cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2
110844 commits 1 branch 0 tags 3.7 GiB
Commit graph

1890 commits

Author SHA1 Message Date
Vladimír Čunát
7b32b8a474
Merge #22792: flashplayer: 24.0.0.194 -> 24.0.0.221 
Critical security + bugfix update!
 2017-02-14 18:54:34 +01:00
Eelco Dolstra
314dd9215b Merge pull request #16654 from awakenetworks/parnell/setcap-wrappers 
Adding setcap-wrapper functionality to Nix
 2017-02-14 16:25:06 +01:00
taku0
adcd9bc884 flashplayer: 24.0.0.194 -> 24.0.0.221 2017-02-14 21:13:04 +09:00
Parnell Springmeyer
9e36a58649
Merging against upstream master 2017-02-13 17:16:28 -06:00
mimadrid
0b8564ba35
qutebrowser: 0.9.0 -> 0.9.1 2017-02-13 23:57:50 +01:00
Nikolay Amiantov
748e7b287b chromium: update dev and beta 
chromiumBeta: 56.0.2924.76 -> 57.0.2987.21
chromiumDev: 57.0.2987.19 -> 58.0.3000.4
 2017-02-08 22:52:40 +03:00
Nikolay Amiantov
c5b07975d8 chromium.mkDerivation: update flags 
* Remove libselinux flag: it's no longer supported;
* Use new gold flags.
 2017-02-08 22:52:40 +03:00
Nikolay Amiantov
003fa8fed5 gn: remove 
Chromium depends on bundled versioon of gn. It's also chromium-specific build
tool, so it's not feasible to package.
 2017-02-08 22:52:40 +03:00
Nikolay Amiantov
b2eb9f4a96 chromium.mkDerivation: run {pre,post}Configure 
This allows us to add custom steps.
 2017-02-08 22:52:37 +03:00
Nikolay Amiantov
3effe0b9b5 chromium: export version 2017-02-08 22:50:13 +03:00
Nikolay Amiantov
781022de46 chromium.mkDerivation: use ninja from nativeBuildInputs 
Also move Python packages there.
 2017-02-08 22:47:13 +03:00
Graham Christensen
4c5b08e4e2
firefox-wrapper: remove gnash support, see #22342 2017-02-06 21:40:19 -05:00
Graham Christensen
267813f4f7
Revert "firefox-wrapper: remove gnash support, see #22342" 
Accidentally committed other changes

This reverts commit f77bc59af6.
 2017-02-06 21:39:09 -05:00
Graham Christensen
f77bc59af6
firefox-wrapper: remove gnash support, see #22342 2017-02-06 21:29:58 -05:00
Herwig Hochleitner
4a9efe9acf chromium: 56.0.2924.76 -> 56.0.2924.87 2017-02-06 04:36:11 +01:00
Benjamin Smith
55e85a162a opera: 41.0.2353.56 -> 42.0.2393.517 2017-02-02 18:01:02 -08:00
Matthew Maurer
b3e6bdbae5 chromium: 55.0.2883.87 -> 56.0.2924.76 2017-02-02 11:26:25 +01:00
Thomas Tuegel
ca7a4ec552
firefox-bin: update hashes for 51.0.1 2017-01-29 08:44:18 -06:00
Parnell Springmeyer
6777e6f812
Merging with upstream 2017-01-29 05:54:01 -06:00
Parnell Springmeyer
4aa0923009
Getting rid of the var indirection and using a bin path instead 2017-01-29 04:11:01 -06:00
Parnell Springmeyer
e92b8402b0
Addressing PR feedback 2017-01-28 20:48:03 -08:00
Graham Christensen
625680c9fc Merge pull request #22203 from taku0/firefox-bin-51.0.1 
firefox, firefox-bin: 50.1.0 -> 51.0.1
 2017-01-27 08:58:59 -05:00
taku0
0dbe492ca9 firefox, firefox-bin: 50.1.0 -> 51.0.1 2017-01-27 22:26:27 +09:00
Vladimír Čunát
a1af9cc1cf
gecko-mediaplayer: remove the dead project 
It was breaking evaluation since 78fe72265.
 2017-01-26 12:28:40 +01:00
Parnell Springmeyer
a26a796d5c
Merging against master - updating smokingpig, rebase was going to be messy 2017-01-26 02:00:04 -08:00
Parnell Springmeyer
025555d7f1
More fixes and improvements 2017-01-26 00:05:40 -08:00
Franz Pletz
78fe722656
gmtk: remove, source not available anymore 2017-01-26 03:52:49 +01:00
Eelco Dolstra
b6adec130b Merge pull request #22093 from taku0/firefox-bin-51.0 
firefox-bin: 50.1.0 -> 51.0
 2017-01-24 15:17:54 +01:00
taku0
9c9424d316 firefox: 50.1.0 -> 51.0, firefox-esr: 45.6.0esr -> 45.7.0esr 2017-01-24 22:10:58 +09:00
taku0
28c3d7f868 firefox-bin: 50.1.0 -> 51.0 2017-01-23 21:12:22 +09:00
Michael Raskin
46eecaf0d4 Merge pull request #21726 from rnhmjoj/palemoon 
[WIP] palemoon: init at 27.0.3
 2017-01-21 18:46:09 +00:00
Alexey Shmalko
09b3df542d
w3m: fix package name 
nix-repl> builtins.parseDrvName "w3m-v0.5.3+git20161120"
{ name = "w3m-v0.5.3+git20161120"; version = ""; }

nix-repl> builtins.parseDrvName "w3m-0.5.3+git20161120"
{ name = "w3m"; version = "0.5.3+git20161120"; }
 2017-01-21 15:02:02 +02:00
rnhmjoj
61fe18d5b4
palemoon: init at 27.0.3 2017-01-14 20:44:47 +01:00
Robert Helgesson
782e2fa807
google-talk-plugin: 5.41.0.0 -> 5.41.3.0 2017-01-13 20:24:24 +01:00
volth
a3778f6e87 flashplayer: 24.0.0.186 -> 24.0.0.194 2017-01-11 18:06:55 +00:00
taku0
ce11097b71 flashplayer: 24.0.0.186 -> 24.0.0.194 2017-01-10 21:12:12 +09:00
Vladimír Čunát
07bf828bd9
Merge branch 'staging'; security /cc #21642 2017-01-06 16:32:47 +01:00
Vladimír Čunát
29e93555ec
firefox*: fixup build after updating sed 
I failed to simply patch the bad [:space:] usage; I don't know why.
 2017-01-06 11:22:28 +01:00
volth
1181bdd717 chromium, google-chrome: add commandLineArgs 2017-01-05 18:19:44 +00:00
Eelco Dolstra
b4f401104d
Fix big-parallel usage 
requiredSystemFeatures is not a meta attribute but a derivation
attribute. So "big-parallel" was being ignored on e.g. chromium,
causing it to be built (and timing out) on slow machines.

http://hydra.nixos.org/build/45819778#tabs-buildsteps
 2017-01-03 13:55:26 +01:00
Nikolay Amiantov
3c1ade7d15 qutebrowser: 0.8.4 -> 0.9.0 2017-01-02 19:05:12 +03:00
Herwig Hochleitner
08121638f8 chromium: 55.0.2883.75 -> 55.0.2883.87 2017-01-02 14:00:10 +01:00
taku0
93d917fa22 firefox, thunderbird: add updateScript 2016-12-29 11:19:50 +01:00
zimbatm
02c65bdac9 google-chrome: add channel name suffix 
Updates would always select the unstable version otherwise. This was
copies from the chromium package.
 2016-12-27 16:21:56 +00:00
zimbatm
a623ada912 flashplayer: removed obsolete files 2016-12-25 11:33:16 +00:00
taku0
f3287b0aa5 flashplayer: 11.2.202.644 -> 24.0.0.186 [Critical security fix] (#21337) 
* flashplayer: 11.2.202.644 -> 24.0.0.186

* flashplayer: add debug version

* flashplayer-standalone: 11.2.202.644 -> 24.0.0.186
 2016-12-25 11:32:24 +00:00
Joachim F
40990841f3 Merge pull request #21217 from glaebhoerl/vivaldi-1.6 
Vivaldi 1.6
 2016-12-18 22:50:41 +01:00
Rok Garbas
a66b703f94 firefox-bin/thunderbird-bin: reuse the same updateScript for both 2016-12-18 16:45:33 +01:00
Rok Garbas
b7cfbf96d6 tp_smapi: updateScript added 2016-12-18 16:45:33 +01:00
Gábor Lehel
9cc0eff1cf vivaldi: add libxcb to buildInputs, seems to be required now 2016-12-17 00:04:20 +01:00
Gábor Lehel
06fbf5cb77 vivaldi: 1.5.658.44-1 -> 1.6.689.34-1 2016-12-16 22:34:37 +01:00
Joachim Fasting
6dbdbdec69
chromium pepper flash plugin: 23.0.0.207 -> 24.0.0.186 
Fixes https://github.com/NixOS/nixpkgs/issues/21119,
fixes https://github.com/NixOS/nixpkgs/issues/21169
 2016-12-15 16:06:56 +01:00
Michael Raskin
d009ac1ce5 Merge pull request #21064 from taku0/firefox-bin-fix-update-script 
firefox-bin: fix updateScript
 2016-12-14 12:13:06 +00:00
Michael Raskin
37c10c428c Merge pull request #21134 from taku0/firefox-bin-50.1.0 
firefox-bin: 50.0.2 -> 50.1.0 [Critical security fix]
 2016-12-14 12:10:58 +00:00
Michael Raskin
13a7bc5341 Merge pull request #21135 from taku0/firefox-50.1.0 
firefox: 50.0.2 -> 50.1.0, firefox-esr: 45.5.1esr -> 45.6.0esr [Critical security fix]
 2016-12-14 12:09:01 +00:00
taku0
86cf682cda firefox: 50.0.2 -> 50.1.0, firefox-esr: 45.5.1esr -> 45.6.0esr 2016-12-14 09:03:56 +09:00
taku0
8e7ea1795a firefox-bin: fix updateScript 2016-12-14 08:53:49 +09:00
taku0
8a7cf06b54 firefox-bin: 50.0.2 -> 50.1.0 2016-12-14 08:48:35 +09:00
taku0
a86d6f404c firefox-bin: tweak updateScript 2016-12-12 14:17:06 +00:00
Shea Levy
374f833dab google-chrome: Add new dep on libxcb 2016-12-11 12:53:51 -05:00
taku0
a3e503fe0f firefox-bin: fix updateScript 2016-12-11 21:07:18 +09:00
Rok Garbas
d295d68609 firefox-bin: updated the updateScript with suggestions from @Mic92 
also added some comments to the update script so that a new person
looking at it know what is happening
 2016-12-09 03:19:07 +01:00
Rok Garbas
3a1d52ff4f updateScript: initital work 2016-12-09 03:19:07 +01:00
Graham Christensen
d71dbd733c
chromium: 54.0.2840.100 -> 55.0.2883.75 2016-12-07 20:26:47 -05:00
Franz Pletz
63a5dd7e25
firefox-bin-beta: 49.0b1 -> 51.0b6 2016-12-04 14:57:27 +01:00
taku0
36f980b7ff firefox-esr: security 45.5.0 -> 45.5.1 (#20841) 2016-12-01 21:50:50 +01:00
Eelco Dolstra
1e17f21b3e
firefox: 50.0.1 -> 50.0.2 2016-12-01 12:55:24 +01:00
taku0
097a8ee174 firefox-bin: 50.0.1 -> 50.0.2 
Critical security fix
https://www.mozilla.org/en-US/firefox/50.0.2/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/
 2016-12-01 09:08:16 +09:00
Tuomas Tynkkynen
8a4d6516ee Merge remote-tracking branch 'upstream/staging' into master 2016-11-30 00:34:23 +02:00
Graham Christensen
b04e23bbb8
firefox: 50.0 -> 5.0.1 for CVE-2016-9078 2016-11-29 08:34:13 -05:00
taku0
2d341ca7fc firefox-bin: 50.0 -> 50.0.1 2016-11-29 03:12:10 +09:00
Vladimír Čunát
925b335607
Merge branch 'master' into staging 2016-11-26 11:27:09 +01:00
Frederik Rietdijk
b28689f453 chromium: use python2 2016-11-24 22:28:04 +01:00
Tim Steinbach
2aacd5b797 Merge pull request #20660 from romildo/upd.vivaldi 
vivaldi: 1.4.589.38-1 -> 1.5.658.44-1
 2016-11-24 08:24:20 -05:00
Graham Christensen
a3b746851f
w3m: 0.5.3-2015-12-20 -> 0.5.3+git20161120 for many CVEs 
c94a28011f/NEWS\#L1-L52
 2016-11-23 23:23:49 -05:00
romildo
9755ecf8b0 vivaldi: 1.4.589.38-1 -> 1.5.658.44-1 2016-11-23 13:56:08 -02:00
Franz Pletz
65b3060f69
qutebrowser: pdfjs: 1.4.20 -> 1.5.188 2016-11-23 13:23:33 +01:00
Nikolay Amiantov
69e649503f Merge pull request #20586 from abbradar/spidermonkey 
SpiderMonkey cleanup
 2016-11-22 11:46:14 +03:00
Guillaume Koenig
d662063a11
firefox: fix geolocation feature (#20425) 
Firefox uses a google API to perform geolocation. This API requires a
key which must be given at build time. This commit adds the key from
Chromium's derivation to Firefox.
 2016-11-21 17:41:39 +01:00
Nikolay Amiantov
c2274cdfb5 spidermonkey: cleanup and rename versions 2016-11-21 02:46:35 +03:00
Ricardo M. Correia
6dfd4f5b08 pepperflash: 23.0.0.205 -> 23.0.0.207 2016-11-18 00:33:11 +01:00
Tim Steinbach
9c3eae488e
opera: 40.0.2308.90 -> 41.0.2353.56 2016-11-16 12:14:27 -05:00
Vladimír Čunát
207b8d1c46 firefox-esr: security-only update 45.4.0 -> 45.5.0 2016-11-15 19:22:39 +01:00
Eelco Dolstra
c2b9404c02
firefox: 49.0.2 -> 50.0 2016-11-15 16:58:45 +01:00
taku0
76b1413a87 firefox-bin: 49.0.2 -> 50.0 (#20434) 2016-11-15 15:45:57 +01:00
Stefan Götz
2079c92fa9 qutebrowser: 0.8.2 -> 0.8.4 2016-11-12 15:39:45 +01:00
Herwig Hochleitner
663007d607 chromium: 54.0.2840.90 -> 54.0.2840.100 
fixes CVE-2016-5199 CVE-2016-5200 CVE-2016-5201 CVE-2016-5202
 2016-11-10 23:45:29 +01:00
Herwig Hochleitner
d48846756f chromium: fix nix syntax highlighting for emacs 2016-11-10 16:30:56 +01:00
Tim Steinbach
331eb51705 Merge pull request #20277 from taku0/flashplayer-11.2.202.644 
flashplayer: 11.2.202.643 -> 11.2.202.644
 2016-11-09 20:00:48 -05:00
aszlig
6f8a72bbff
chromium: Add Gtk 3 for versions >= 56 
Versions before 56 already had experimental support for Gtk 3 and since
version 56, Gtk 3 _seemed_ to become the default. Although it's now
requiring *both* Gtk 2 and Gtk3, so let's supply the dependency for now
to get it to build.

In the future however we might want to add use_gtk3 to the GN flags and
get rid of Gtk 2 completely.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-11-09 00:58:33 +01:00
aszlig
d2e60d1f93
chromium: Fix building with WineVine components 
Before version 54, the WideVine CDM plugin was built unconditionally and
it seems since version 54 this now is dependent upon a GYP/GN flag on
whether to include the CDM shared library or not.

Also, we now use a patch from Gentoo which should hopefully get the CDM
plugin to work properly, at least according to their bugtracker:

https://bugs.gentoo.org/show_bug.cgi?id=547630

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-11-09 00:58:29 +01:00
aszlig
66ce15a3b1
chromium: Update all channels to latest versions 
Overview of updated versions:

stable: 54.0.2840.71 -> 54.0.2840.90
beta:   55.0.2883.21 -> 55.0.2883.35
dev:    56.0.2897.0  -> 56.0.2906.0

This is to get our Chromium versions in par with the latest upstream
ones before merging in the GN migration changes.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-11-08 20:12:24 +01:00
aszlig
b84e3379fe
chromium: Bring back pepper flash from Adobe 
So far we had the bundled Flash player plugin that came with Chrome, but
since version 54 the Chrome package doesn't include PPAPI Flash anymore.

Instead we're going to download the PPAPI Flash plugin directly from
Adobe and try to use them for all release channels of Chromium.

Of course it would be nice if we'd have an updater for it but for now
it's important that we don't break things for people who are currently
forced to use Flash.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-11-08 20:12:20 +01:00
aszlig
5f53fddf1e
chromium: Remove some libs from system depenencies 
Seems that these libraries aren't the ones Chromium is expecting to be,
so let's switch to use the bundled version of these libraries instead.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-11-08 20:12:14 +01:00
aszlig
8391241e0c
chromium: Build with GN unconditionally 
Previously I've added the extra file common-gn.nix in addition to
common.nix, so we can possibly have a smooth transition from current
stable to the new version 54.

Unfortunately, version 53 is already EOL and we have to move to version
54 as soon as possible so we can only use GN and thus it doesn't make
sense to provide expressions for GYP anymore.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-11-08 20:12:11 +01:00
aszlig
5f18ccb001
chromium: Remove flag for hiDPISupport 
This should now be the upstream default and there also is no more flag
for GN to set it, so we'll no longer need it on our side as well.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-11-08 20:12:07 +01:00
Herwig Hochleitner
b43142c958
chromium: remove pepperflash 
fixes NixOS#19565
 2016-11-08 20:12:03 +01:00
Herwig Hochleitner
872b4782e9
chromium: 53 -> 54 2016-11-08 20:11:59 +01:00
aszlig
7a3a16dd80
chromium: Remove plugin paths patch for version 50 
The oldest version we build is version 53, so we no longer need this
patch.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-11-08 20:11:56 +01:00
aszlig
d0e8f3c503
chromium: Add preliminary support for GN 
This only uses the most basic GN flags which should represent the GYP
flags we had before. In order to get rid most of the GYP cruft, we now
have common.nix and common-gn.nix which are mostly the same, just that
the latter is only for GN builds.

The GN implementation is far from complete and currently not even
builds, so we need more work to get the beta and dev channels building.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-11-08 20:11:52 +01:00
taku0
823f28cd1c flashplayer: 11.2.202.643 -> 11.2.202.644 2016-11-08 21:12:19 +09:00
Eric Sagnes
76f742341c qutebrowser: fix wrapper 2016-11-03 10:38:57 +09:00
taku0
d19b53f851 flashplayer: 11.2.202.637 -> 11.2.202.643 2016-10-26 21:13:57 +09:00
Frederik Rietdijk
7077a270bf Merge remote-tracking branch 'upstream/master' into HEAD 2016-10-26 13:06:43 +02:00
Jörg Thalheim
de7f231f6c Merge pull request #19646 from phunehehe/opera 
opera: 12.16-1860 -> 40.0.2308.81
 2016-10-23 11:38:38 +02:00
Hoang Xuan Phu
c2281d6494 opera: 12.16-1860 -> 40.0.2308.90 
and unbreak
 2016-10-23 16:38:29 +08:00
Frederik Rietdijk
e56832d730 Merge remote-tracking branch 'upstream/master' into HEAD 2016-10-22 17:23:24 +02:00
Frederik Rietdijk
f64b574e1d chromium: use python2 
gyp still depends on python 2 although that might change soon
https://codereview.chromium.org/1454433002/
 2016-10-22 16:47:21 +02:00
Eelco Dolstra
15dea19577 Merge pull request #19753 from taku0/firefox-bin-49.0.2 
firefox-bin: 49.0 -> 49.0.2
 2016-10-21 15:35:58 +02:00
Eelco Dolstra
12212a0b13 firefox: 49.0.1 -> 49.0.2 
CVE-2016-5287, CVE-2016-5288
 2016-10-21 15:34:56 +02:00
taku0
b8e9217c79 firefox-bin: 49.0 -> 49.0.2 2016-10-21 09:12:12 +09:00
Vladimír Čunát
4d5b893002 Merge #19081: gnome-3.22 
Also master commits are brought in.
 2016-10-20 23:04:10 +02:00
Frederik Rietdijk
37eba07810 firefox: drop pysqlite dependency 
since our interpreter ships with sqlite
 2016-10-18 23:16:04 +02:00
Kranium Gikos Mendoza
a4b050584a bluejeans: 2.160.66.8 -> 2.180.71.8 2016-10-18 05:47:49 +08:00
Tim Steinbach
71732441fb
vivaldi: 1.4.589.29-1 -> 1.4.589.38-1 2016-10-14 22:14:38 -04:00
taku0
5e6c3b9fde flashplayer: 11.2.202.635 -> 11.2.202.637 2016-10-11 21:12:12 +09:00
Tim Steinbach
48907cb051 Merge pull request #19364 from NeQuissimus/firefox_49_0_1 
firefox: 49.0 -> 49.0.1
 2016-10-09 11:48:07 -04:00
aszlig
bc6caeabcc
chromium: Fix wrong hash for beta channel 
It seems that upstream has re-uploaded the tarball again (see
0c2683cc11).

I've verified the new hash from two different hosts.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-10-09 13:43:04 +02:00
Tim Steinbach
67a2ac6d63
firefox: 49.0 -> 49.0.1 2016-10-08 18:09:32 +00:00
Graham Christensen
66d622fbd0
chromium: 53.0.2785.116 -> 53.0.2785.143 for CVEs 
https://lwn.net/Alerts/702456/
 2016-10-05 21:11:59 -04:00
Vladimír Čunát
a745f87b7f flashplayer: preferLocalBuild = true; 
The builder does almost nothing, and I hate to have to copy hundreds of
megabytes to a builds slave because of that.
 2016-10-02 14:52:02 +02:00
Aneesh Agrawal
fcee1d0b28
Remove redundant -DCMAKE_BUILD_TYPE=Release flags 
Since commit 183d05a0 in 2012, this is the default.

fixes #18000
 2016-10-01 16:13:41 +02:00
Eelco Dolstra
62f055af47 google-talk-plugin: Use mesa_noglu instead of mesa 2016-09-29 13:05:29 +02:00
Graham Christensen
d92fe31e04
opera: mark as broken 
https://github.com/NixOS/nixpkgs/issues/18856
 2016-09-28 08:56:44 -04:00
Frederik Rietdijk
f84bc4e505 uzbl: do not use top-level python packages 2016-09-26 11:10:50 +02:00
aszlig
0c2683cc11
chromium: Fix wrong/missing hash for beta channel 
The hash provided in commit 072917ea5d is
faulty, either because the upstream tarball has changed or because it
was wrong in the first place, no matter what happened we can't really
verify if we don't have the tarball with the old hash.

To double-check I've verified the hash against the one from Gentoo[1],
which has the following SHA256:

b46c26a9e773b2c620acd2f96d69408f14a279aefaedfefed002ecf898a1ecf2

After being converted into base 32 the hash does match with ours.

Note that I haven't tested building all Chromium channels (yet), but we
can fix upcoming issues later because right now it doesn't build anyway
because of the failing hash check.

[1]: https://gitweb.gentoo.org/repo/gentoo.git/tree/www-client/chromium/Manifest?id=2de0f5e4ffeb46a478c589b21d5bbcfd5736e57b

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-09-25 20:58:03 +02:00
Franz Pletz
072917ea5d
chromium: update to latest channel releases (security) 
Fixes at least:

  - CVE-2016-1667
  - CVE-2016-1668
  - CVE-2016-1669
  - CVE-2016-1670
  - CVE-2016-5170
  - CVE-2016-5171
  - CVE-2016-5172
  - CVE-2016-5173
  - CVE-2016-5174
  - CVE-2016-5175
  - CVE-2016-7395

cc #18856
 2016-09-24 21:55:24 +02:00
Thomas Tuegel
564b12656e
firefox-bin: update hashes 2016-09-23 17:28:47 -05:00
José Romildo Malaquias
40c4e80935 vivaldi: 1.3 -> 1.4 (#18886) 2016-09-24 00:27:36 +02:00
Joachim F
87ac2b108b Merge pull request #18799 from taku0/firefox-bin-49.0 
firefox-bin: 48.0.2 -> 49.0
 2016-09-22 14:41:08 +02:00
Eelco Dolstra
5bfd092f07 firefox-esr: 45.3.0 -> 45.4.0 2016-09-21 13:28:37 +02:00
Eelco Dolstra
99138dc356 firefox: 48.0.2 -> 49.0 2016-09-21 13:28:37 +02:00
taku0
25ff8637f4 firefox-bin: 48.0.2 -> 49.0 2016-09-20 09:12:07 +09:00
Eelco Dolstra
da3e6d6eda google-talk-plugin: Prevent a dependency on gcc 2016-09-19 20:02:07 +02:00
Vladimír Čunát
f27a970f2d firefox*: fix notifications 
Fixes #18712. Now firefox uses the notification daemon, if available.

Unfortunately, the same approach didn't work for thunderbird; I don't
know why.
 2016-09-18 23:23:13 +02:00
Profpatsch
61462c94e6 lib/fetchers.nix: factor out impure proxy vars (#18702) 
Apparently everyone just copied those variables, instead of creating a
library constant for them. Some even removed the comment. -.-
 2016-09-17 21:50:01 +02:00
Mike Cooper
c2a7410583 firefox-bin: add curl dependency for crash reporter (#18596) 2016-09-15 17:39:08 +02:00
Lancelot SIX
28d286ac4b Merge pull request #18562 from taku0/flashplayer-11.2.202.635 
flashplayer: 11.2.202.632 -> 11.2.202.635
 2016-09-14 17:19:08 +02:00
Kirill Boltaev
0f37287df5 treewide: explicitly specify gtk version 2016-09-13 21:09:24 +03:00
taku0
8b6e522bf8 flashplayer: 11.2.202.632 -> 11.2.202.635 2016-09-13 21:12:18 +09:00
Kirill Boltaev
bccd75094f treewide: explicitly specify gtk and related package versions 2016-09-12 18:26:06 +03:00
Tuomas Tynkkynen
290db94f04 Merge remote-tracking branch 'upstream/master' into staging 2016-09-09 02:40:47 +03:00
Franz Pletz
7949e69382
chromium: update to latest channel releases (security) 
Fixes the following security problems:

- CVE-2016-5147: Universal XSS in Blink
- CVE-2016-5148: Universal XSS in Blink
- CVE-2016-5149: Script injection in extensions
- CVE-2016-5150: Use after free in Blink
- CVE-2016-5151: Use after free in PDFium
- CVE-2016-5152: Heap overflow in PDFium
- CVE-2016-5153: Use after destruction in Blink
- CVE-2016-5154: Heap overflow in PDFium
- CVE-2016-5155: Address bar spoofing
- CVE-2016-5156: Use after free in event bindings
- CVE-2016-5157: Heap overflow in PDFium
- CVE-2016-5158: Heap overflow in PDFium
- CVE-2016-5159: Heap overflow in PDFium
- CVE-2016-5160: Extensions web accessible resources bypass
- CVE-2016-5161: Type confusion in Blink.
- CVE-2016-5162: Extensions web accessible resources bypass
- CVE-2016-5163: Address bar spoofing
- CVE-2016-5164: Universal XSS using DevTools
- CVE-2016-5165: Script injection in DevTools
- CVE-2016-5166: SMB Relay Attack via Save Page As
- CVE-2016-5167: Various fixes from internal audits, fuzzing and other initiatives
 2016-09-07 04:49:56 +02:00
Eelco Dolstra
78178d5854 systemd: Separate lib output 
This moves libsystemd.so and libudev.so into systemd.lib, and gets rid
of libudev (which just contained a copy of libudev.so and the udev
headers). It thus reduces the closure size of all packages that
(indirectly) depend on libsystemd, of which there are quite a few (for
instance, PulseAudio and dbus). For example, it reduces the closure of
Blender from 430.8 to 400.8 MiB.
 2016-09-05 19:17:14 +02:00
Nikolay Amiantov
9f2c48a7a7 qutebrowser: add cssutils dependency 2016-09-04 15:49:00 +03:00
obadz
3de6e5be50 Merge branch 'master' into staging 
Conflicts:
      pkgs/applications/misc/navit/default.nix
      pkgs/applications/networking/mailreaders/alpine/default.nix
      pkgs/applications/networking/mailreaders/realpine/default.nix
      pkgs/development/compilers/ghc/head.nix
      pkgs/development/libraries/openssl/default.nix
      pkgs/games/liquidwar/default.nix
      pkgs/games/spring/springlobby.nix
      pkgs/os-specific/linux/kernel/perf.nix
      pkgs/servers/sip/freeswitch/default.nix
      pkgs/tools/archivers/cromfs/default.nix
      pkgs/tools/graphics/plotutils/default.nix
 2016-08-27 23:54:54 +01:00
Vladimír Čunát
f86392bfbe chromium: fixup share/share 
Reported on https://github.com/NixOS/nixpkgs/issues/11501#issuecomment-164383204
 2016-08-27 17:38:25 +02:00
Eelco Dolstra
c2fb3490c9 firefox: 48.0.1 -> 48.0.2 2016-08-26 16:46:34 +02:00
taku0
0536cc397c firefox-bin: 48.0.1 -> 48.0.2 2016-08-25 03:12:12 +09:00
Franz Pletz
c0fa26ef3b Merge remote-tracking branch 'origin/master' into hardened-stdenv 2016-08-24 11:01:53 +02:00
Nikolay Amiantov
76223aa4b2 qutebrowser: add pdfjs support 2016-08-23 23:36:18 +03:00
obadz
cd063d774e chromium: fix "Aw, snap!" after glibc 2.24 upgrade 
See https://bugzilla.redhat.com/show_bug.cgi?id=1361157#c8
cc @domenkozar @aszlig
 2016-08-23 11:56:11 +01:00
Lluís Batlle i Rossell
9ef3a51379 Adding vlc plugin for firefox. 
I really wanted it to substitute the html5 player, or at least the direct
player for mp4/webm files in firefox, but I couldn't make it work. The
formats recognized by the firefox internal player were used in all cases. The
plugin worked for formats unknown by firefox.

https://support.mozilla.org/ca/questions/1089501

Nevertheless, as I wrote the nix recipe, I commit it. It may be of interest to
someone else.
 2016-08-23 10:16:37 +02:00
Nikolay Amiantov
a963b45c97 qutebrowser: fix restart 2016-08-22 20:07:30 +03:00
Ram Kromberg
64ba21e966 midori: vala -> vala_0_23 2016-08-21 20:02:08 +03:00
obadz
4574f22841 chromium: remove one layer of wrapper by using ed 2016-08-19 19:18:23 +01:00
Eelco Dolstra
1efedc6c4c firefox-esr: 45.2.0 -> 45.3.0 2016-08-19 13:26:20 +02:00
Eelco Dolstra
360ee2f0b9 firefox: 48.0 -> 48.0.1 2016-08-19 13:25:43 +02:00
taku0
0cd039b40e firefox-bin: 48.0 -> 48.0.1 2016-08-19 03:12:15 +09:00
Gábor Lehel
5bef9b271c vivaldi: 1.2 -> 1.3 2016-08-18 15:13:39 +02:00
Nikolay Amiantov
1c5399626a qutebrowser: don't depend on qtmultimedia 
It's not needed now that qtwebkit uses gstreamer backend
 2016-08-17 20:30:50 +03:00
Nikolay Amiantov
1d53115765 qutebrowser: use qtwebkit-plugins 2016-08-17 20:20:35 +03:00
Robin Gloster
33e1c78ae3 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-16 07:54:01 +00:00
Nikolay Amiantov
9b4a7984a4 qutebrowser: add shared files and cleanup 2016-08-15 11:38:53 +03:00
Mike Cooper
b5194d7b9a firefox-bin: Add libxcb to build inputs (#17700) 
This is needed for future versions of Firefox, and makes external
packaging of prerelease versions of Firefox much easier.
 2016-08-15 01:03:19 +02:00
Ram Kromberg
7802a0f14b midori: update to current webkitgtk (#17731) 2016-08-14 21:49:19 +00:00
Robin Gloster
b7787d932e Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-12 09:46:53 +00:00
Eelco Dolstra
8877b93649 firefox: 47.0.1 -> 48.0 2016-08-11 16:09:00 +02:00
obadz
3822c56e1e chromium: minor fixups 
cc @aszlig
 2016-08-10 02:35:59 +01:00
obadz
20f009d56d chromium: split the sandbox into a seperate output (take 2) 
Fixup of 231ed9e
 2016-08-06 14:42:13 +01:00
obadz
231ed9edd9 chromium: split the sandbox into a separate output 
Related to #17460 and 66d5edf
Triggers a rebuild of Chromium
 2016-08-06 10:29:56 +01:00
obadz
66d5edf654 chromium: add nixos module security.chromiumSuidSandbox 
Closes #17460

Changed the wrapper derivation to produce a second output containing the sandbox.
Add a launch wrapper to try and locate the sandbox (either in /var/setuid-wrappers or in /nix/store).
This launch wrapper also sheds libredirect.so from LD_PRELOAD as Chromium does not tolerate it.

Does not trigger a Chromium rebuild.

cc @cleverca22 @joachifm @jasom
 2016-08-06 10:27:47 +01:00
obadz
d6528a1b7f chromium: fixup commit 33557ac 
Helps with #17460

@cleverca22 saw calls to SetuidSandboxHost::GetSandboxBinaryPath so we
patch this function instead.

cc @joachifm
 2016-08-05 10:55:48 +01:00
obadz
33557acb36 chromium: add ability to control which sandbox is used 
First step towards addressing #17460

In order to be able to run the SUID sandbox, which is good for security
and required to run Chromium with any kind of reasonable sandboxing when
using grsecurity kernels, we want to be able to control where the
sandbox comes from in the Chromium wrapper. This commit patches the
appropriate bit of source and adds the same old sandbox to the wrapper
(so it should be a no-op)
 2016-08-04 20:37:35 +01:00
Benjamin Staffin
78e5e61bbe Update google-chrome versions 
The previous download links were all broken.

Stable: 51.0.2704.103 -> 52.0.2743.116
Beta:   52.0.2743.41  -> 53.0.2785.34
Dev:    53.0.2767.4   -> 54.0.2816.0
 2016-08-04 00:22:58 -04:00
Rok Garbas
2a4312d92b
firefox-beta-bin: 48.0b9 -> 49.0b1 2016-08-03 19:39:46 +02:00
Robin Gloster
1b979d8384 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-03 13:34:44 +00:00
mimadrid
4a06ece723
qutebrowser: 0.8.1 -> 0.8.2 2016-08-03 11:02:02 +02:00
Tuomas Tynkkynen
21f17d69f6 treewide: Add lots of meta.platforms 
Build-tested on x86_64 Linux & Mac.
 2016-08-02 21:42:43 +03:00
Tuomas Tynkkynen
2258b21e4b treewide: Add lots of platforms to packages with no meta 
Build-tested on x86_64 Linux and on Darwin.
 2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen
59ce911810 treewide: Some EOF-whitespace fixes 2016-08-02 21:17:44 +03:00
taku0
47024938a2 firefox-bin: 47.0.1 -> 48.0 (#17452) 2016-08-02 16:55:55 +02:00
Robin Gloster
63c7b4f9a7 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-31 20:51:34 +00:00
Miguel Madrid
94549d4fab qutebrowser: 0.8.0 -> 0.8.1 (#17302) 2016-07-27 15:50:29 +01:00
Gabriel Ebner
7fce7c5a07 qutebrowser: 0.7.0 -> 0.8.0 2016-07-26 14:53:59 +02:00
Ram Kromberg
5685968ca6 midori: 0.5.8 -> 0.5.11 (#17142) 2016-07-25 21:25:42 +01:00
Kranium Gikos Mendoza
a5d1c8d471 bluejeans: 2.160.63.8 -> 2.160.66.8 (#17232) 2016-07-25 20:53:32 +01:00
Robin Gloster
1f04b4a566 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-21 00:56:43 +00:00
Rok Garbas
f5dca01b50 firefox-bin: 48.0b7 -> 48.0b9 2016-07-21 00:59:56 +02:00
Rok Garbas
0558ae3057 firefox-bin: libpulseaudio.dev is needed otherwise firefox doesn't start 2016-07-21 00:56:38 +02:00
Frederik Rietdijk
bae6ad8efa uzbl: fix build 
See also #16740.
 2016-07-19 15:06:42 +02:00
Robin Gloster
203846b9de Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-19 10:37:02 +00:00
Rok Garbas
a377c71280 firefox-bin: 48.0b1 -> 48.0b7 
* removed firefox-developer-bin
* extend firefox-bin expression to accept sources as input so
  firefox-developer-bin can be packaged outside nixpkgs
* generate_sources.rb now includes full urls in the output
 2016-07-16 13:04:04 +02:00
Robin Gloster
5185bc1773 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-15 14:41:01 +00:00
Ram Kromberg
6046702e5e flashplayer: 11.2.202.626 -> 11.2.202.632 2016-07-14 12:42:26 +03:00
zimbatm
a265ad2842 firefox-developer-bin: fix hashes (#16860) 
the nightly tend to get replaced in-place on the FTP and so benefit from
an update script as well
 2016-07-11 13:40:58 +02:00
Oliver Charles
65ac26e28a Merge pull request #16841 from womfoo/bump/bluejeans-2.160.63.8 
bluejeans: 2.160.49.8 -> 2.160.63.8
 2016-07-11 10:00:18 +01:00
Kranium Gikos Mendoza
5da05eef62 bluejeans: 2.160.49.8 -> 2.160.63.8 2016-07-10 23:52:23 +08:00
Tobias Geerinckx-Rice
921d3321f5
trezor-bridge: mark as broken 
Cool, a bitcoin wallet app silently changes its hash.

CC maintainer @ehmry
 2016-07-06 19:42:45 +02:00
Miguel Madrid
87be90336f links2: 2.12 -> 2.13 (#16756) 2016-07-06 19:40:05 +02:00