Age | Commit message (Collapse) | Author |
|
|
|
cgit cannot serve patches with stable hashes, so store these patches
in-tree. cgit community discussion about this problem:
https://lists.zx2c4.com/pipermail/cgit/2017-February/003470.html
We pull the patches in-tree rather than strip cgit footers with fetchpatch
because per https://github.com/NixOS/nixpkgs/pull/61471#issuecomment-493218587
dependencies of fetchpatch cannot use fetchpatch.
Verification that the only difference between the live page, the
patch committed here, and the version cached under the old hash at
tarballs.nixos.org is the cgit version footer:
$ curl -s -L http://tarballs.nixos.org/sha256/"$(nix-hash --type sha256 --to-base16 0iw0lk0yhnhvfjzal48ij6zdr92mgb84jq7fwryy1hdhi47hhq64)" > Allow_input_files_to_be_missing_for_ed-style_patches.patch
$ diff -U0 --label cgit-live <( curl -s -L https://git.savannah.gnu.org/cgit/patch.git/patch/?id=b5a91a01e5d0897facdd0f49d64b76b0f02b43e1 ) Allow_input_files_to_be_missing_for_ed-style_patches.patch
--- cgit-live
+++ Allow_input_files_to_be_missing_for_ed-style_patches.patch 2020-01-29 17:22:00.077312937 -0800
@@ -32 +32 @@
-cgit v1.2.1
+cgit v1.0-41-gc330
$ curl -s -L http://tarballs.nixos.org/sha256/"$(nix-hash --type sha256 --to-base16 1bpy16n3hm5nv9xkrn6c4wglzsdzj3ss1biq16w9kfv48p4hx2vg)" > CVE-2018-1000156.patch
$ diff -U0 --label cgit-live <( curl -s -L https://git.savannah.gnu.org/cgit/patch.git/patch/?id=123eaff0d5d1aebe128295959435b9ca5909c26d ) CVE-2018-1000156.patch
--- cgit-live
+++ CVE-2018-1000156.patch 2020-01-29 17:23:41.021116969 -0800
@@ -210 +210 @@
-cgit v1.2.1
+cgit v1.0-41-gc330
|
|
This should be a behavior no-op, but it helps vulnix figure out that we
are up to date regarding security patches.
|
|
... to avoid the accidental gnupatch rebuild
|
|
vcunat is really sorry for not noticing this.
|
|
|
|
|
|
|
|
Refs:
https://nvd.nist.gov/vuln/detail/CVE-2018-6952
https://savannah.gnu.org/bugs/index.php?53133
|
|
HTTP -> HTTPS for:
- http://savannah.gnu.org/
- http://git.savannah.gnu.org/
- http://download.savannah.gnu.org/
- http://svn.savannah.gnu.org/
|
|
This is more clear, to separate test dependencies.
|
|
Want to get this out of here for 18.09, so it can be deprecated
thereafter.
|
|
|
|
fixes #39045
|
|
|
|
|
|
In anticipation of what I outline in #33599, I only simplify exactly those
`doCheck`s which are equal to `hostPlatform != buildPlatform`. I also stick a
comment next to them so I can grep for them later.
|
|
PR #26007 used these to avoid causing a mass rebuild. Now that we know
things work, we do that to clean up.
|
|
|
|
|
|
Potentially fixes CVE-2015-1196.
Signed-off-by: Edward O'Callaghan <eocallaghan@alterapraxis.com>
|
|
|
|
|
|
|
|
Fix gnused url.
|
|
Also disable the tests on FreeBSD.
http://hydra.nixos.org/build/3070072
|
|
Seems to build fine without it.
http://hydra.nixos.org/build/3053575
|
|
|
|
svn path=/nixpkgs/trunk/; revision=33892
|
|
at the time of building the stdenv (because there !(stdenv ? glibc)).
I changed that to stdenv.isDarwin, in a guess that it may work for those who
experienced problems with the last patch release.
svn path=/nixpkgs/branches/stdenv-updates/; revision=24171
|
|
svn path=/nixpkgs/branches/stdenv-updates/; revision=22851
|
|
svn path=/nixpkgs/branches/stdenv-updates/; revision=22042
|
|
After this, the 'bootstrap-tools' can be cross-built.
svn path=/nixpkgs/branches/stdenv-updates/; revision=20945
|
|
svn path=/nixpkgs/branches/stdenv-updates/; revision=19522
|
|
svn path=/nixpkgs/branches/stdenv-updates/; revision=19432
|
|
svn path=/nixpkgs/branches/stdenv-updates/; revision=19430
|
|
svn path=/nixpkgs/branches/stdenv-updates/; revision=19315
|
|
To be fixed some day, with a bug report to gnupatch if required.
svn path=/nixpkgs/branches/stdenv-updates/; revision=19286
|
|
svn path=/nixpkgs/branches/stdenv-updates/; revision=19260
|
|
svn path=/nixpkgs/trunk/; revision=16447
|
|
svn path=/nixpkgs/trunk/; revision=9201
|
|
URLs to http://nix.cs.uu.nl/dist/tarballs. With content-addressable
mirror support (r9190, NIXPKGS-70) this is no longer necessary:
fetchurl will try to download from that location automatically. So
we can keep the original URLs.
svn path=/nixpkgs/trunk/; revision=9192
|
|
* Some Nix expression simplifications. Sense and simplicity!
svn path=/nixpkgs/trunk/; revision=6836
|
|
svn path=/nixpkgs/trunk/; revision=6782
|
|
svn path=/nixpkgs/trunk/; revision=5705
|
|
* GCC 3.4.5.
* Updated several other stdenv packages.
* Modified the builders of several packages to use the generic
builder.
svn path=/nixpkgs/trunk/; revision=4336
|
|
svn path=/nixpkgs/trunk/; revision=4335
|
|
svn path=/nixpkgs/trunk/; revision=3660
|
|
gazillion different servers. Resurrected some 25 missing files.
svn path=/nixpkgs/trunk/; revision=2237
|
|
* Make builders unexecutable by removing the hash-bang line and
execute permission.
* Convert calls to `derivation' to `mkDerivation'.
* Remove `system' and `stdenv' attributes from calls to
`mkDerivation'. These transformations were all done automatically,
so it is quite possible I broke stuff.
* Put the `mkDerivation' function in stdenv/generic.
svn path=/nixpkgs/trunk/; revision=874
|