussion: NixOS/nixpkgs@c68dc2212e22 (cherry picked from commit 28d983f)
Configuration menu - View commit details
-
Copy full SHA for 4277563 - Browse repository at this point
Copy the full SHA 4277563View commit details -
Configuration menu - View commit details
-
Copy full SHA for 0dcd0ff - Browse repository at this point
Copy the full SHA 0dcd0ffView commit details -
Configuration menu - View commit details
-
Copy full SHA for a17011c - Browse repository at this point
Copy the full SHA a17011cView commit details -
Configuration menu - View commit details
-
Copy full SHA for 7536ce9 - Browse repository at this point
Copy the full SHA 7536ce9View commit details -
Configuration menu - View commit details
-
Copy full SHA for 63a0988 - Browse repository at this point
Copy the full SHA 63a0988View commit details
Commits on Feb 21, 2019
-
elasticsearch: Add zlib to buildInputs for unfree
The unfree variant of elasticsearch uses autoPatchelfHook and since we removed the dependency on file for the hook itself in 58a97df we no longer have zlib propagated. So we need to explicitly state that dependency here. Signed-off-by: aszlig <aszlig@nix.build> Cc: @apeschar, @basvandijk (cherry picked from commit 8df68a9)
Configuration menu - View commit details
-
Copy full SHA for b36e287 - Browse repository at this point
Copy the full SHA b36e287View commit details -
Merge branch 'staging-18.09' into release-18.09
Just a systemd security patch.
Configuration menu - View commit details
-
Copy full SHA for 1b621b8 - Browse repository at this point
Copy the full SHA 1b621b8View commit details -
Merge pull request #56127 from thefloweringash/fix-es6
[18.09] elasticsearch: Add zlib to buildInputs for unfree
Configuration menu - View commit details
-
Copy full SHA for 3276e04 - Browse repository at this point
Copy the full SHA 3276e04View commit details
Commits on Feb 22, 2019
-
Configuration menu - View commit details
-
Copy full SHA for 23453d2 - Browse repository at this point
Copy the full SHA 23453d2View commit details
Commits on Feb 23, 2019
-
wire-desktop: 3.2.2840 -> 3.3.2872 (#47941)
(cherry picked from commit fa3ec9c)
Configuration menu - View commit details
-
Copy full SHA for 69f7e37 - Browse repository at this point
Copy the full SHA 69f7e37View commit details -
wire-desktop: don't explicitly set phases
part of #28910 (cherry picked from commit 48a3ea0)
Configuration menu - View commit details
-
Copy full SHA for 41b31cd - Browse repository at this point
Copy the full SHA 41b31cdView commit details -
wire-desktop: 3.3.2872 -> 3.5.2881
(cherry picked from commit 7475db0)
Configuration menu - View commit details
-
Copy full SHA for 5432f7f - Browse repository at this point
Copy the full SHA 5432f7fView commit details -
wire-desktop: 3.5.2881 -> 3.6.2885
(cherry picked from commit 8ba66c2)
Configuration menu - View commit details
-
Copy full SHA for 8ee1cdd - Browse repository at this point
Copy the full SHA 8ee1cddView commit details -
nixos/home-assistant: use availableComponents of configured package
fixes #55958 (cherry picked from commit e211f55)
Robert Schütz committedFeb 23, 2019 Configuration menu - View commit details
-
Copy full SHA for 753f58d - Browse repository at this point
Copy the full SHA 753f58dView commit details -
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/nextcloud/versions (cherry picked from commit a45b203)
Configuration menu - View commit details
-
Copy full SHA for af75060 - Browse repository at this point
Copy the full SHA af75060View commit details -
Merge pull request #56242 from Lassulus/18.09-nextcloud
[18.09] nextcloud: 15.0.2 -> 15.0.4
Configuration menu - View commit details
-
Copy full SHA for 48b4e1c - Browse repository at this point
Copy the full SHA 48b4e1cView commit details
There are no files selected for viewing