Commit graph

9537 commits

Author SHA1 Message Date
Julien Dehos
d49902e03a
pfstools: 1.8.5 -> 2.0.5 2016-07-25 05:00:23 +02:00
Arseniy Seroka
88a89dedc6 Merge pull request #17211 from DamienCassou/offlineimap-7.0.0
offlineimap: 6.7.0.2 -> 7.0.0
2016-07-24 15:45:00 +04:00
Tobias Geerinckx-Rice
d21727991b
zpaq: 7.13 -> 7.14 2016-07-23 21:44:09 +02:00
Tobias Geerinckx-Rice
7c84bd121a
dropbear: 2016.73 -> 2016.74
Security fixes:
- Message printout was vulnerable to format string injection
- dropbearconvert import of OpenSSH keys could run arbitrary code
  as the local dropbearconvert user when parsing malicious key
  files
- dbclient could run arbitrary code as the local dbclient user if
  particular -m or -c arguments are provided
- dbclient or dropbear server could expose process memory to the
  running user if compiled with DEBUG_TRACE and running with -v

Fixes:
- Fix port forwarding failure when connecting to domains that have
  both IPv4 and IPv6 addresses. The bug was introduced in 2015.68
- Fix 100% CPU use while waiting for rekey to complete
2016-07-23 21:29:51 +02:00
Damien Cassou
0f6b69b46e offlineimap: 6.7.0.2 -> 7.0.0 2016-07-23 18:59:01 +02:00
mimadrid
2ac6dda96e
xarchiver: 0.5.4.6 -> 0.5.4.7 2016-07-23 13:18:42 +02:00
Tuomas Tynkkynen
77a73115cd chrony: Tweak meta
- "repository" -> "repositories"
- reflow longDescription
2016-07-23 13:36:37 +03:00
Tuomas Tynkkynen
eb4d37cde2 haka: Fix typo 2016-07-23 13:32:04 +03:00
obadz
70a2278e18 ecryptfs-helper: add meta 2016-07-23 00:24:19 +01:00
obadz
fd5cdca916 ecryptfs-helper: init at 20160722 2016-07-23 00:19:34 +01:00
Daiderd Jordan
e8343fbb38 Merge pull request #17137 from romildo/new.connman-notify
connman-notify: init at 2014-06-23
2016-07-23 00:36:11 +02:00
mimadrid
0a9eba2aa4
htop: 2.0.1 -> 2.0.2 2016-07-23 00:03:34 +02:00
Graham Christensen
0cbea742ab Merge pull request #17175 from DamienCassou/offlineimap-6.7.0.2
offlineimap: 6.7.0.1 -> 6.7.0.2
2016-07-22 15:44:42 +00:00
Damien Cassou
24e632b242 offlineimap: 6.7.0.1 -> 6.7.0.2 2016-07-22 17:12:57 +02:00
Eelco Dolstra
390b49a3e7 Merge pull request #17130 from srp/nixos-container-kill
nixos-container: add 'kill' command, 'destroy' to use 'kill'
2016-07-22 11:19:29 +02:00
Tobias Geerinckx-Rice
0d7da216be Merge pull request #17166 from peterhoeg/bully
bully: new upstream
2016-07-22 07:45:10 +02:00
Peter Hoeg
729bc134ea bully: new upstream 2016-07-22 13:08:16 +08:00
Scott R. Parish
60c6c7bc9a nixos-container: add 'kill' command, 'destroy' to use 'kill'
Using 'machinectl kill' is much faster then gracefully stopping the
container.

In the case of 'destroy', since we're destroying it anyway, there's no
reason to do a graceful shutdown.
2016-07-21 14:58:05 -07:00
zimbatm
1018a00b89 Merge pull request #17149 from grahamc/k0001-weighttp-sha256
weighttp: 0.3 -> 0.4
2016-07-21 20:18:50 +01:00
Renzo Carbonara
8859fd948a
weighttp: 0.3 -> 0.4
cgit doesn't generate stable archives, so the SHA changed when there
was a commit earlier this year. Using fetchgit in hopes of stabilizing
the checked out sha.
2016-07-21 08:26:39 -05:00
Jun Hao
5535d94394 tmux: remove bin output to avoid cycle reference on OSX. fix #17092 2016-07-21 19:21:35 +08:00
Tuomas Tynkkynen
212dd434ec atftp: 0.7 -> 0.7.1 2016-07-21 07:22:17 +03:00
Franz Pletz
2ce60ead60 zerotierone: fix evaluation 2016-07-21 04:56:19 +02:00
José Romildo Malaquias
38d896aeee connman-notify: init at 2014-06-23 2016-07-20 22:44:55 -03:00
Rok Garbas
cd25b04dbb Merge pull request #16600 from artuuge/cpp_ethereum
cpp_ethereum: init at 1.2.9
2016-07-21 01:39:04 +02:00
Rok Garbas
227bf69b00 Merge pull request #16597 from jokogr/biber-2.5
biber: 2.4 -> 2.5
2016-07-21 01:27:35 +02:00
Rok Garbas
e2f6c6b9d2 Merge pull request #16620 from zimbatm/ronn-0.7.3
Ronn 0.7.3
2016-07-21 01:23:06 +02:00
cransom
4a9b640f37 smokeping: init at 2.6.11 (#17090)
Includes a module for service setup and a test
to verify functionality of both service and pkg.
2016-07-21 01:07:59 +02:00
Joachim F
33932304e1 Merge pull request #17093 from Ralith/qt5ct
qt5ct: init at 0.24
2016-07-20 09:08:27 +02:00
Benjamin Saunders
fcfec7507b qt5ct: init at 0.24 2016-07-19 21:49:20 -07:00
Tuomas Tynkkynen
584b667efc ddrescue: lzip is a nativeBuildInput 2016-07-20 02:38:10 +03:00
Rob Vermaas
48c32dc0b7 nixops: update to 1.4
(cherry picked from commit 9909d31602f6242259bcf7d31e88107fa5f1fb5f)
2016-07-19 14:33:52 +00:00
Frederik Rietdijk
46378eb128 hdf5: propagate optional zlib dependency 2016-07-19 14:12:13 +02:00
Carl Sverre
b54009fdfb keybase-go: init at 1.0.16 (#17094)
Build the official keybase go client from source.  The client includes both a
CLI for performing keybase operations and a service which will start
automatically when needed.

Keybase is a service which combines social proof with encryption.  Learn more at
their site: http://keybase.io
2016-07-19 12:34:51 +02:00
Franz Pletz
7f49fbb0ef Merge pull request #16574 from womfoo/update/nip2
vips: 8.2.2 -> 8.3.1 and dependency nip2: 8.0 -> 8.3.0
2016-07-19 11:12:02 +02:00
Miguel Madrid
c09338d037 p7zip: 15.14.1 -> 16.02 (#17025) 2016-07-19 09:25:35 +02:00
Eric Merritt
eb92804f91 nixos-containers: init package (#16959)
This moves nixos-containers into its own package so that it can be
relied upon by other packages/systems. This should make development
using dynamic containers much easier.
2016-07-19 08:13:06 +02:00
Kranium Gikos Mendoza
60624a4625 nasty: add large file support (#17011)
also fixes i686 build as a side-effect
2016-07-19 01:47:33 +02:00
Stephen Whitmore
d8516b0fe3 youtube-dl: 2016.07.09.2 -> 2016.07.17 2016-07-18 09:50:51 -07:00
Graham Christensen
32744b72e5 disper: repair missing libXrandr and libX11 dependencies 2016-07-18 15:10:37 +02:00
Miguel Madrid
dc05af3284 fzf: 0.13.2 -> 0.13.3 (#17013) 2016-07-18 06:36:35 +02:00
Franz Pletz
9117d20b45 sslscan: 1.11.5 -> 1.11.7, fixes darwin build 2016-07-17 17:15:24 +02:00
Franz Pletz
08c65bc68b gti: Fix build on darwin 2016-07-17 17:15:24 +02:00
Franz Pletz
eacabb9993 shncpd: init at 2016-06-22 2016-07-17 17:15:23 +02:00
Franz Pletz
8a6fce5431 ndjbdns: 1.05.9 -> 1.06 2016-07-17 17:15:23 +02:00
Eelco Dolstra
018d674354 Merge pull request #17024 from mimadrid/update/sudo-1.8.17p1
sudo: 1.8.16 -> 1.8.17p1
2016-07-17 13:29:11 +02:00
Eelco Dolstra
211bed46c4 Merge pull request #17004 from rickynils/openssh_privsep_dir
openssh: Use the default privilege separation dir (/var/empty)
2016-07-17 13:28:44 +02:00
Joachim Fasting
6d35e0259c
minisign: use fetchFromGitHub and set meta.platforms 2016-07-17 11:39:01 +02:00
mimadrid
a311b06919
sudo: 1.8.16 -> 1.8.17p1 2016-07-16 23:46:42 +02:00
Joachim F
5c837e952d Merge pull request #17001 from womfoo/fix/vtun
vtun: add debian gcc5 fix
2016-07-16 21:26:50 +02:00
Aristid Breitkreuz
a84d20a351 Merge pull request #17010 from mimadrid/update/ethtool-4.6
ethtool: 4.5 -> 4.6
2016-07-16 20:35:25 +02:00
Benno Fünfstück
5e5165ec6f platinum-searcher: 2.1.1 -> 2.1.3 2016-07-16 17:07:14 +02:00
Kranium Gikos Mendoza
16cc4dd3a3 vtun: add debian gcc5 fix 2016-07-16 21:07:21 +08:00
mimadrid
018f4eb164
ethtool: 4.5 -> 4.6 2016-07-16 15:04:31 +02:00
Joachim F
ed50ef318b Merge pull request #15848 from matthewbauer/packagekit
Add in PackageKit
2016-07-16 13:29:08 +02:00
Joachim F
0fdd630965 Merge pull request #16726 from womfoo/bump/proxychains-4.2.0
proxychains: 4.0.1-head -> 4.2.0
2016-07-16 13:19:26 +02:00
Nikolay Amiantov
d936272b79 Merge branch 'master' into staging 2016-07-16 13:36:27 +03:00
Lancelot SIX
00e8e4c2ed gnupg21: 2.1.13 -> 2.1.14
See announcement at
http://lists.gnu.org/archive/html/info-gnu/2016-07/msg00005.html
2016-07-16 11:53:50 +02:00
Rickard Nilsson
4f8f1c30cb openssh: Use the default privilege separation dir (/var/empty)
(This is a rewritten version of the reverted commit
a927709a35, that disables the creation of
/var/empty during build so that sandboxed builds also works. For more
context, see https://github.com/NixOS/nixpkgs/pull/16966)

If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-16 10:15:58 +02:00
mimadrid
8856cfa619
xarchiver: 0.5.4 -> 0.5.4.6 2016-07-15 18:23:26 +02:00
Frederik Rietdijk
2e986016d0 Merge pull request #16946 from phanimahesh/fix-16198
Fix typo: s/propogate/propagate/
2016-07-15 15:00:01 +02:00
Bjørn Forsman
2ad0a84751 Revert "openssh: Use the default privilege separation dir (/var/empty)"
This reverts commit a927709a35 because it
doesn't build:

$ nix-build -A openssh
...
mkdir /nix/store/yl2xap8n1by3dqxgc4rmrc4s753676a3-openssh-7.2p2/libexec
(umask 022 ; ./mkinstalldirs /var/empty)
mkdir /var
mkdir: cannot create directory '/var': Permission denied
mkdir /var/empty
mkdir: cannot create directory '/var/empty': No such file or directory
make: *** [Makefile:304: install-files] Error 1
builder for ‘/nix/store/ifygp4mqpv7l8cgp0njp8w7lmrl6brpp-openssh-7.2p2.drv’ failed with exit code 2
2016-07-15 12:42:37 +02:00
Frederik Rietdijk
81d798bc36 Merge pull request #16463 from FRidh/secp
secp256k1: init (native lib, and python ffi bindings at 0.12.1)
2016-07-15 12:23:20 +02:00
Rickard Nilsson
a927709a35 openssh: Use the default privilege separation dir (/var/empty)
If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-14 20:54:06 +02:00
Arseniy Seroka
4060133812 Merge pull request #16956 from zimbatm/zerotier-1.1.12
zerotierone: 1.1.6 -> 1.1.12
2016-07-14 22:20:18 +04:00
Tobias Geerinckx-Rice
93d0a4d311 Merge pull request #16962 from womfoo/bump/stress-ng-0.06.11
stress-ng: 0.06.01 -> 0.06.11
2016-07-14 19:41:05 +02:00
Kranium Gikos Mendoza
121a8c0646 stress-ng: 0.06.01 -> 0.06.11 2016-07-15 00:06:54 +08:00
Kranium Gikos Mendoza
9aee153f2b zerofree: 1.0.3 -> 1.0.4 2016-07-14 15:43:09 +02:00
zimbatm
dc6306a69d zerotierone: 1.1.6 -> 1.1.12 2016-07-14 14:02:54 +01:00
Vladimír Čunát
1b5ac05845 Merge branch 'staging'
Includes security fixes in gd and libarchive.
2016-07-14 15:51:28 +02:00
J Phani Mahesh
ac19f09122 wicd: propogatedBuildInputs -> propagatedBuildInputs 2016-07-14 17:23:06 +05:30
J Phani Mahesh
79312dc614 xflux-gui: propogatedBuildInputs -> propagatedBuildInputs 2016-07-14 15:53:09 +05:30
Ioannis Koutras
d861911263 ocproxy: init at 1.50 2016-07-13 17:15:23 +03:00
Gabriel Ebner
70e2438530 Merge pull request #16913 from womfoo/init/mc-4.8.17
mc: 4.8.16 -> 4.8.17
2016-07-13 13:44:13 +02:00
Robert Helgesson
c9b9619636 nethogs: 0.8.1 -> 0.8.5 2016-07-13 13:17:24 +02:00
Kranium Gikos Mendoza
12effae5b6 mc: 4.8.16 -> 4.8.17 2016-07-13 18:52:31 +08:00
Arseniy Seroka
a7f87bd518 Merge pull request #16904 from womfoo/fix-bump/smbldaptools-0.9.11
smbldaptools: 0.9.10 -> 0.9.11
2016-07-13 14:52:07 +04:00
Ioannis Koutras
a3e6044e9c biber: 2.4 -> 2.5 2016-07-13 10:53:12 +03:00
Kranium Gikos Mendoza
d5e70a2adc smbldaptools: 0.9.10 -> 0.9.11 2016-07-13 09:01:25 +08:00
Vladimír Čunát
40785f0dac Merge branch 'master' into staging
Hydra nixpkgs: ?compare=1282763
2016-07-12 22:00:10 +02:00
joachifm
3df7f3cbc3 Merge pull request #16831 from womfoo/fix-bump/gtkgnutella-1.1.9
gtk-gnutella: fix build and 1.1.5 -> 1.1.9
2016-07-12 16:21:36 +02:00
joachifm
7135dfd541 Merge pull request #16836 from brainrape/update-youtube-dl
youtube-dl: 2016.07.03.1 -> 2016.07.09.2
2016-07-12 16:21:26 +02:00
joachifm
03a7fa9104 Merge pull request #16840 from womfoo/bump/leatherman-0.7.5-facter-3.1.8
Bump leatherman: 0.7.0 -> 0.7.5 and sole dependency facter 3.1.6 -> 3.1.8
2016-07-12 16:20:51 +02:00
joachifm
7a54a71c9e Merge pull request #16808 from 4z3/urlwatch
urlwatch: 2.1 -> 2.2
2016-07-12 16:20:17 +02:00
Gabriel Ebner
51e1b2508c Merge pull request #16878 from womfoo/bump/siege-4.0.2
siege: 4.0.1 -> 4.0.2
2016-07-12 08:23:15 +02:00
Kranium Gikos Mendoza
e54223e8bb siege: 4.0.1 -> 4.0.2 2016-07-12 13:31:31 +08:00
Scott Stevenson
8c81c234d3 rcm: 1.2.3 -> 1.3.0 (#16847) 2016-07-11 18:11:31 +02:00
Eric Sagnes
1349cd4e8d fcitx: refactor (#16858) 2016-07-11 17:50:22 +02:00
Domen Kožar
5789f5875f nix-repl: 2015-09-07 -> 2016-02-28 2016-07-11 14:00:28 +02:00
Gabriel Ebner
ad41b8fa19 mu: fix build of webkit support and re-enable it 2016-07-11 10:37:31 +02:00
Jookia
ba2232f1f2 srelay: init at 0.4.8b6 (#16833) 2016-07-11 03:41:02 +02:00
Kranium Gikos Mendoza
356b3ae546 facter: 3.1.6 -> 3.1.8 2016-07-10 23:37:05 +08:00
Márton Boros
129c17b222 youtube-dl: 2016.07.03.1 -> 2016.07.09.2 2016-07-10 12:58:10 +02:00
Carl Sverre
0e6fbf83f8 sift: fix hydra build fail (#16820)
For some reason I haven't been able to figure out, sift does not build on OSX.
I think it is because sift uses cgo for some of its functionality which you can
see here:
https://github.com/svent/sift/blob/master/matching_cgo.go#L23

The error which hydra found (and is reproducible on OSX) can be seen here:
https://hydra.nixos.org/build/37169149

Ideally I would like to get sift building on OSX, however my nix-fu is weak.
Any suggestions are welcome.  In the meantime I would like to get sift into one
of the release channels for Linux where it works fine.
2016-07-10 11:17:47 +02:00
Franz Pletz
bdf4c0d21f ntp: 4.2.8p6 -> 4.2.8p8 (security)
Fixes CVE-2016-4953, CVE-2016-4954, CVE-2016-4955, CVE-2016-4956.
2016-07-10 10:48:11 +02:00
Franz Pletz
033e593a4f dnsmasq: 2.75 -> 2.76 (security)
Fixes CVE-2015-8899.
2016-07-10 10:48:10 +02:00
Franz Pletz
b8ecb949e6 haproxy: 1.6.5 -> 1.6.6 (security)
Fixes at least CVE-2016-5360.
2016-07-10 10:46:22 +02:00
Franz Pletz
f1f6dc9b87 shadowsocks-libev: polarssl is now called mbedtls 2016-07-10 10:26:14 +02:00
Kranium Gikos Mendoza
f854c7d4f4 gtk-gnutella: 1.1.5 -> 1.1.9 2016-07-10 11:21:28 +08:00
Robert Helgesson
18a91ddfb6 cloc: 1.68 -> 1.70 2016-07-09 22:51:12 +02:00