3
0
Fork 0
forked from mirrors/nixpkgs
Commit graph

997 commits

Author SHA1 Message Date
Dmitry Kalinkin ba13482494
pulumi-bin: use nativeBuildInputs 2020-04-22 14:17:16 -04:00
Mario Rodas dc4547f498
lxd: 4.0.0 -> 4.0.1 2020-04-21 18:00:00 -05:00
Jörg Thalheim f349aca12a
Merge pull request #85626 from filalex77/procs-0.10.0
procs: 0.9.20 -> 0.10.0
2020-04-20 18:20:58 +01:00
Oleksii Filonenko 7133c01a7a
procs: 0.9.20 -> 0.10.0 2020-04-20 19:15:05 +03:00
Emily 3112c0e7fa pebble: set maintainers to acme team 2020-04-20 01:39:31 +01:00
Emily f3c18b2420 lego: set maintainers to acme team 2020-04-20 01:39:31 +01:00
Emily 6285d5eabd pebble: v2.2.2 -> v2.3.0
Also add myself to maintainers and correct meta.homepage.
2020-04-18 05:15:47 +01:00
xrelkd 5905597f51 eksctl: 0.16.0 -> 0.17.0 2020-04-16 09:58:46 +08:00
Michael Reilly 84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
edef 7d4d98c227
Merge pull request #84412 from coderobe/patch-1
acme.sh: add bind.dnsutils to PATH
2020-04-10 16:08:01 +00:00
lewo a3d6e49554
Merge pull request #84703 from purcell/docker-credential-gcr-2
docker-credential-gcr: 1.4.3 -> 2.0.1
2020-04-09 09:18:44 +02:00
Samuel Leathers 72cb7f81fd
Merge pull request #81442 from manveru/bundler-2.1.4
bundler: 1.17.3 -> 2.1.4
2020-04-08 12:44:54 -04:00
Steve Purcell 07e003deb1 docker-credential-gcr: 1.4.3 -> 2.0.1 2020-04-08 21:12:55 +12:00
Jonathan Ringer 8ed6d14632 azure-cli: freeze azure-batch 2020-04-06 11:55:26 -07:00
Michael Fellinger f92600b406
update versions in Gemfile.lock 2020-04-06 15:02:13 +02:00
Robin B 2bc984ee86
acme.sh: fixup default.nix 2020-04-06 03:51:28 +02:00
Robin B 1d34740e0a
acme.sh: add bind.dnsutils to PATH
This is required for nsupdate
2020-04-06 02:45:01 +02:00
R. RyanTM 96c10499be eksctl: 0.15.0 -> 0.16.0 2020-04-05 12:06:59 +00:00
Frederik Rietdijk 866c5aa090 Merge master into staging-next 2020-04-05 08:33:39 +02:00
Kevin Cox 444801f739
Merge pull request #83830 from r-ryantm/auto-update/sewer
sewer: 0.7.9 -> 0.8.1
2020-04-04 08:42:23 -04:00
Marek Mahut b6dbef4759
Merge pull request #81196 from prusnak/certbot
certbot: 1.0.0 -> 1.3.0
2020-04-04 08:18:20 +02:00
Frederik Rietdijk 92124ed660 Merge master into staging-next 2020-04-03 21:54:40 +02:00
Mario Rodas 96658e95d1
lxd: 3.23 -> 4.0.0 2020-04-02 04:20:00 -05:00
Jan Tojnar 3e0f4e202f
Merge branch 'master' into staging-next 2020-03-31 21:32:15 +02:00
Jon 1b6e225f63
Merge pull request #83831 from r-ryantm/auto-update/python-swiftclient
swiftclient: 3.6.0 -> 3.9.0
2020-03-30 22:35:55 -07:00
R. RyanTM 2cc64684d0 swiftclient: 3.6.0 -> 3.9.0 2020-03-31 03:27:58 +00:00
R. RyanTM 51eed2c4c7 sewer: 0.7.9 -> 0.8.1 2020-03-31 03:18:25 +00:00
zowoq d67539de8a bubblewrap: 0.4.0 -> 0.4.1
https://github.com/containers/bubblewrap/releases/tag/v0.4.1
2020-03-31 00:21:48 +10:00
Frederik Rietdijk a36be028f5 Merge staging-next into staging 2020-03-28 21:15:15 +01:00
Jörg Thalheim 774ddebd87
Merge pull request #83472 from Mic92/propragate-darwin-go
Propragate darwin go
2020-03-28 06:57:59 +00:00
Florian Klink e1fc1d22f4 google-cloud-sdk: 281.0.0 -> 286.0.0 2020-03-27 18:09:05 +01:00
Jörg Thalheim 066db11215
Revert "Merge pull request #83099 from marsam/fix-buildGoModule-packages-darwin"
This reverts commit 4e6bf03504, reversing
changes made to afd997aab6.

Instead we propagate those frameworks from the compiler again
2020-03-27 07:33:21 +00:00
Mario Rodas d85b0f745e
lxd: 3.22 -> 3.23
Release notes: https://discuss.linuxcontainers.org/t/lxd-3-23-has-been-released/7140
2020-03-24 04:20:00 -05:00
Jonathan Ringer 08616dbcc3 azure-cli: freeze azure-mgmt-cognitiveservices package 2020-03-24 18:19:59 -07:00
Jonathan Ringer a306a8e3ec azure-cli: 2.1.0 -> 2.2.0 2020-03-24 12:13:46 -07:00
Jan Tojnar 986fbf4799
Merge branch 'staging-next' into staging 2020-03-24 01:51:55 +01:00
worldofpeace 37c62efad5
Merge pull request #81028 from mkg20001/ssh-import-id
ssh-import-id: init at 5.8
2020-03-23 15:50:54 -04:00
Orivej Desh 1b89aa3f7a Merge branch 'master' into staging 2020-03-23 00:53:16 +00:00
Mario Rodas 4e6bf03504
Merge pull request #83099 from marsam/fix-buildGoModule-packages-darwin
treewide: fix buildGoModule packages on darwin
2020-03-22 08:13:37 -05:00
Anders Kaseorg 1134b0bc6e
ansible: Use overridePythonAttrs to get the right name attribute (#83107)
Fixes #83105.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-03-22 03:09:42 -04:00
Mario Rodas cd50659071 lego: fix build on darwin 2020-03-21 05:37:00 -05:00
Mario Rodas 4f8836ee99 iamy: fix build on darwin 2020-03-21 05:04:00 -05:00
Mario Rodas da93b5a367 eksctl: fix build on darwin 2020-03-21 05:01:00 -05:00
Mario Rodas b47c4218bb clair: fix build on darwin 2020-03-21 04:45:00 -05:00
Mario Rodas 91aacecb69 berglas: fix build on darwin 2020-03-21 04:44:00 -05:00
Mario Rodas 1da05f29db awsweeper: fix build on darwin 2020-03-21 04:43:00 -05:00
Mario Rodas 9fe9b59757 certigo: fix build on darwin 2020-03-21 04:41:00 -05:00
Mario Rodas 798569a534 aws-vault: fix build on darwin 2020-03-21 04:37:00 -05:00
Jonathan Ringer 9c8565f731 azure-cli: use pythonNamespaces 2020-03-18 12:20:51 -07:00
Matthew Bauer 67b0ddf3f3 Merge remote-tracking branch 'origin/staging' into mb-cross-fixes-march-2020 2020-03-16 14:34:03 -04:00
Matthew Bauer c6b320a679
bubblewrap: put docbook_xsl, libxslt in nativeBuildInputs
Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>
2020-03-16 14:24:09 -04:00
Pavol Rusnak d07543a98c
certbot: 1.0.0 -> 1.3.0 2020-03-15 13:12:03 +01:00
R. RyanTM c6dd8929d6 eksctl: 0.13.0 -> 0.15.0 2020-03-14 23:30:49 +00:00
R. RyanTM 892827c0eb lego: 3.3.0 -> 3.4.0 2020-03-14 21:17:55 +00:00
R. RyanTM 98aa4da995
berglas: 0.5.0 -> 0.5.1 2020-03-14 15:54:07 +00:00
Izorkin fd0c7cc4ec lego: 3.4.0 -> 3.5.0 2020-03-16 20:12:10 +03:00
Jonathan Ringer fbafe7ca64 azure-cli: freeze azure-mgmt-rdms at 1.9.0 2020-03-15 15:15:44 -07:00
Mario Rodas d580deacec procs: 0.9.18 -> 0.9.20 2020-03-14 01:24:45 +00:00
Mario Rodas e6e040d573
Merge pull request #82494 from r-ryantm/auto-update/awsweeper
awsweeper: 0.4.1 -> 0.6.0
2020-03-13 18:49:10 -05:00
R. RyanTM ceee45c346 awsweeper: 0.4.1 -> 0.6.0 2020-03-13 15:13:56 +00:00
wucke13 5d21d99575 lxd: 3.18 -> 3.22 2020-03-13 10:32:30 +01:00
Benjamin Hipple df4ec15453
intecture-cli: upgrade cargo fetcher and cargoSha256 (#81982) 2020-03-08 19:18:22 -04:00
Benjamin Hipple c1a78b7928
intecture-agent: upgrade cargo fetcher and cargoSha256 (#81981) 2020-03-08 19:17:12 -04:00
Benjamin Hipple e9d492a896
intecture-auth: upgrade cargo fetcher and cargoSha256 (#81979) 2020-03-08 19:16:56 -04:00
Dillen Meijboom c4f5f95d8d
Updated and fixed libstdc++ issue 2020-03-06 10:05:27 +01:00
Matthew Bauer 8c3160b619 bubblewrap: use buildInputs instead of nativeBuildInputs
these are all libraries.
2020-03-05 20:41:46 -05:00
Benjamin Hipple c882a90bc6 procs: 0.9.11 -> 0.9.18 2020-03-05 01:30:08 -05:00
R. RyanTM 543c864f23
aws-google-auth: 0.0.33 -> 0.0.34 2020-03-01 09:16:22 +00:00
Mario Rodas ef97505059
certigo: 1.11.0 -> 1.12.1 2020-02-28 19:20:00 -05:00
Maciej Krüger 5214b7244c
ssh-import-id: init at 5.8 2020-02-26 13:15:33 +01:00
Leigh Perry 7c8351de97
google-cloud-sdk: 268.0.0 -> 281.0.0 (#80944) 2020-02-24 17:12:25 +00:00
Suraj Barkale 4aaab192a7
aws-vault: 4.5.1 to 5.3.2 (#80949)
The aws-vault development has switched to using go modules.
Therefore this package has also been updated to use `buildGoModule`
helper.
2020-02-24 12:08:05 +00:00
Aaron Olson 9b8a14bb7e
google-cloud-sdk: fix Darwin build by only stripping local symbols (#80554)
Darwin won't strip relocatable symbols, so strip only local symbols
from cygrpc.so

See also 6ceebc441c (commitcomment-37355193)
2020-02-21 17:28:54 +00:00
Jonathan Ringer 4dd173560d azure-cli: 2.0.81 -> 2.1.0 2020-02-20 20:22:33 -08:00
Frederik Rietdijk 9fede4c38e
Merge pull request #76279 from PsyanticY/s3bro
s3bro: init at 2.8
2020-02-18 18:37:24 +01:00
edef 5bda7e7fb2 google-cloud-sdk: remove gsutil test
The command module references the tests, and since all command modules
get imported at startup, dbaafbbf73
turned it into a startup crash.

Unless you're actively hacking on gsutil, this command isn't much use,
so we're better off without it.
2020-02-18 13:31:42 +00:00
edef 0c403efde9 google-cloud-sdk: disable checking for gsutil updates
The update checking mechanism references the tests, and thus
dbaafbbf73 turned it into a crash at
startup.

It isn't much use in nixpkgs, so we're better off without it.
2020-02-18 13:31:42 +00:00
Oleksii Filonenko f00f60ffbb procs: add filalex77 as a maintainer 2020-02-18 03:25:35 +02:00
Oleksii Filonenko 1e1ad96cf6 procs: 0.9.9 -> 0.9.11 2020-02-18 03:23:19 +02:00
Benjamin Hipple eb11feaa0b treewide: change fetchCargoTarball default to opt-out
Changes the default fetcher in the Rust Platform to be the newer
`fetchCargoTarball`, and changes every application using the current default to
instead opt out.

This commit does not change any hashes or cause any rebuilds. Once integrated,
we will start deleting the opt-outs and recomputing hashes.

See #79975 for details.
2020-02-13 22:41:37 -08:00
Mario Rodas d799e35079
procs: 0.9.6 -> 0.9.9 2020-02-13 04:20:00 -05:00
ahiaao f216b03d5b tigervnc: fix compatibility with xorgserver 1.20.7 2020-02-11 09:46:24 +01:00
Jonathan Ringer 3f7f043dea azure-cli: force PEP420 for azure-mgmt packages 2020-02-10 16:45:11 -08:00
Frederik Rietdijk ec3edaf7b5 Merge master into staging-next 2020-02-10 12:55:47 +01:00
Jonathan Ringer 259d76d541 azure-cli: 2.0.80 -> 2.0.81 2020-02-09 19:25:37 -08:00
Jonathan Ringer d26288a514 azure-cli: freeze azure-mgmt-policyinsights 2020-02-09 19:25:37 -08:00
Florian 50ad81d76b lexicon: init at 3.3.17 2020-02-09 16:57:57 +01:00
Frederik Rietdijk 65dcb3f08f python: awscli: 1.16.266 -> 1.17.13
We force the use of docutils 0.16. If this does not work out, we
can still override the version as this is an application.
2020-02-09 09:17:31 +01:00
Oleg Pykhalov 9405324531 mycli: Add paramiko as a propagated build input
Fixes error:

    Cannot use SSH transport because paramiko isn't installed, please
    install paramiko or don't use --ssh-host=
2020-02-06 20:03:01 +01:00
Ryan Mulligan ed762106d0
Merge pull request #79346 from r-ryantm/auto-update/procs
procs: 0.9.5 -> 0.9.6
2020-02-06 09:37:21 -08:00
R. RyanTM 1c0a1e2862 procs: 0.9.5 -> 0.9.6 2020-02-06 13:50:30 +00:00
Danylo Hlynskyi 437e1f69be
bash-my-aws: init at 20200111 (#76793)
* bash-my-aws: init at 20191231

Create bma-init

* Update
2020-02-05 22:37:52 +02:00
edef 6ceebc441c google-cloud-sdk: strip the Cython gRPC library
This reduces output size by 21 MiB.
2020-02-05 01:59:09 +00:00
edef b7641eaa5a google-cloud-sdk: compact all the JSON
This reduces output size by 20 MiB.
2020-02-05 01:59:09 +00:00
edef dbaafbbf73 google-cloud-sdk: remove tests directories
This reduces output size by 4.5 MiB.
2020-02-05 01:59:09 +00:00
edef c484d6376c google-cloud-sdk: remove crcmod_osx as well
Both third_party/crcmod_osx and third_party/crcmod are only used in the
PYTHONPATH, and we already replace them with dependencies from nixpkgs.
2020-02-05 01:59:09 +00:00
Jonathan Ringer 727abb55c7 azure-cli: freeze azure-mgmt-deploymentmanager 2020-02-02 09:43:05 -08:00
Frederik Rietdijk c195ef6aab
Merge pull request #78928 from NixOS/staging-next
Staging next
2020-02-02 15:35:18 +01:00
Mario Rodas 77f2d9bf1c
procs: 0.9.2 -> 0.9.5 2020-01-31 04:20:00 -05:00
Frederik Rietdijk 5cc0468a20 Merge staging into staging-next 2020-01-31 00:16:31 +01:00
Bruno Bigras 3922c927ab lego: 3.2.0 -> 3.3.0 2020-01-29 20:51:25 -05:00
xrelkd 5648d92acc eksctl: 0.12.0 -> 0.13.0 2020-01-29 03:24:07 +08:00
Frederik Rietdijk cdff57e1fc Merge staging-next into staging 2020-01-28 10:48:36 +01:00
Mario Rodas e39afd4095
procs: 0.9.0 -> 0.9.2 2020-01-26 04:20:00 -05:00
Mario Rodas 476a4fa40d
Merge pull request #78149 from talyz/nomachine-6.9.2
nomachine-client: 6.8.1 -> 6.9.2
2020-01-25 03:25:53 -05:00
Mario Rodas 4dbba7a143
procs: 0.8.16 -> 0.9.0 2020-01-23 09:00:00 -05:00
Jonathan Ringer 1474940ea4 ansible_2_8: 2.8.6 -> 2.8.7 2020-01-22 01:12:28 -08:00
Jonathan Ringer 3444d76c1b ansible_2_*: overridePythonAttrs -> overrideAttrs 2020-01-22 01:12:28 -08:00
Jonathan Ringer 99eb9231d4 ansible_2_9: init at 2.9.2 2020-01-22 01:12:28 -08:00
zimbatm f8df74be4b
vncdo: fix build 2020-01-21 13:16:01 +01:00
talyz 62af7804ef nomachine-client: 6.8.1 -> 6.9.2 2020-01-21 10:29:39 +01:00
Mario Rodas 949c5f8451
Merge pull request #78068 from r-ryantm/auto-update/acme.sh
acme-sh: 2.8.3 -> 2.8.5
2020-01-20 07:36:58 -05:00
R. RyanTM 02fad0d598 acme-sh: 2.8.3 -> 2.8.5 2020-01-20 03:00:35 +00:00
Mario Rodas 30a7902609
sewer: enable on darwin 2020-01-19 04:20:00 -05:00
Mario Rodas fc408d55e6 sewer: 0.7.3 -> 0.7.9 2020-01-19 04:20:00 -05:00
R. RyanTM d97a34cfcf sewer: 0.7.0 -> 0.7.3 2020-01-17 10:44:46 +00:00
Robin Gloster aa489adfd8
Merge pull request #77686 from alyssais/urllib3
Revert "Re-revert "awscli: Get rid of runtime -dev dependencies""
2020-01-17 00:38:52 +01:00
Mario Rodas 5f586605df
Merge pull request #77670 from amarrella/update/eksctl
eksctl: 0.11.1 -> 0.12.0
2020-01-14 21:49:58 -05:00
Alyssa Ross 76af9e8438
Revert "Re-revert "awscli: Get rid of runtime -dev dependencies""
This reverts commit a1eacb900e.

Adding dev outputs to python packages means they can't be included in
a Python environment created with python3.withPackages, because
makePythonPath will include the dev output, which is empty apart from
nix-support, rather than the out output, which contains all the Python
code.
2020-01-14 16:00:00 +00:00
Alessandro Marrella 730371336b
eksctl: 0.11.1 -> 0.12.0 2020-01-14 11:55:10 +00:00
Jonathan Ringer 32b5c579b0 azure-cli: 2.0.79 -> 2.0.80 2020-01-13 14:27:30 -08:00
Tom Bereknyei 621bb74bd8 Update 2020-01-11 19:54:23 -05:00
edef 178ac3cb99 google-cloud-sdk: include openssl(1) in PATH (#77277)
Otherwise, it might fail with a mysterious error:

    ERROR: (gcloud.beta.compute.reset-windows-password) Your platform does not support OpenSSL.
2020-01-10 09:42:37 +00:00
Jonathan Ringer 26aa690447 azure-cli: 2.0.78 -> 2.0.79 2020-01-09 10:09:02 -08:00
Jonathan Ringer 94dea31ea2 azure-cli: freeze azure-mgmt-iotcentral 2020-01-09 10:09:02 -08:00
worldofpeace dfd115a116 swiftclient: add setuptools
Traceback (most recent call last):
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/bin/.swift-wrapped", line 7, in <module>
    from swiftclient.shell import main
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/__init__.py", line 20, in <module>
    from .client import *  # noqa
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/client.py", line 33, in <module>
    from swiftclient import version as swiftclient_version
  File "/nix/store/8qkdlyv2ckrimvi50qvl0anzv66jcp2j-python-swiftclient-3.6.0/lib/python3.7/site-packages/swiftclient/version.py", line 15, in <module>
    import pkg_resources
ModuleNotFoundError: No module named 'pkg_resources'
2020-01-08 11:06:47 -05:00
Simonas Kazlauskas 0320725e86 berglas: 0.2.1 -> 0.5.0 2020-01-07 14:20:10 +02:00
Tom Bereknyei e5208af780 bash-my-aws: init at 20191231
Create bma-init
2020-01-01 14:53:15 -05:00
Maximilian Bosch 839c0ea7a5
treewide: *Inputs are flat lists 2019-12-31 01:10:02 +01:00
Robin Gloster 760e23136a
treewide: *inputs are lists 2019-12-31 01:09:25 +01:00
Jonathan Ringer 8043df949b aws_shell: fix dep issues 2019-12-30 16:46:51 +01:00
Jonathan Ringer fe058ee1ed awscli: fix build 2019-12-30 16:46:51 +01:00
Jonathan Ringer e1bb62f9bc azure-cli: 2.0.77 -> 2.0.78 2019-12-30 16:46:50 +01:00
Jan Tojnar a69e309794
Merge branch 'staging-next' into staging 2019-12-30 05:24:03 +01:00
Florian Klink 0aa09d3c75 simpl_le: 0.16.0 -> 0.17.0 2019-12-29 19:30:31 +01:00
Florian Klink d07796b871 certbot: 0.39.0 -> 1.0.0 2019-12-29 19:30:31 +01:00
Frederik Rietdijk 5aed91512d Merge staging-next into staging 2019-12-29 10:20:05 +01:00
Maximilian Bosch fa28c7750a
Merge pull request #76442 from r-ryantm/auto-update/tigervnc
tigervnc: 1.10.0 -> 1.10.1
2019-12-26 20:31:01 +01:00
Jan Tojnar 4bbc6cc66f
Merge branch 'staging-next' into staging 2019-12-25 05:18:52 +01:00
R. RyanTM e91f467811 tigervnc: 1.10.0 -> 1.10.1 2019-12-24 12:01:35 -08:00
PsyanticY c82658ac4a s3bro: init at 2.8 2019-12-23 17:18:23 +01:00
Mario Rodas 2f2047c378
Merge pull request #75196 from r-ryantm/auto-update/bubblewrap
bubblewrap: 0.3.3 -> 0.4.0
2019-12-22 18:11:52 -05:00
Mario Rodas 932f5f6b88
clair: 2.0.9 -> 2.1.2 2019-12-22 00:00:00 -05:00
Terje Larsen 7a99d1e392
awscli: pin colorama to 0.4.1
This is pinned to 0.4.1 in the upstream awscli package.
2019-12-20 14:23:12 +01:00
Mario Rodas b066646e04
docker-credential-helpers: init at 0.6.3 2019-12-15 18:18:18 -05:00
Andreas Rammhold b21b92947e ansible_2_6: 2.6.17 -> 2.6.20
This addresses the following security issues:

  * CVE-2019-14846 - Several Ansible plugins could disclose aws
    credentials in log files. inventory/aws_ec2.py, inventory/aws_rds.py,
    lookup/aws_account_attribute.py, and lookup/aws_secret.py,
    lookup/aws_ssm.py use the boto3 library from the Ansible process. The
    boto3 library logs credentials at log level DEBUG. If Ansible's
    logging was enabled (by setting LOG_PATH to a value) Ansible would set
    the global log level to DEBUG. This was inherited by boto and would
    then log boto credentials to the file specified by LOG_PATH. This did
    not affect aws ansible modules as those are executed in a separate
    process. This has been fixed by switching to log level INFO
  * Convert CLI provided passwords to text initially, to prevent unsafe
    context being lost when converting from bytes->text during post
    processing of PlayContext. This prevents CLI provided passwords from
    being incorrectly templated (CVE-2019-14856)
  * properly hide parameters marked with no_log in suboptions when
    invalid parameters are passed to the module (CVE-2019-14858)
  * resolves CVE-2019-10206, by avoiding templating passwords from
    prompt as it is probable they have special characters.
  * Handle improper variable substitution that was happening in
    safe_eval, it was always meant to just do 'type enforcement' and have
    Jinja2 deal with all variable interpolation. Also see CVE-2019-10156

Changelog: 9bdb89f740/changelogs/CHANGELOG-v2.6.rst
2019-12-15 21:25:07 +01:00
Andreas Rammhold 64e2791092 ansible_2_7: 2.7.11 -> 2.7.15
This fixes the following security issues:
  * Ansible: Splunk and Sumologic callback plugins leak sensitive data
    in logs (CVE-2019-14864)
  * CVE-2019-14846 - Several Ansible plugins could disclose aws
    credentials in log files. inventory/aws_ec2.py, inventory/aws_rds.py,
    lookup/aws_account_attribute.py, and lookup/aws_secret.py,
    lookup/aws_ssm.py use the boto3 library from the Ansible process. The
    boto3 library logs credentials at log level DEBUG. If Ansible's
    logging was enabled (by setting LOG_PATH to a value) Ansible would set
    the global log level to DEBUG. This was inherited by boto and would
    then log boto credentials to the file specified by LOG_PATH. This did
    not affect aws ansible modules as those are executed in a separate
    process. This has been fixed by switching to log level INFO
  * Convert CLI provided passwords to text initially, to prevent unsafe
    context being lost when converting from bytes->text during post
    processing of PlayContext. This prevents CLI provided passwords from
    being incorrectly templated (CVE-2019-14856)
  * properly hide parameters marked with no_log in suboptions when invalid
    parameters are passed to the module (CVE-2019-14858)
  * resolves CVE-2019-10206, by avoiding templating passwords from
    prompt as it is probable they have special characters.
  * Handle improper variable substitution that was happening in
    safe_eval, it was always meant to just do 'type enforcement' and have
    Jinja2 deal with all variable interpolation. Also see CVE-2019-10156

Changelog: 0623dedf2d/changelogs/CHANGELOG-v2.7.rst (v2-7-15)
2019-12-15 21:24:59 +01:00
itsHMR a46e3ebae5 tigervnc: add perl to buildInputs (#75367)
tigervnc ships vncserver, quote from the documentation:
vncserver - a wrapper script which makes starting Xvnc more convenient vncserver requires Perl.
2019-12-14 18:06:01 +01:00
Jonathan Ringer 8f8d977f2a azure-cli: freeze azure-mgmt-recoveryservicesbackup 2019-12-10 18:28:21 -08:00
Sarah Brofeldt b6a61da54e
Merge pull request #75290 from marsam/update-awsweeper
awsweeper: init at 0.4.1
2019-12-09 17:02:02 +01:00