Commit graph

21352 commits

Author SHA1 Message Date
Vladimír Čunát 5ad81ab09c
libxml2: bugfix updates from git upstream
This should solve CVE-2016-5131 and some other bugs, but not what Suse
calls CVE-2016-9597: https://bugzilla.suse.com/show_bug.cgi?id=1017497
The bugzilla discussion seems to indicate that the CVE is referenced
incorrectly and only shows reproducing when using command-line flags
that are considered "unsafe".

CVE-2016-9318 also remains unfixed, as I consider their reasoning OK:
https://lwn.net/Alerts/714411/

/cc #22826.
2017-02-16 20:18:17 +01:00
Vladimír Čunát e962a3c95f
Merge branch 'master' into staging 2017-02-16 19:02:37 +01:00
Vladimír Čunát 55cc7700e9
Revert "Merge: glibc: 2.24 -> 2.25"
This reverts commit 1daf2e26d2, reversing
changes made to c0c50dfcb7.

It seems this is what has been causing all the reliability problems
on Hydra.  I'm currently unable to find why it happens, so I'm forced
to revert the update for now.  Discussion: #22874.
2017-02-16 18:16:06 +01:00
Graham Christensen cfbddd3ae0 Merge pull request #22867 from maurer/openssl-cve-2017-3733
openssl: 1.1.0d -> 1.1.0e for High severity CVE-2017-3733
2017-02-16 09:29:29 -05:00
Matthew Maurer 0d2ba7ef2b openssl: 1.1.0d -> 1.1.0e for High severity CVE-2017-3733 2017-02-16 09:16:41 -05:00
Graham Christensen 52026edf98 Merge pull request #22839 from ilya-kolpakov/master
boost: 1.63.0 (not default)
2017-02-16 07:42:40 -05:00
Graham Christensen 7943dc8978 Merge pull request #22843 from bendlas/update-webkitgtk
webkitgtk212x: remove
2017-02-15 21:28:35 -05:00
Jascha Geerds 900fc49013 Merge pull request #22775 from peterhoeg/u/qtox
tox clients and libraries updates
2017-02-15 23:05:14 +01:00
Vladimír Čunát 7832806e20
fontconfig: fixup fragile build after ab5fe171a
Sometimes it might fail due to timestamps suggesting some files needed
regenerating and failing to find gperf.  Now it should be OK, I hope.
2017-02-15 21:06:27 +01:00
Herwig Hochleitner 54e3fad0f4 webkitgtk212x: remove
2.12 isn't maintained anymore and superseded by the (compatible) 2.14
2017-02-15 20:29:05 +01:00
Franz Pletz eda8ee2830 Merge pull request #22752 from LumiGuide/syslog-ng-3.9.1
syslog-ng: 3.6.2 -> 3.9.1
2017-02-15 20:12:02 +01:00
Herwig Hochleitner 2640c87fb9 webkitgtk: 2.14.4 -> 2.14.5 2017-02-15 20:10:56 +01:00
Ilya Kolpakov 6d8235210d boost: 1.63.0 (not default) 2017-02-15 18:29:39 +01:00
Peter Simons d583e013e1 Merge pull request #22825 from areina/add-catalan-to-aspell
aspell-dict-ca: init at 2.1.5-1
2017-02-15 17:47:44 +01:00
Peter Simons 9e0867586c Merge pull request #21396 from laMudri/stdlib-v0.13
AgdaStdlib: v0.12 -> v0.13
2017-02-15 13:03:50 +01:00
Franz Pletz 1e65d0b9e9
gnutls: 3.5.8 -> 3.5.9
Bugfix release.
2017-02-15 09:35:28 +01:00
Franz Pletz 07309d740a
webkitgtk: 2.14.3 -> 2.14.4 for multiple CVEs
Fixes:

  * CVE-2017-2350
  * CVE-2017-2354
  * CVE-2017-2355
  * CVE-2017-2356
  * CVE-2017-2362
  * CVE-2017-2363
  * CVE-2017-2364
  * CVE-2017-2365
  * CVE-2017-2366
  * CVE-2017-2369
  * CVE-2017-2371
  * CVE-2017-2373

See https://webkitgtk.org/security/WSA-2017-0002.html.
2017-02-15 09:35:28 +01:00
Franz Pletz e8af5dcd8e
ffmpeg: 3.2.2 -> 3.2.4 for multiple CVEs
Fixes CVE-2017-5024 & CVE-2017-5025.

See https://ffmpeg.org/security.html.
2017-02-15 09:35:28 +01:00
Franz Pletz d2426f0aa8
ffmpeg: 3.1.6 -> 3.1.7 for multiple CVEs
Fixes CVE-2017-5024 & CVE-2017-5025.

See https://ffmpeg.org/security.html.
2017-02-15 09:35:27 +01:00
Franz Pletz 78f59f1223
ffmpeg: 2.8.10 -> 2.8.11 for multiple CVEs
Fixes CVE-2017-5024 & CVE-2017-5025.

See https://ffmpeg.org/security.html.
2017-02-15 09:35:27 +01:00
Vladimír Čunát 35b2159671
Merge branch 'master' into staging
Over 11k rebuilds on master.
2017-02-15 08:41:35 +01:00
Franz Pletz bf565a4635
libivykis: 0.40 -> 0.41 2017-02-15 01:58:57 +01:00
Thomas Tuegel f228ea5215 Merge pull request #22698 from FRidh/kde
KDE: update frameworks and applications
2017-02-14 12:54:39 -06:00
Eelco Dolstra 314dd9215b Merge pull request #16654 from awakenetworks/parnell/setcap-wrappers
Adding setcap-wrapper functionality to Nix
2017-02-14 16:25:06 +01:00
Toni Reina 4e72d2da50 aspell-dict-ca: init at 2.1.5-1 2017-02-14 15:17:28 +01:00
Eelco Dolstra 1a9cf94ba2
Revert "opensubdiv: Remove cudatoolkit from the closure"
This reverts commit 6a472cf4c1. On
second thought, this is not a good idea, because it means that a
CUDA-enabled Blender doesn't work on non-CUDA systems anymore (since
they don't have libOpenCL.so in /run/opengl-driver). I guess a better
solution will be to split cudatoolkit into multiple outputs.
2017-02-14 12:59:02 +01:00
Vladimír Čunát 61236eb7ee
lmdb on Darwin: fix bogus library name 2017-02-14 10:51:22 +01:00
Eelco Dolstra 6a472cf4c1 opensubdiv: Remove cudatoolkit from the closure
This reduces Blender's closure size by around ~2 GiB when CUDA support
is enabled.
2017-02-14 09:43:04 +01:00
Peter Hoeg 8cef304ede libtoxcore: init at 0.1.6 and move old versions away 2017-02-14 14:57:48 +08:00
Parnell Springmeyer 9e36a58649
Merging against upstream master 2017-02-13 17:16:28 -06:00
Vladimír Čunát 1daf2e26d2
Merge: glibc: 2.24 -> 2.25 2017-02-13 22:14:15 +01:00
Vladimír Čunát 1a55974cef
lmdb: split outputs and add lmdb.pc
lmdb.a is removed, until someone needs it.
2017-02-13 16:50:39 +01:00
Frederik Rietdijk a35ffe3c01 kde frameworks: 5.30 -> 5.31 2017-02-13 09:55:40 +01:00
Graham Christensen 63d7ff883e Merge pull request #22457 from peterhoeg/u/suil
suil: 0.8.2 -> 0.8.4
2017-02-12 19:00:21 -05:00
Vladimír Čunát 2dba30af72
Merge recent staging
It's almost finished by Hydra now.
2017-02-12 19:51:01 +01:00
Vladimír Čunát ab5fe171af
fontconfig: patch to build with glibc-2.25 2017-02-12 11:14:45 +01:00
Vincent Laporte af9857ef47 proj: disable tests on 32 bit 2017-02-12 10:00:24 +00:00
Franz Pletz 5e599035f4
libidn2: fix darwin build
cc #22595
2017-02-12 02:31:41 +01:00
Vincent Laporte 0045f932bb proj: 4.9.2 -> 4.9.3 2017-02-11 23:37:59 +00:00
Vladimír Čunát a01f8a4c38
glibc: security 2.24 -> 2.25
https://sourceware.org/ml/libc-alpha/2017-02/msg00079.html

Stripping was failing on libm.a; I don't know why.
2017-02-11 22:14:49 +01:00
David Terry a3523022e7 range-v3: init at 2017-01-30 (#22661) 2017-02-11 19:10:46 +01:00
Peter Hoeg 9550686be8 subsurface: 4.5.97 -> 4.6.0 (#22615)
We do a few more things:

 - libmarble and libdivecomputer with the subsurface patches have both been
   inlined for 2 reasons:
   a) nobody else is using these forks
   b) they need to be updated in lockstep with subsurface

 - instead of building libmarble against qtquick1, we now build using
   qtquickcontrols (qtquick2)

 - getting rid of qtquick1 also allows us to use the default qt (currently 5.6)

 - we get rid of some hacks to deal with library dependencies

 - instead of manually overriding various phases, we simply use cmakeFlags to
   pass proper parameters
2017-02-11 15:48:18 +01:00
Vladimír Čunát 2ce45fbf0d
Merge branch 'master' into staging 2017-02-11 12:11:22 +01:00
Vladimír Čunát 686d3fb63f
Merge #22577: glew: 1.13.0 -> 2.0.0 2017-02-11 12:08:50 +01:00
Vladimír Čunát db8ac6144e
Merge #22649: libxml2: add icuSupport ? false
This causes no rebuilds by default.
2017-02-11 11:55:54 +01:00
Vladimír Čunát 4927aa0d84
Merge #22654: SDL: fix very long filename of patch 2017-02-11 11:25:46 +01:00
Vladimír Čunát 8f5b3ae07a
Merge branch 'master' into staging 2017-02-11 11:22:29 +01:00
Peter Hoeg 52d6927413 libxml2: add optional icu support 2017-02-11 18:16:38 +08:00
Vladimír Čunát 205376e226
Merge #22534: nghttp2: 1.17.0 -> 1.19.0 2017-02-11 11:12:09 +01:00
Peter Hoeg c5fcd96970 sdl: fix very long filename 2017-02-11 12:26:17 +08:00