3
0
Fork 0
forked from mirrors/nixpkgs
Commit graph

123 commits

Author SHA1 Message Date
Alyssa Ross fd78240ac8
treewide: use lib.getLib for OpenSSL libraries
At some point, I'd like to make another attempt at
71f1f4884b ("openssl: stop static binaries referencing libs"), which
was reverted in 195c7da07d.  One problem with my previous attempt is
that I moved OpenSSL's libraries to a lib output, but many dependent
packages were hardcoding the out output as the location of the
libraries.  This patch fixes every such case I could find in the tree.
It won't have any effect immediately, but will mean these packages
will automatically use an OpenSSL lib output if it is reintroduced in
future.

This patch should cause very few rebuilds, because it shouldn't make
any change at all to most packages I'm touching.  The few rebuilds
that are introduced come from when I've changed a package builder not
to use variable names like openssl.out in scripts / substitution
patterns, which would be confusing since they don't hardcode the
output any more.

I started by making the following global replacements:

    ${pkgs.openssl.out}/lib -> ${lib.getLib pkgs.openssl}/lib
    ${openssl.out}/lib -> ${lib.getLib openssl}/lib

Then I removed the ".out" suffix when part of the argument to
lib.makeLibraryPath, since that function uses lib.getLib internally.

Then I fixed up cases where openssl was part of the -L flag to the
compiler/linker, since that unambigously is referring to libraries.

Then I manually investigated and fixed the following packages:

 - pycurl
 - citrix-workspace
 - ppp
 - wraith
 - unbound
 - gambit
 - acl2

I'm reasonably confindent in my fixes for all of them.

For acl2, since the openssl library paths are manually provided above
anyway, I don't think openssl is required separately as a build input
at all.  Removing it doesn't make a difference to the output size, the
file list, or the closure.

I've tested evaluation with the OfBorg meta checks, to protect against
introducing evaluation failures.
2022-03-30 15:10:00 +00:00
Renaud 944a2dc835
Treewide: fix some permanent redirects on homepages
(#153213)
Issue #60004
2022-01-03 16:53:12 +01:00
Andrew Childs 364e6e634b subversion: update libtool to fix build on aarch64-darwin 2021-05-27 14:01:54 +09:00
ajs124 1e7720531a subversion: 1.12.2 -> 1.14.1 2021-04-29 18:41:18 +02:00
Robert Scott c94fa93440 subversion: add patch for CVE-2020-17525 2021-04-24 20:31:07 +01:00
Rouven Czerwinski d18df82226 subversion: remove extraBuildInputs
No longer required since all subversion versions now share the same
buildInputs.
2021-04-19 16:54:11 +02:00
Thomas Gerbet b660a15ba8 subversion_1_10: 1.10.6 -> 1.10.7
Fixes CVE-2020-17525.

Release announcement:
https://lists.apache.org/thread.html/r86eb93bd4e12c126203f61e9bd42f9a3905117842b481d20e15fd61f%40%3Cannounce.subversion.apache.org%3E
2021-04-17 11:58:21 +02:00
Thomas Gerbet 550e69b745 subversion19: drop
Subversion 1.9 is EoL [0] and is affected by CVE-2020-17525.

[0] https://subversion.apache.org/roadmap.html#release-planning
2021-03-31 08:38:03 +02:00
Ben Siraphob badf51221d treewide: stdenv.lib -> lib 2021-01-16 17:58:11 +07:00
Profpatsch 4a7f99d55d treewide: with stdenv.lib; in meta -> with lib;
Part of: https://github.com/NixOS/nixpkgs/issues/108938

meta = with stdenv.lib;

is a widely used pattern. We want to slowly remove
the `stdenv.lib` indirection and encourage people
to use `lib` directly. Thus let’s start with the meta
field.

This used a rewriting script to mostly automatically
replace all occurances of this pattern, and add the
`lib` argument to the package header if it doesn’t
exist yet.

The script in its current form is available at
https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix
2021-01-11 10:38:22 +01:00
Aaron Andersen ccf0499170 subversion: 1.9.10 -> 1.9.12, 1.10.4 -> 1.10.6 2019-08-10 09:23:48 -04:00
R. RyanTM affde0f5a9 subversionClient: 1.12.0 -> 1.12.2
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/subversion-client/versions
2019-08-05 23:51:12 -07:00
Renaud ac63101188
subversion: fix configure missing APR_INT64_T_FMT
configurePhase fails when building Python bindings or subversionClient
> configure: error: failed to recognize APR_INT64_T_FMT on this platform

Adding "-P" CPPFLAG solves the issue.
See also: https://issues.apache.org/jira/browse/SVN-4813
2019-05-09 15:59:18 +02:00
c0bw3b 4f99ea8128 subversion: 1.11.1 -> 1.12.0
v1.12 is a regular release replacing v1.11
https://subversion.apache.org/docs/release-notes/1.12.html
https://subversion.apache.org/roadmap.html#release-planning
2019-05-08 12:19:34 +02:00
c0bw3b 78c545fe83 subversion19: 1.9.9 -> 1.9.10
https://subversion.apache.org/docs/release-notes/1.9
2019-05-08 12:09:54 +02:00
c0bw3b 1685f80b97 subversion18: remove because EOL
Subversion 1.8 is EOL since the publication of 1.10 in April 2018
https://subversion.apache.org/docs/release-notes/1.10.html#svn-1.8-deprecation
2019-05-08 11:56:22 +02:00
Andreas Rammhold a6bb05be45 subversion_1_10: 1.10.3 -> 1.10.4
bugfix release for CVE-2018-11803 [0].

[0] https://subversion.apache.org/security/CVE-2018-11803-advisory.txt
2019-03-20 13:37:03 +01:00
Jan Malakhovski 1b784e5f6f subversion: move defaults to package file 2019-02-03 15:30:36 +00:00
R. RyanTM cd055b2f58 subversionClient: 1.11.0 -> 1.11.1
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/subversion-client/versions
2019-01-16 04:00:13 -08:00
Tim Steinbach 1cfc2427c8
subversion: 1.9.7 -> 1.9.9 2018-11-07 20:25:57 -05:00
Tim Steinbach 451126ea6e
subversion: init 1.11.0 2018-11-07 20:22:03 -05:00
R. RyanTM c5e2470b2e subversionClient: 1.10.2 -> 1.10.3
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/subversion-client/versions
2018-10-14 09:01:06 +02:00
Jan Malakhovski cec9b2635b subversion: use checkInputs, make tests run, but them keep disabled 2018-08-11 09:35:34 +00:00
Frederik Rietdijk d9fa74ba78 Merge master into staging 2018-08-09 18:28:15 +02:00
Orivej Desh 42eca7ca2d subversion: add license 2018-08-09 02:48:06 +00:00
John Ericson 85a9913edd treewide: Make more complicated configureFlags lists 2018-08-03 17:06:03 -04:00
R. RyanTM b657f663ac subversion_1_10: 1.10.0 -> 1.10.2
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/subversion/versions.
2018-07-21 09:56:00 -07:00
Orivej Desh 97f6be5c90
subversion_1_10: init at 1.10.0 (#41383) 2018-06-02 02:50:38 +00:00
Jan Malakhovski 7438083a4d tree-wide: disable doCheck and doInstallCheck where it fails (the trivial part) 2018-04-25 04:18:46 +00:00
Piotr Bogdan 351b1ad8e2 subversion18: 1.8.18 -> 1.8.19
For CVE-2017-9800, see
https://subversion.apache.org/security/CVE-2017-9800-advisory.txt
2017-10-07 18:44:46 +01:00
Puneet Arora 14a7721454 subversion: 1.9.6 -> 1.9.7 (#28306) 2017-08-22 10:05:07 +00:00
Franz Pletz abd837fe3d
subversion19: 1.9.5 -> 1.9.6 for CVE-2017-9800
See https://subversion.apache.org/security/CVE-2017-9800-advisory.txt
2017-08-10 20:57:39 +02:00
Franz Pletz 0f5cbe43da
subversion18: 1.8.17 -> 1.8.18 for CVE-2017-9800
See https://subversion.apache.org/security/CVE-2017-9800-advisory.txt
2017-08-10 20:57:39 +02:00
Eelco Dolstra f6c73f1e37
subversion: Clean up more *.la files
This removes some -dev paths from the closure of subversionClient and
gitFull.
2017-03-20 17:31:10 +01:00
Tim Steinbach 1edf95167a
subversion: 1.8.16 -> 1.8.17 2016-12-14 09:35:10 -05:00
Tim Steinbach b139b17fa8
subversion: 1.9.4 -> 1.9.5 2016-12-14 09:30:31 -05:00
Eelco Dolstra 81447b6a59 subversion: Remove openssl.dev from the runtime closure 2016-09-26 19:58:57 +02:00
Tuomas Tynkkynen a17216af4c treewide: Shuffle outputs
Make either 'bin' or 'out' the first output.
2016-08-29 14:49:51 +03:00
Tuomas Tynkkynen 1bf5ded193 treewide: Lots of meta.hydraPlatforms -> meta.platforms
In all of these files, there is no meta.platforms but only
meta.hydraPlatforms, which doesn't seem to have any purpose except being
inconsistent.
2016-08-02 21:17:44 +03:00
Vladimír Čunát 0b192a0976 Merge branch 'master' into staging
That's to get mesa rebuild from master, as it's nontrivial.
2016-05-23 09:02:10 +02:00
Vladimír Čunát c4661e9643 Merge: make dev output references explicit
This is a rebase of most commits from #14766,
resolving conflicts and a few other evaluation problems.
2016-05-22 12:09:23 +02:00
Alexander Ried 9e073bd110 subversionClient: fix build with gcc5
fixes #15483
2016-05-20 14:38:14 +02:00
Tuomas Tynkkynen 7fb29bfa73 treewide: Make explicit that 'dev' output of zlib is used 2016-05-19 10:04:38 +02:00
Tuomas Tynkkynen e80e4ba2bb treewide: Make explicit that 'dev' output of sqlite is used 2016-05-19 10:04:34 +02:00
Tuomas Tynkkynen 16cc4ac83b treewide: Make explicit that 'dev' output of apacheHttpd is used 2016-05-19 10:00:23 +02:00
Pascal Wittmann 8029ee27b6 subversion: 1.9.3 -> 1.9.4 (fixes CVE-2016-2168, CVE-2016-2167) 2016-05-18 21:34:25 +02:00
Pascal Wittmann 032ba2d578 subversion: 1.8.15 -> 1.8.16 (fixes CVE-2016-2168, CVE-2016-2167) 2016-05-18 21:34:25 +02:00
Ricardo Ardissone 025ccbccd7 subversion: fix apr-1 linking 2016-04-30 12:13:26 -03:00
Vladimír Čunát ab15a62c68 Merge branch 'master' into closure-size
Beware that stdenv doesn't build. It seems something more will be needed
than just resolution of merge conflicts.
2016-04-01 10:06:01 +02:00
Evgeny Egorochkin 5db2d9366b subversion: fix hash 2016-03-21 12:47:54 +02:00