aboutsummaryrefslogtreecommitdiff
path: root/gnu/packages/patches
AgeCommit message (Collapse)Author
2016-11-16gnu: icecat: Add fixes from Firefox ESR 45.5.0.Mark H Weaver
Includes fixes for CVE-2016-5290, CVE-2016-5291, CVE-2016-5297, CVE-2016-9064, and CVE-2016-9066. * gnu/packages/gnuzilla.scm (icecat)[source][patches]: Add fixes for aforementioned CVEs and other selected fixes from Firefox ESR 45.5.0. Note that the first six patches of CVE-2016-5290 and the patch for CVE-2016-9066 were already present, but were labeled by mozilla bug number instead of CVE. * gnu/packages/patches/icecat-CVE-2016-9064.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it.
2016-11-16gnu: pixman: Add fix for CVE-2016-5296.Mark H Weaver
* gnu/packages/patches/pixman-CVE-2016-5296.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/xdisorg.scm (pixman)[replacement]: New field. (pixman/fixed): New variable.
2016-11-13gnu: readline-6.2: Fix CVE-2014-2524.Leo Famulari
* gnu/packages/patches/readline-6.2-CVE-2014-2524.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/readline.scm (readline-6.2): Use it.
2016-11-13gnu: mailutils: Update to 3.0.Ludovic Courtès
* gnu/packages/mail.scm (mailutils): Update to 3.0. [arguments]: Adjust 'pre-build' phase. * gnu/packages/patches/m4-gets-undeclared.patch: Remove. * gnu/local.mk (dist_patch_DATA): Adjust accordingly.
2016-11-13Merge branch 'core-updates'Ludovic Courtès
2016-11-12gnu: libtiff: Fix CVE-2016-9273.Leo Famulari
* gnu/packages/patches/libtiff-CVE-2016-9273.patch: New patch. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (libtiff/fixed): Use it.
2016-11-11gnu: ruby-yard: Update to 0.9.5-1.d816482a.Ben Woodcroft
* gnu/packages/ruby.scm (ruby-yard): Update to 0.9.5-1.d816482a. [source]: Update source URL. [arguments]: Remove unneeded substitutions. Change test target. * gnu/packages/patches/ruby-yard-fix-skip-of-markdown-tests.patch (New file) * gnu/local.mk (dist_patch_DATA): Add it.
2016-11-09gnu: gcc@5, gcc@6: Work around use of 'movabs' for /gnu/store strings.Ludovic Courtès
Partly addresses <http://bugs.gnu.org/24703>. Reported by Mark H Weaver <mhw@netris.org>. * gnu/packages/patches/gcc-strmov-store-file-names.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/gcc.scm (gcc-5)[sources](patches): Add it. (gcc-6)[sources](patches): Add it.
2016-11-09gnu: libxslt: Fix CVE-2016-4738.Leo Famulari
* gnu/packages/patches/libxslt-CVE-2016-4738.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/xml.scm (libxslt)[replacement]: New field. (libxslt/fixed): New variable.
2016-11-08gnu: mupdf: Fix CVE-2016-{7504,7505,7506,7563,7564,9017,9136} in bundled mujs.Leo Famulari
* gnu/packages/patches/mupdf-CVE-2016-7504.patch, gnu/packages/patches/mupdf-CVE-2016-7505.patch gnu/packages/patches/mupdf-CVE-2016-7506.patch gnu/packages/patches/mupdf-CVE-2016-7563.patch gnu/packages/patches/mupdf-CVE-2016-7564.patch gnu/packages/patches/mupdf-CVE-2016-9017.patch gnu/packages/patches/mupdf-CVE-2016-9136.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/pdf.scm (mupdf)[source]: Use them.
2016-11-07Merge branch 'master' into core-updatesMark H Weaver
2016-11-06gnu: jansson: Update to 2.9.Leo Famulari
* gnu/packages/web.scm (jansson): Update to 2.9. [source]: Remove 'jansson-CVE-2016-4425.patch'. * gnu/packages/patches/jansson-CVE-2016-4425.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
2016-11-06gnu: lua: Update to 5.3.3.Marius Bakke
* gnu/packages/patches/lua52-liblua-so.patch: Rename to ... * gnu/packages/patches/lua-liblua-so.patch: ... this. Add version comment. * gnu/local.mk (dist_patch_DATA): Adjust patch name. * gnu/packages/lua.scm (lua): Update to 5.3.3. [source]: Use https URL. Use new patch name. [home-page]: Use https URL. (lua-5.2): New variable. (lua-5.1)[source]: Use https URL.
2016-11-06Merge branch 'master' into core-updatesMark H Weaver
2016-11-05gnu: weex: Update to 2.8.2 [fixes CVE-2005-3150].Leo Famulari
* gnu/packages/ftp.scm (weex): Update to 2.8.2. [source]: Use new URL. Remove obsolete 'weex-vacopy.patch'. [arguments]: Remove custom 'configure' phase and add 'bootstrap' phase. [native-inputs]: Add autoconf, automake, and gnu-gettext. * gnu/packages/patches/weex-vacopy.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
2016-11-04gnu: w3m: Switch to Debian's actively maintained fork of w3m.Kei Kebreau
Fixes some security issues seen here: <http://www.openwall.com/lists/oss-security/2016/11/03/3> * gnu/packages/w3m.scm (w3m): Switch it. [source]: Use Debian's git tree. Remove obsolete patches. [arguments]: Remove an unneeded substitute* function. * gnu/packages/patches/w3m-disable-sslv2-and-sslv3.patch, gnu/packages/patches/w3m-disable-weak-ciphers.patch, gnu/packages/patches/w3m-force-ssl_verify_server-on.patch, gnu/packages/patches/w3m-libgc.patch: Delete files. * gnu/local.mk (dist_patch_DATA): Remove them.
2016-11-04gnu: python-ipython: Update to 4.0.0.Ricardo Wurmus
* gnu/packages/python.scm (python-ipython): Update to 4.0.0. [inputs]: Keep only "readline" and "which"; move the remaining inputs to propagated-inputs, except for "python-requests" and "python-nose" which are moved to native-inputs. [propagated-inputs]: Add "python-pexpect", "python-pickleshare", "python-simplegeneric", "python-traitlets", "python-ipykernel". [native-inputs]: Add "python-testpath". [arguments]: Enable building of HTML documentation. [source]: Remove patch. * gnu/packages/patches/python-ipython-inputhook-ctype.patch: Remove patch. * gnu/local.mk (dist_patch_DATA): Remove it.
2016-11-04gnu: ola: Fix build failure caused by use of deprecated function.Leo Famulari
* gnu/packages/patches/ola-readdir-r.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/lighting.scm (ola)[source]: Use it.
2016-11-03[PATCH] gnu: Add libjxr.Kei Kebreau
* gnu/packages/image.scm (libjxr): New variable. * gnu/packages/patches/libjxr-fix-function-signature.patch: New file. * gnu/packages/patches/libjxr-fix-typos.patch: New file. * gnu/local.mk (dist_patch_DATA): Register patches.
2016-11-02Merge branch 'master' into core-updatesLeo Famulari
2016-11-01gnu: python-django: Update to 1.10.3 [fixes CVE-2016-{9013,9014}].Marius Bakke
* gnu/packages/django.scm (python-django, python2-django): Update to 1.10.3. [source]: Remove patch. * gnu/packages/patches/python-django-fix-testcase.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
2016-10-31gnu: icecat: Fix build with binutils >= 2.26.Leo Famulari
* gnu/packages/patches/icecat-binutils.patch: New patch. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/gnuzilla.scm (icecat)[source]: Use it.
2016-10-30Merge branch 'master' into core-updatesLeo Famulari
2016-10-30gnu: libtiff: Fix CVE-2016-5652.Leo Famulari
* gnu/packages/patches/libtiff-CVE-2016-5652.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (libtiff-fixed)[source]: Use it.
2016-10-29Merge branch 'master' into core-updatesLeo Famulari
2016-10-30gnu: Add openocd.Theodoros Foradis
* gnu/packages/embedded.scm (openocd): New variable. * gnu/packages/patches/openocd-nrf52.patch: New file. * gnu/local.mk (dist_patch_DATA): Add the patch.
2016-10-28Merge branch 'master' into core-updatesLeo Famulari
2016-10-28gnu: libwebp: Fix CVE-2016-9085.Leo Famulari
* gnu/packages/patches/libwebp-CVE-2016-9085.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (libwebp)[source]: Use it.
2016-10-27gnu: python-parse: Fix failing test.Efraim Flashner
* gnu/packages/python.scm (python-parse)[origin]: Add patch. * gnu/packages/patches/python-parse-too-many-fields.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it.
2016-10-26Merge branch 'master' into core-updatesLeo Famulari
2016-10-26gnu: perl-www-curl: Fix build failure.Leo Famulari
* gnu/packages/patches/perl-www-curl-remove-symbol.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/web.scm (perl-www-curl)[source]: Use it.
2016-10-26gnu: mupdf: Modify CVE-2016-8674 patch to apply to 1.9a.Marius Bakke
The fix from upstream did not apply cleanly due to many context changes. This was adapted by cloning mupdf 1.9a from git and fixing conflicts after applying our patches and cherry-picking upstream commit 1e03c06. This is a follow-up to 47a04fca999b91309d196afc9ebf4d8ac6f2083f. * gnu/packages/patches/mupdf-CVE-2016-8674.patch: Adapt to 1.9a.
2016-10-26gnu: notmuch: Update to 0.23.1.Marius Bakke
* gnu/packages/patches/notmuch-emacs-25-compatibility-fix.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it. * gnu/packages/mail.scm (notmuch): Update to 0.23.1. Remove patch.
2016-10-25gnu: mupdf: Fix CVE-2016-8674.Kei Kebreau
* gnu/packages/patches/mupdf-CVE-2016-8674.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/pdf.scm (mupdf): Use it.
2016-10-25gnu: coda: Remove bundled libraries.Thomas Danckaert
* gnu/packages/maths.scm (coda): Remove bundled libraries. [source]: Add patch and snippet to remove bundled zlib, pcre and expat. [inputs]: Add system zlib, pcre and expat. * gnu/packages/patches/coda-use-system-libs.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2016-10-24gnu: linux-libre@4.1: Update to 4.1.35.Mark H Weaver
* gnu/packages/linux.scm (linux-libre-4.1): Update to 4.1.35. Remove patch. * gnu/packages/patches/linux-libre-4.1-CVE-2016-5195.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
2016-10-24gnu: mesa: Fix 'wayland-egl-symbols-check' on MIPS.Mark H Weaver
* gnu/packages/patches/mesa-wayland-egl-symbols-check-mips.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/gl.scm (mesa)[source]: Add patch when building on MIPS.
2016-10-24gnu: Add hdf-eos2.Thomas Danckaert
* gnu/packages/maths.scm (hdf-eos2): New variable. * gnu/packages/patches/hdf-eos2-build-shared.patch: New file. * gnu/packages/patches/hdf-eos2-remove-gctp.patch: New file. * gnu/packages/patches/hdf-eos2-fortrantests.patch: New file. * gnu/local.mk (dist_patch_DATA): Add patches. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2016-10-23gnu: musl: Fix CVE-2016-8859.Leo Famulari
* gnu/packages/patches/musl-CVE-2016-8859.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/musl.scm (musl)[source]: Use it.
2016-10-23Merge branch 'master' into core-updatesMark H Weaver
2016-10-23gnu: hop: Update to 2.5.1.Efraim Flashner
* gnu/packages/scheme.scm (hop): Update to 2.5.1. [source]: Remove patch. * gnu/packages/patches/hop-bigloo-4.0b.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
2016-10-22gnu: linux-libre@4.1: Add fix for CVE-2016-5195.Mark H Weaver
* gnu/packages/patches/linux-libre-4.1-CVE-2016-5195.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/linux.scm (linux-libre-4.1): Add patch.
2016-10-21gnu: slim: Fix line numbers in slim-login.patch.Christopher Allan Webber
This was causing build failures. * gnu/packages/patches/slim-login.patch: Fix line numbers.
2016-10-20gnu: slim: Display login message.Eric Bavier
* gnu/packages/patches/slim-login.patch: New patch. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/display-managers.scm (slim)[source]: Use it.
2016-10-20gnu: slim: Do not reset session after failed login.Eric Bavier
* gnu/packages/patches/slim-reset.patch: New patch. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/display-managers.scm (slim)[source]: Use it.
2016-10-19gnu: openssh: Fix CVE-2016-8858.Leo Famulari
* gnu/packages/patches/openssh-memory-exhaustion.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/ssh.scm (openssh)[source]: Use it.
2016-10-19gnu: python-file: Work around "double encoding" bug in file@5.28.Leo Famulari
* gnu/packages/patches/python-file-double-encoding-bug.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/python.scm (python-file)[source]: Use it. (python2-file)[source]: Use the source of FILE directly, without the patch.
2016-10-19gnu: lftp: Update to 4.7.3.Tobias Geerinckx-Rice
* gnu/packages/ftp.scm (lftp): Update to 4.7.3. [source]: Use HTTPS. Remove patch. [arguments]: Add ‘disable-impure-tests’ phase. Add #:configure-flags with explicit location of readline headers. [home-page]: Use HTTPS. * gnu/packages/patches/lftp-dont-save-unknown-host-fingerprint.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
2016-10-19gnu: notmuch: Enable tests.Marius Bakke
* gnu/packages/patches/notmuch-emacs-25-compatibility-fix.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/mail.scm (notmuch)[source]: Use patch. [arguments]: Add verbose make flags. Add phase 'patch-notmuch-lib.el' to fix hard-coded /bin/sh. Add 'prepare-test-environment' phase to patch test shebangs and set environment. [native-inputs]: Change from 'emacs-minimal' to 'emacs-no-x'. Add dtach, gnupg, man, perl and which.
2016-10-19Merge branch 'master' into core-updatesMark H Weaver