From 2cd8036a5f9cf132d87552319833c25b58a46295 Mon Sep 17 00:00:00 2001 From: Jeff Huffman Date: Mon, 30 Jan 2023 21:58:09 -0500 Subject: [PATCH 1/5] puddletag: fix wrapping (cherry picked from commit e608e04f3c5d1db8f583eb053ad7d6b6aca80ae4) --- pkgs/applications/audio/puddletag/default.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/applications/audio/puddletag/default.nix b/pkgs/applications/audio/puddletag/default.nix index 705820950b0d..128d5c59c78e 100644 --- a/pkgs/applications/audio/puddletag/default.nix +++ b/pkgs/applications/audio/puddletag/default.nix @@ -62,6 +62,7 @@ python3.pkgs.buildPythonApplication rec { # the file should be executable but it isn't so our wrapper doesn't run preFixup = '' chmod 555 $out/bin/puddletag + wrapQtApp $out/bin/puddletag ''; doCheck = false; # there are no tests From ee0a430df48e3e28389bc40ee00ca4e7ea59c89f Mon Sep 17 00:00:00 2001 From: Michael Weiss Date: Thu, 16 Feb 2023 20:39:01 +0100 Subject: [PATCH 2/5] chromium: 110.0.5481.77 -> 110.0.5481.100 https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_14.html (cherry picked from commit 0419385c7fe35823581ee5b2505afeb2c6c09b6a) --- .../browsers/chromium/upstream-info.json | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/pkgs/applications/networking/browsers/chromium/upstream-info.json b/pkgs/applications/networking/browsers/chromium/upstream-info.json index 830239076d4a..2c86bfc42d44 100644 --- a/pkgs/applications/networking/browsers/chromium/upstream-info.json +++ b/pkgs/applications/networking/browsers/chromium/upstream-info.json @@ -1,8 +1,8 @@ { "stable": { - "version": "110.0.5481.77", - "sha256": "1kl1k29sr5qw8pg7shvizw4b37fxjlgah56p57kq641iqhnsnj73", - "sha256bin64": "0jjdgfps6siy9hk2r553vvh0jmkn987ad77sv2zqs9gvx0vsrwgp", + "version": "110.0.5481.100", + "sha256": "0czn47gbyp91z6jfgssr2izhg096fm4h26q1i2i42b0z1ilhv1vd", + "sha256bin64": "11g71rr7fcp2bybd9z19lb8pb29yqscffkzn4ybjbhbvd74s4pjr", "deps": { "gn": { "version": "2022-12-12", @@ -12,10 +12,10 @@ } }, "chromedriver": { - "version": "110.0.5481.30", - "sha256_linux": "08j28ahyahlgmy67hcm8b1vd4kilvf2yvc25746a46gdf8zz0nmw", - "sha256_darwin": "0xlq0fi9g15yvd6ysqcfkxpbr37av32h0f3af9vxl8vbywjfsxn4", - "sha256_darwin_aarch64": "03j47ha9janbawbjxy9n84sx70iisk6qr0bvb218cq5j1d5x058b" + "version": "110.0.5481.77", + "sha256_linux": "1bdc4n9nz3m6vv0p4qr9v65zarbnkrbh21ivpvl7y7c25m7fxl20", + "sha256_darwin": "1scv9vvy5ybgbgycyz2wrymjhdqnvz0m6lxkax107437anxixs00", + "sha256_darwin_aarch64": "0gqayzhlif6hvsmpx04mxr1bld6kirv5q1n5dg42rc16gv954dkn" } }, "beta": { From 210e9789a603dbd45406ab1529cfe9506a543200 Mon Sep 17 00:00:00 2001 From: Michael Weiss Date: Thu, 16 Feb 2023 20:33:41 +0100 Subject: [PATCH 3/5] ungoogled-chromium: 110.0.5481.78 -> 110.0.5481.100 (cherry picked from commit 488184caef263d6e3d17ed51201abd4e2b2787cd) --- .../networking/browsers/chromium/upstream-info.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pkgs/applications/networking/browsers/chromium/upstream-info.json b/pkgs/applications/networking/browsers/chromium/upstream-info.json index 830239076d4a..551c9e80c7d3 100644 --- a/pkgs/applications/networking/browsers/chromium/upstream-info.json +++ b/pkgs/applications/networking/browsers/chromium/upstream-info.json @@ -45,9 +45,9 @@ } }, "ungoogled-chromium": { - "version": "110.0.5481.78", - "sha256": "1m67xfdgggaan09xsbppna209b8sm882xq587i0hsnnnzb3fdxdj", - "sha256bin64": null, + "version": "110.0.5481.100", + "sha256": "0czn47gbyp91z6jfgssr2izhg096fm4h26q1i2i42b0z1ilhv1vd", + "sha256bin64": "11g71rr7fcp2bybd9z19lb8pb29yqscffkzn4ybjbhbvd74s4pjr", "deps": { "gn": { "version": "2022-12-12", @@ -56,8 +56,8 @@ "sha256": "1b5fwldfmkkbpp5x63n1dxv0nc965hphc8rm8ah7zg44zscm9z30" }, "ungoogled-patches": { - "rev": "110.0.5481.78-1", - "sha256": "1ffb2wf1bdmzlxk4ih8qq439jzqz17f8nchvx7na52y48am1qr3c" + "rev": "110.0.5481.100-1", + "sha256": "02bmlx2wk9jiqm4az7g8r5ycmpgm5pkb7nivpx2jbmrb0g3qcx9q" } } } From 788d485637f3a7490cb2af7e790efc70ddfb48c5 Mon Sep 17 00:00:00 2001 From: Arjan Schrijver Date: Fri, 17 Feb 2023 09:21:40 +0100 Subject: [PATCH 4/5] clamav: 1.0.0 -> 1.0.1 Fixes critical RCE (CVSS score 9.8): https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html (cherry picked from commit da293b7a0f1683044ff8fd3eabba3bc5c0b1ae1c) --- pkgs/tools/security/clamav/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/tools/security/clamav/default.nix b/pkgs/tools/security/clamav/default.nix index e9e6314f2015..aa8c68382a39 100644 --- a/pkgs/tools/security/clamav/default.nix +++ b/pkgs/tools/security/clamav/default.nix @@ -6,11 +6,11 @@ stdenv.mkDerivation rec { pname = "clamav"; - version = "1.0.0"; + version = "1.0.1"; src = fetchurl { url = "https://www.clamav.net/downloads/production/${pname}-${version}.tar.gz"; - hash = "sha256-vaObuFaQLm3WB36jE6Pri+zNSH4AgqlZF4d/Kymc2G4="; + hash = "sha256-CHLcG4L/TNfo5DI/r17kGh9mroCGXQVCkIW5RjVdhu4="; }; patches = [ From d549d78a5adbccad0c4fe33bcefcd1a2e4ed7ac8 Mon Sep 17 00:00:00 2001 From: Ingo Blechschmidt Date: Fri, 17 Feb 2023 13:40:00 +0100 Subject: [PATCH 5/5] yt-dlp: 2023.1.6 -> 2023.2.17 (cherry picked from commit 2b71a590f45f6737d42fcf057914360f1d333473) --- pkgs/tools/misc/yt-dlp/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/tools/misc/yt-dlp/default.nix b/pkgs/tools/misc/yt-dlp/default.nix index f99632fac2de..09771083f1c4 100644 --- a/pkgs/tools/misc/yt-dlp/default.nix +++ b/pkgs/tools/misc/yt-dlp/default.nix @@ -20,11 +20,11 @@ buildPythonPackage rec { # The websites yt-dlp deals with are a very moving target. That means that # downloads break constantly. Because of that, updates should always be backported # to the latest stable release. - version = "2023.1.6"; + version = "2023.2.17"; src = fetchPypi { inherit pname version; - sha256 = "sha256-Ong6NnUc7RY2j0CzuoZas5swaJ7YBW8e4jRqo4OaCw8="; + sha256 = "sha256-mvkt5e/8GTvbUSFtnr8oh02WGA0gL651Kw2fKmM4Dzo="; }; propagatedBuildInputs = [ brotli certifi mutagen pycryptodomex websockets ];