summary refs log tree commit diff
path: root/pkgs/tools
Commit message (Collapse)AuthorAge
* Merge remote-tracking branch 'nixpkgs/master' into masterAlyssa Ross2019-12-15
|\
| * Merge pull request #75698 from scaredmushroom/aircrack-ng_masterFranz Pletz2019-12-15
| |\ | | | | | | aircrack-ng: fixed missing dependency for airmon-ng
| | * aircrack-ng: fixed missing dependency for airmon-ngcap2019-12-15
| | |
| * | Merge pull request #75722 from flokli/xilinx-bootgenFlorian Klink2019-12-15
| |\ \ | | | | | | | | xilinx-bootgen: init at 2019-10-23
| | * | xilinx-bootgen: init at unstable-2019-10-23Florian Klink2019-12-15
| | |/
| * | Merge pull request #75723 from andir/advancecompMichael Raskin2019-12-15
| |\ \ | | | | | | | | advancecomp: fix CVE-2019-9210
| | * | advancecomp: fix CVE-2019-9210Andreas Rammhold2019-12-15
| | | |
| * | | Merge pull request #75715 from andir/ansibleFranz Pletz2019-12-15
| |\ \ \ | | | | | | | | | | ansible fixes for CVE-2019-10156 CVE-2019-10206 CVE-2019-14846 CVE-2019-14856 CVE-2019-14858 CVE-2019-14864
| | * | | ansible_2_6: 2.6.17 -> 2.6.20Andreas Rammhold2019-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This addresses the following security issues: * CVE-2019-14846 - Several Ansible plugins could disclose aws credentials in log files. inventory/aws_ec2.py, inventory/aws_rds.py, lookup/aws_account_attribute.py, and lookup/aws_secret.py, lookup/aws_ssm.py use the boto3 library from the Ansible process. The boto3 library logs credentials at log level DEBUG. If Ansible's logging was enabled (by setting LOG_PATH to a value) Ansible would set the global log level to DEBUG. This was inherited by boto and would then log boto credentials to the file specified by LOG_PATH. This did not affect aws ansible modules as those are executed in a separate process. This has been fixed by switching to log level INFO * Convert CLI provided passwords to text initially, to prevent unsafe context being lost when converting from bytes->text during post processing of PlayContext. This prevents CLI provided passwords from being incorrectly templated (CVE-2019-14856) * properly hide parameters marked with no_log in suboptions when invalid parameters are passed to the module (CVE-2019-14858) * resolves CVE-2019-10206, by avoiding templating passwords from prompt as it is probable they have special characters. * Handle improper variable substitution that was happening in safe_eval, it was always meant to just do 'type enforcement' and have Jinja2 deal with all variable interpolation. Also see CVE-2019-10156 Changelog: https://github.com/ansible/ansible/blob/9bdb89f740a87bcf760424577ce18a8f68d7a741/changelogs/CHANGELOG-v2.6.rst
| | * | | ansible_2_7: 2.7.11 -> 2.7.15Andreas Rammhold2019-12-15
| | | |/ | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes the following security issues: * Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs (CVE-2019-14864) * CVE-2019-14846 - Several Ansible plugins could disclose aws credentials in log files. inventory/aws_ec2.py, inventory/aws_rds.py, lookup/aws_account_attribute.py, and lookup/aws_secret.py, lookup/aws_ssm.py use the boto3 library from the Ansible process. The boto3 library logs credentials at log level DEBUG. If Ansible's logging was enabled (by setting LOG_PATH to a value) Ansible would set the global log level to DEBUG. This was inherited by boto and would then log boto credentials to the file specified by LOG_PATH. This did not affect aws ansible modules as those are executed in a separate process. This has been fixed by switching to log level INFO * Convert CLI provided passwords to text initially, to prevent unsafe context being lost when converting from bytes->text during post processing of PlayContext. This prevents CLI provided passwords from being incorrectly templated (CVE-2019-14856) * properly hide parameters marked with no_log in suboptions when invalid parameters are passed to the module (CVE-2019-14858) * resolves CVE-2019-10206, by avoiding templating passwords from prompt as it is probable they have special characters. * Handle improper variable substitution that was happening in safe_eval, it was always meant to just do 'type enforcement' and have Jinja2 deal with all variable interpolation. Also see CVE-2019-10156 Changelog: https://github.com/ansible/ansible/blob/0623dedf2d9c4afc09e5be30d3ef249f9d1ebece/changelogs/CHANGELOG-v2.7.rst#v2-7-15
| * | | Merge pull request #75234 from filalex77/subfinder-2.2.2Franz Pletz2019-12-15
| |\ \ \ | | | | | | | | | | subfinder: 2018-07-15 -> 2.2.4
| | * | | subfinder: 2.2.2 -> 2.2.4Oleksii Filonenko2019-12-15
| | | | |
| | * | | subfinder: add filalex77 to maintainersOleksii Filonenko2019-12-08
| | | | |
| | * | | subfinder: 2018-07-15 -> 2.2.2Oleksii Filonenko2019-12-08
| | | | |
| * | | | Merge pull request #75474 from chkno/xsecurelock-no-longer-needs-xset-path-fixedFranz Pletz2019-12-15
| |\ \ \ \ | | |_|_|/ | |/| | | xsecurelock: Remove obsolete path fix
| | * | | xsecurelock: Remove obsolete path fixChuck2019-12-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | helpers/saver_blank became trivial in xsecurelock commit d4a817ae5e071540a1b11825908dd91a8697591a, which first appeared in release 1.4.0.
| * | | | Merge pull request #75398 from r-ryantm/auto-update/tpm2-toolsMario Rodas2019-12-15
| |\ \ \ \ | | |_|_|/ | |/| | | tpm2-tools: 4.0.1 -> 4.1
| | * | | tpm2-tools: 4.0.1 -> 4.1R. RyanTM2019-12-09
| | | | |
| * | | | tectonic: 0.1.11 -> 0.1.12 (#75396)Marco A L Barbosa2019-12-15
| | | | |
| * | | | Merge master into staging-nextFrederik Rietdijk2019-12-15
| |\ \ \ \
| | * | | | tio: expand platforms to "unix" to include darwinAndrew Childs2019-12-15
| | | | | |
| | * | | | Merge pull request #75678 from marsam/fix-vdirsyncer-darwinGabriel Ebner2019-12-15
| | |\ \ \ \ | | | | | | | | | | | | | | vdirsyncer: fix build on darwin
| | | * | | | vdirsyncer: fix build on darwinMario Rodas2019-12-14
| | | | | | |
| | * | | | | beets.externalPlugins.check: init at 0.12.0Bernardo Meurer2019-12-14
| | |/ / / /
| | * | | | vector: 0.5.0 -> 0.6.0Austin Seipp2019-12-14
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Austin Seipp <aseipp@pobox.com>
| | * | | | Revert "vector: make some more options override-able"Austin Seipp2019-12-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See the comments in that commit for more information. This reverts commit b964f4b421ff4406667ee66db177def03a3b2158.
| | * | | | Merge pull request #75673 from flokli/exa-broken-symlinksAndreas Rammhold2019-12-15
| | |\ \ \ \ | | | | | | | | | | | | | | exa: apply patch to not panic on broken symlinks
| | | * | | | exa: apply patch to not panic on broken symlinksFlorian Klink2019-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, exa fails when being executed in a git repository with symlinks pointing to a non-existing location. This can happen quite often with garbage-collected result links, or in bazel repositories. A fix was PR'ed in September at https://github.com/ogham/exa/pull/584, but upstream seems to be not responding. Let's apply this patch until there's a release containing the fixes.
| | * | | | | pfetch: init at 0.4.0Eduardo Quirós2019-12-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * pfetch: init at 0.4.0
| * | | | | | Merge branch 'master' into staging-nextJan Tojnar2019-12-14
| |\| | | | |
| | * | | | | Merge pull request #75258 from srhb/bump-openapi-generatorRenaud2019-12-14
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | openapi-generator-cli: 4.2.1 -> 4.2.2
| | | * | | | | openapi-generator-cli: 4.2.1 -> 4.2.2Sarah Brofeldt2019-12-08
| | | | | | | |
| | * | | | | | Merge pull request #75653 from ivan/cargo-outdated-0.9.1Maximilian Bosch2019-12-14
| | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | cargo-outdated: unstable-2019-04-13 -> 0.9.1
| | | * | | | | | cargo-outdated: unstable-2019-04-13 -> 0.9.1Ivan Kozik2019-12-14
| | | | |/ / / / | | | |/| | | |
| | * | | | | | tigervnc: add perl to buildInputs (#75367)itsHMR2019-12-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tigervnc ships vncserver, quote from the documentation: vncserver - a wrapper script which makes starting Xvnc more convenient vncserver requires Perl.
| | * | | | | | html-proofer: 3.14.1 -> 3.15.0Michael Weiss2019-12-14
| | |/ / / / /
| | * | | | | wpscan: 3.5.3 -> 3.7.5 (#75580)Renaud2019-12-14
| | | | | | |
| | * | | | | Merge pull request #75546 from averelld/jdgui-updateJörg Thalheim2019-12-14
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | jd-gui: 1.4.0 -> 1.6.5
| | | * | | | | jd-gui: 1.4.0 -> 1.6.5Averell Dalton2019-12-13
| | | | | | | |
| | * | | | | | Merge pull request #75565 from xwvvvvwx/wg-tools-20191212Jörg Thalheim2019-12-14
| | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | wireguard-tools: 0.0.20191127 -> 0.0.20191212
| | | * | | | | | wireguard-tools: 0.0.20191127 -> 0.0.20191212David Terry2019-12-12
| | | |/ / / / /
| | * | | | | | fluent-bit: 1.3.2 -> 1.3.4Mario Rodas2019-12-13
| | | | | | | |
| | * | | | | | Merge pull request #75629 from filalex77/starship-0.30.1Mario Rodas2019-12-13
| | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | starship: 0.29.0 -> 0.30.1
| | | * | | | | | starship: 0.29.0 -> 0.30.1Oleksii Filonenko2019-12-14
| | | | | | | | |
| | * | | | | | | Merge pull request #74422 from r-ryantm/auto-update/ibus-typing-boosterMaximilian Bosch2019-12-14
| | |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | ibus-engines.typing-booster-unwrapped: 2.7.0 -> 2.7.2
| | | * | | | | | | ibus-engines.typing-booster-unwrapped: 2.7.0 -> 2.7.2R. RyanTM2019-11-27
| | | | | | | | | |
| | * | | | | | | | Merge pull request #71052 from turboMaCk/imwheel-serviceSilvan Mosberger2019-12-13
| | |\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | services.xserver.imwheel: add module
| | | * | | | | | | | services.xserver.imwheel: add moduleMarek Fajkus2019-12-13
| | | | | | | | | | |
| | * | | | | | | | | texlive.bin.dvipng: fix "Fatal error, PK file ends prematurely"Dmitry Kalinkin2019-12-13
| | | |_|/ / / / / / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | Closes: #75605
| * | | | | | | | | Merge master into staging-nextFrederik Rietdijk2019-12-13
| |\| | | | | | | |
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-03 10:40:42 +0000