Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Gettext security update 18.09 #58999

Closed
wants to merge 2,403 commits into from
Closed

Gettext security update 18.09 #58999

wants to merge 2,403 commits into from

Conversation

ctheune
Copy link
Contributor

@ctheune ctheune commented Apr 5, 2019

Motivation for this change
Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
  • Built on platform(s)
    • NixOS
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Assured whether relevant documentation is up to date
  • Fits CONTRIBUTING.md.

vcunat and others added 30 commits February 17, 2019 09:59
@vcunat
Merge NixOS#54576: adoptopenjdk-bin: 11.0.1 -> 11.0.2
ef02c63 
Includes security fixes.

(cherry picked from commit 94b518f)
@eadwu
vscode: 1.31.0 -> 1.31.1
347bccc 
(cherry picked from commit 8d5bce4)
@worldofpeace
Merge pull request NixOS#55949 from eadwu/backports/20190217
ea08208 
[18.09] vscode backports - 2019-02-17
@vcunat
Merge branch 'release-18.09' into staging-18.09
fd65170
@shlevy
postgresql: Don't move libs unnecessarily out of $lib.
c007ecf 
In particular, when static linking pkgconfig expects libpq.a in $lib

(cherry picked from commit bb52ff3)
@bendlas
chromium: 72.0.3626.96 -> 72.0.3626.109
7e5b599 
(cherry picked from commit c414e5b)
@vcunat
Merge branch 'staging-18.09' into release-18.09
28f9452 
unzip CVE fix.
@fpletz
systemd: 239.20190110 -> 239.20190219
90f99f4 
Fix CVE-2019-6454.

(cherry picked from commit e949145)
@flokli @fpletz
gitlab-workhorse: 8.0.1 -> 8.0.2
ba65001 
(cherry picked from commit 75f66b1)
@flokli @fpletz
gitlab: 11.7.4 -> 11.7.5
5db0361 
(cherry picked from commit 7f6351a)
@flokli @fpletz
gitlab-ee: 11.7.4 -> 11.7.5
185ab27 
(cherry picked from commit f4a7c16)
@bfortz @domenkozar
autojump: creates links required by oh-my-zsh for autojump.
1e9c144 
The autojump plugin in oh-my-zsh assumes autojump.zsh resides in
/run/current-system/sw/share/autojump/ but these links are not created
by default.

The new programs.autojump.enable option forces the creation of these
links.

(cherry picked from commit 0d749e5)
Signed-off-by: Domen Kožar <domen@dev.si>
@bfortz @domenkozar
autodump: pulling package when programs.autojump.enable is true
8e4e54b 
(cherry picked from commit 0bca738)
Signed-off-by: Domen Kožar <domen@dev.si>
@bfortz @domenkozar
autojump: autoload when programs.autojump.enable is set.
3cd9396 
(cherry picked from commit cd8ffef)
Signed-off-by: Domen Kožar <domen@dev.si>
@vcunat
openscad: enableParallelBuilding = false;
4277563 
Discussion: NixOS@c68dc2212e22
(cherry picked from commit 28d983f)
@NeQuissimus
linux: 4.4.174 -> 4.4.175
0dcd0ff 
(cherry picked from commit 9deab03)
@NeQuissimus
linux: 4.9.158 -> 4.9.159
a17011c 
(cherry picked from commit 85733d1)
@NeQuissimus
linux: 4.14.101 -> 4.14.102
7536ce9 
(cherry picked from commit 70643f0)
@NeQuissimus
linux: 4.19.23 -> 4.19.24
63a0988 
(cherry picked from commit a1cf586)
@aszlig @thefloweringash
elasticsearch: Add zlib to buildInputs for unfree
b36e287 
The unfree variant of elasticsearch uses autoPatchelfHook and since we
removed the dependency on file for the hook itself in
58a97df we no longer have zlib
propagated.

So we need to explicitly state that dependency here.

Signed-off-by: aszlig <aszlig@nix.build>
Cc: @apeschar, @basvandijk
(cherry picked from commit 8df68a9)
@vcunat
Merge branch 'staging-18.09' into release-18.09
1b621b8 
Just a systemd security patch.
@worldofpeace
Merge pull request NixOS#56127 from thefloweringash/fix-es6
3276e04 
[18.09] elasticsearch: Add zlib to buildInputs for unfree
@vcunat
busybox: patch CVE-2018-20679
23453d2 
Fixes NixOS#54798.
@worldofpeace
wire-desktop: 3.2.2840 -> 3.3.2872 (NixOS#47941)
69f7e37 
(cherry picked from commit fa3ec9c)
@worldofpeace
wire-desktop: don't explicitly set phases
41b31cd 
part of NixOS#28910

(cherry picked from commit 48a3ea0)
@jollheef @worldofpeace
wire-desktop: 3.3.2872 -> 3.5.2881
5432f7f 
(cherry picked from commit 7475db0)
@worldofpeace
wire-desktop: 3.5.2881 -> 3.6.2885
8ee1cdd 
(cherry picked from commit 8ba66c2)
nixos/home-assistant: use availableComponents of configured package
753f58d 
fixes NixOS#55958

(cherry picked from commit e211f55)
@r-ryantm @Lassulus
nextcloud: 15.0.2 -> 15.0.4
af75060 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/nextcloud/versions

(cherry picked from commit a45b203)
@flokli
Merge pull request NixOS#56242 from Lassulus/18.09-nextcloud
48b4e1c 
[18.09] nextcloud: 15.0.2 -> 15.0.4
@ctheune
Copy link
Contributor Author

ctheune commented Apr 5, 2019

damn. did the wrong thing here. sorry.

@ctheune ctheune closed this Apr 5, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@alyssais alyssais Awaiting requested review from alyssais alyssais is a code owner

@basvandijk basvandijk Awaiting requested review from basvandijk

@edolstra edolstra Awaiting requested review from edolstra

@edwtjo edwtjo Awaiting requested review from edwtjo edwtjo is a code owner

@Ericson2314 Ericson2314 Awaiting requested review from Ericson2314 Ericson2314 is a code owner

@FRidh FRidh Awaiting requested review from FRidh FRidh is a code owner

@infinisil infinisil Awaiting requested review from infinisil infinisil is a code owner

@LnL7 LnL7 Awaiting requested review from LnL7

@matthewbauer matthewbauer Awaiting requested review from matthewbauer

@Mic92 Mic92 Awaiting requested review from Mic92 Mic92 is a code owner

@nbp nbp Awaiting requested review from nbp

@peti peti Awaiting requested review from peti peti is a code owner

@Profpatsch Profpatsch Awaiting requested review from Profpatsch Profpatsch is a code owner

@thoughtpolice thoughtpolice Awaiting requested review from thoughtpolice thoughtpolice is a code owner

@ttuegel ttuegel Awaiting requested review from ttuegel ttuegel is a code owner

@zimbatm zimbatm Awaiting requested review from zimbatm

Assignees
No one assigned
Labels
2.status: merge conflict 6.topic: emacs 6.topic: erlang 6.topic: fetch 6.topic: GNOME GNOME desktop environment and its underlying platform 6.topic: golang 6.topic: haskell 6.topic: nixos 6.topic: pantheon The Pantheon desktop environment 6.topic: policy discussion 6.topic: printing 6.topic: python 6.topic: qt/kde 6.topic: ruby 6.topic: rust 6.topic: stdenv Standard environment 6.topic: steam 6.topic: vim 6.topic: xfce The Xfce Desktop Environment 8.has: changelog 8.has: documentation 8.has: module (update)
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet