Commit graph

1510 commits

Author SHA1 Message Date
Izorkin
cfe1a52f22 libmodsecurity: init at 3.0.0-2017-11-17 (#32075) 2017-12-11 22:23:02 +00:00
rnhmjoj
491bc4cfed
pythonPackages: rename dns -> dnspython 2017-12-10 15:27:06 +01:00
Vladimír Čunát
6f5d989478
treewide: checkMeta fixes for x86_64-linux 2017-12-07 07:50:47 -05:00
Eshin Kunishima
f9a5cacae7
logkeys: 2015-11-10 -> 2017-10-10 2017-12-06 12:37:16 +01:00
adisbladis
b9aaab9634
Merge pull request #32367 from peterromfeldhk/softhsm-darwin
softhsm: darwin support
2017-12-06 12:01:35 +08:00
Peter Romfeld
e4ce67615e softhsm: darwin support 2017-12-06 11:51:28 +08:00
Tuomas Tynkkynen
65ace59fa8 tboot: Only works on x86
https://hydra.nixos.org/build/65116569

It's x86-related booting stuff.
2017-12-06 02:55:19 +02:00
Bert Moens
b8b7428a81 pcscd: add plugin for ACS ACR38U smart card reader 2017-12-05 20:11:17 +01:00
Orivej Desh
67a86f7813 hashcat: 4.0.0 -> 4.0.1
Upstream has moved 4.0.0 into https://hashcat.net/files_legacy/hashcat-4.0.0.7z
2017-12-04 14:48:46 +00:00
Daiderd Jordan
97af9310d5
Merge pull request #32300 from adisbladis/vault-0_9_0
vault: 0.8.3 -> 0.9.0
2017-12-04 13:12:05 +01:00
Christian Kauhaus
10c2dcef82 vulnix: 1.3.4 -> 1.4.0
The new vulnix release contains auto-detection of CVE patches.
2017-12-04 09:41:05 +01:00
adisbladis
f019707548
vault: 0.8.3 -> 0.9.0 2017-12-04 16:13:07 +08:00
Joachim F
2d0ed7bef5
Merge pull request #32283 from andir/tor-sec
tor: 0.3.1.8 -> 0.3.1.9 (CVE-2017-{8819,8820,8821,8822,8823})
2017-12-03 19:54:31 +00:00
Andreas Rammhold
959364c01d
tor: 0.3.1.8 -> 0.3.1.9 (CVE-2017-{8819,8820,8821,8822,8823})
More details in the release mail [1].

[1] https://lists.torproject.org/pipermail/tor-announce/2017-December/000147.html
2017-12-03 20:35:16 +01:00
Michael Weiss
70d1c37f77 signing-party: 2.5 -> 2.6 2017-12-03 00:40:04 +01:00
Jörg Thalheim
6d2167fc1e
Merge pull request #32236 from guillaumekoenig/fix-enpass-firefox-webextensions
enpass: fix install to work with firefox webextensions
2017-12-01 21:09:17 +00:00
Guillaume Koenig
dff239d7b1 enpass: fix install to work with firefox webextensions
With new Firefox 57 and WebExtensions, the new addon uses Firefox'
Native Messaging mechanism to communicate with local programs (here
the main enpass program). This commit activates EnpassNMHost, a binary
that bootstraps communication between the two.
2017-12-01 17:43:58 +01:00
Bastian Köcher
76244def98 qesteidutil: 3.12.5.1233 -> 3.12.10 2017-12-01 13:25:25 +01:00
Orivej Desh
d6431833be gencfsm: fix build 2017-11-29 10:27:24 +00:00
Tim Steinbach
d94d6b47c1
Merge pull request #32068 from adisbladis/sudo-1_8_21p2
sudo: 1.8.20p2 -> 1.8.21p2
2017-11-26 17:28:03 -05:00
adisbladis
21d8f25c1e
Merge pull request #31901 from lsix/update_gnupg_2_2_3
gnupg: 2.2.2 -> 2.2.3
2017-11-27 03:42:27 +08:00
adisbladis
68626f3e0a
sudo: 1.8.20p2 -> 1.8.21p2 2017-11-26 18:31:51 +08:00
Vladimír Čunát
7dfa97969a
Merge branch 'staging' (older one)
Hydra seems OK-ish, except that some aarch64 jobs need restarting
after qt4 timing out for the first time:
https://hydra.nixos.org/eval/1412641?compare=1412561
2017-11-24 18:36:54 +01:00
Kier Davis
4017f0f752
pius: add myself as a maintainer 2017-11-24 11:30:17 +00:00
Kier Davis
1f62cfa6f5
pius: 2.0.11 -> 2.2.4 2017-11-24 11:29:59 +00:00
Kier Davis
b354f88327
pius: move source from Sourceforge to Github
Development of pius has moved to Github.
2017-11-24 11:12:51 +00:00
Jörg Thalheim
98d12e681c
Merge pull request #31909 from andir/clamav
clamav: apply patch for CVE-2017-6420
2017-11-22 08:20:03 +00:00
Joachim F
7cfe20dc77
Merge pull request #31920 from andir/yara
yara: 3.6.3 -> 3.7.0
2017-11-22 04:02:59 +00:00
Andreas Rammhold
e7a65e5312
yara: 3.6.3 -> 3.7.0 2017-11-22 00:45:38 +01:00
Orivej Desh
b8e1e7191e Merge branch 'master' into staging
* master: (80 commits)
  lkl: Supports aarch64
  wimlib: nitpicks
  gitAndTools.git-codeowners: 0.1.1 -> 0.1.2
  wimlib: init at 1.12.0
  kernel: improve modDirVersion error message
  releaseTools.sourceTarball: Clean up temporary files
  dotnetPackages.SmartIrc4net: rehash source
  migmix: make it a fixed-output derivation
  vm: Create /dev/full
  samba: 4.6.8 -> 4.6.11 to address CVEs CVE-2017-14746 & CVE-2017-15275
  microcodeIntel: 20170707 -> 20171117
  sshd: Remove ripemd160 MACs
  kernel config: Enable MEDIA_CONTROLLER
  linux: 4.4.99 -> 4.4.100
  linux: 4.9.63 -> 4.9.64
  nix-bash-completions: 0.4 -> 0.5
  linux: 4.14 -> 4.14.1
  linux: 4.13.14 -> 4.13.15
  nix-zsh-completions: 0.3.3 -> 0.3.5
  dns-root-data: use a stable URL that I maintain anyway
  ...
2017-11-21 22:48:36 +00:00
Andreas Rammhold
f01acd4cd5
clamav: apply patch for CVE-2017-6420
Details at [1].

[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6420
2017-11-21 21:39:29 +01:00
Lancelot SIX
5f5d8e67a7
gnupg: 2.2.2 -> 2.2.3
This is a maintenance release.
See http://lists.gnu.org/archive/html/info-gnu/2017-11/msg00008.html
for release information
2017-11-21 17:58:29 +01:00
Renaud
1d6f3ea265
Merge pull request #31573 from c0bw3b/pkg/pkcs11
opencryptoki, pkcs11-helper, simple-tpm-pk11
2017-11-20 22:40:58 +01:00
Orivej Desh
d99a2fc093 Merge branch 'master' into staging
* master: (293 commits)
  go_1_9: skip flaky TestServerCancelsReadTimeoutWhenIdle
  qsyncthingtray: fix build
  qt56.qtwebengine: fix build
  stdman: d860212 -> 2017.04.02
  jackett: use mono50
  hg-git: disable with python3
  hg-git: 0.8.5 -> 0.8.10
  xfce4-settings: enable parallel building
  gcc-snapshot: mark as broken
  heaptrack: 2017-02-14 -> 2017-10-30
  nixos-container: Modify existing test to cover show-ip command
  nixos-container: Make show-ip work together with ipv4 + netmask
  linux-copperhead: 4.13.12.a -> 4.13.13.a
  matterbridge: 1.1.0 -> 1.4.1
  nixos/nghttpx: add module for the nghttpx proxy server (#31680)
  mattermost: 4.3.0 -> 4.4.0
  breakpad: delete
  simp_le: 0.2.0 -> 0.6.1
  certbot: 0.11.1 -> 0.19.0
  afl: 2.51b -> 2.52b
  ...
2017-11-17 05:35:09 +00:00
Orivej Desh
15ba4a5cfd afl: 2.51b -> 2.52b
Fix build with glibc 2.26.

Tracking issue: #31696
2017-11-16 17:11:10 +00:00
Samuel Leathers
c189dfb4e8
Merge pull request #31360 from lsix/update_gnupg_2_2_2
gnupg: 2.2.1 -> 2.2.2
2017-11-15 12:53:44 -05:00
Lancelot SIX
44b319156f gnupg: 2.2.1 -> 2.2.2
This is a maintenance release.
See http://lists.gnu.org/archive/html/info-gnu/2017-11/msg00001.html
for release information
2017-11-15 10:42:11 -05:00
Samuel Leathers
1f6a0e9b76
Merge pull request #31428 from adisbladis/opensc-0_17_0
opensc: 0.15.0 -> 0.17.0
2017-11-15 10:23:56 -05:00
Orivej Desh
a48f9ba574 chaps: update source hash to fix build 2017-11-13 18:27:34 +00:00
John Ericson
d7bddc27b2 treewide: Try to avoid depending on binutils directly
One should depend on

 - `stdenv.cc.bintools`: for executables at build time
 - `libbfd` or `libiberty`: for those libraries
 - `targetPackages.cc.bintools`: for exectuables at *run* time
 - `binutils`: only for specifically GNU Binutils's executables, regardless of
   the host platform, at run time.
2017-11-13 00:47:48 -05:00
Renaud
ac060f55f3
simple-tpm-pk11: 2016-07-12 -> 0.06 2017-11-12 22:46:11 +01:00
Renaud
f1ec44ec94
opencryptoki: 3.2 -> 3.8.1 2017-11-12 22:39:37 +01:00
Vladimír Čunát
cbfb586151
Merge security fixes adapted from #31437 2017-11-11 13:33:25 +01:00
Pascal Wittmann
24e87b49b6
Change many homepage urls from http to https #30636 2017-11-10 22:13:46 +01:00
Renaud
f17eec9de0
Merge pull request #31374 from cstrahan/doas
doas: init at 6.0
2017-11-10 20:46:25 +01:00
Austin Seipp
a387652159 nixpkgs: remove busted 'tmin' package
Obsoleted by afl-tmin

Signed-off-by: Austin Seipp <aseipp@pobox.com>
2017-11-09 13:19:55 -06:00
Andreas Rammhold
e15d6e1b3c yara: 3.6.0 -> 3.6.3 (fixes CVE-2017-11328) 2017-11-09 12:48:21 +01:00
Orivej Desh
db919d1ac4 qdigidoc: enable parallel building 2017-11-09 10:51:49 +00:00
adisbladis
63bc228670
qdigidoc: fix build with glibc 2.26 2017-11-09 17:39:13 +08:00
adisbladis
5cf0322328
opensc: 0.15.0 -> 0.17.0 2017-11-09 17:37:52 +08:00
Charles Strahan
4ca7f46863
doas: init at 6.0
Portable version of the OpenBSD `doas` command.
2017-11-07 16:34:50 -05:00
Kilian Schweppe
3f3ac8829f mpw: 2.1 -> 2.6 2017-11-07 19:12:48 +01:00
Peter Hoeg
3a53ddd693 sshguard: 2.0.0 -> 2.1.0 2017-11-06 08:21:56 +08:00
rnhmjoj
de1e0ee43f
masscan: 2017-02-04 -> 1.0.4 2017-11-05 18:22:17 +01:00
Franz Pletz
91de9958c0
browserpass: 1.0.6 -> 2.0.7 2017-11-05 14:55:51 +01:00
Michael Weiss
af3a11b8f6 pgpdump: Add support for compressed data packets
This will add support for compressed data packets (Tag 8) [0] and enable
it by default.

[0]: https://tools.ietf.org/html/rfc4880#section-5.6
2017-11-04 21:23:14 +01:00
Renaud
9754503c6b
nsjail: 2.1 -> 2.2
plus fixed meta.license which should be Apache License 2.0
2017-11-04 20:02:23 +01:00
Tim Steinbach
a789f5b2f1
Merge pull request #31233 from mimadrid/update/rofi-pass-1.5.3
rofi-pass: 1.5.2 -> 1.5.3
2017-11-04 11:04:41 -04:00
mimadrid
97d251e6ac
rofi-pass: 1.5.2 -> 1.5.3 2017-11-04 09:31:18 +01:00
c0bw3b
525380b472 treewide: abandon Google Code homepages 2017-11-03 18:52:28 +00:00
zimbatm
a209f56d6d hashcat: 2.00 -> 4.0.0
remove 3.6.0 which was not the default
2017-11-01 15:06:06 +00:00
Thilo Uttendorfer
61aeeb50ab pwgen: 2.07 -> 2.08 2017-10-30 22:19:11 +01:00
Christian Kauhaus
afc66e121d vulnix: 1.2.2 -> 1.3.4
The build needs the ZODB fix in PR #30925 to succeed.
2017-10-29 15:43:58 +01:00
Andreas Rammhold
036f9ec235
ecdsautils: init 0.4.0 2017-10-28 17:41:34 +02:00
Joachim Fasting
5a64e446ff
tor: 0.3.1.7 -> 0.3.1.8
Quoth the release notes:

> It includes several bugfixes, including a bugfix for a crash issue that
had affected relays under memory pressure. It also adds a new directory
authority, Bastet.
2017-10-26 22:39:24 +02:00
mimadrid
9b7bf9cd91 rofi-pass: 1.5.1 -> 1.5.2 2017-10-24 18:22:12 +02:00
Utku Demir
cf8e966e00 lastpass-cli: 1.1.1 -> 1.2.1 2017-10-24 17:34:51 +02:00
Franz Pletz
97b23fc975
softhsm: 2.2.0 -> 2.3.0 2017-10-24 14:21:06 +02:00
Renaud
5121b67b12 nsjail: git-2015-08-10 -> 2.1 2017-10-22 00:31:27 +02:00
Jacob Mitchell
57b27f2867
vault: 0.8.1 -> 0.8.3 2017-10-21 13:34:39 -07:00
Daniel Kuehn
4c449e03b7 sudo: Add optional dependency to SSSD, enabled by setting withSssd to true 2017-10-21 20:21:27 +02:00
Vladimír Čunát
6525c22ef1
Merge branch 'master' into staging
Hydra: ?compare=1401528
2017-10-14 10:36:13 +02:00
Daiderd Jordan
adc116b2ba Merge pull request #30349 from efx/topic-modsecurity-update
modsecurity: 2.9.0 -> 2.9.2
2017-10-13 21:57:38 +02:00
Peter Hoeg
f2e7019346 Merge pull request #30340 from peterhoeg/p/cryfs
cryfs: init at 0.9.7 and minor updates to dependencies (scrypt and spdlog)
2017-10-13 11:04:27 +08:00
Eli Flanagan
90594b8f52 modsecurity: 2.9.0 -> 2.9.2
* Enable building on macOS
* also fixes an issue where a system Lua install fooled the configure
script into thinking it was enabled.
2017-10-12 08:37:50 -04:00
Peter Hoeg
b551054917 scrypt: 1.2.0 -> 1.2.1 2017-10-12 12:40:56 +08:00
Daniel Peebles
416979f3f7 Merge pull request #30150 from copumpkin/no-rpath-nonsense
Get rid of most @rpath nonsense on Darwin
2017-10-08 16:21:27 -04:00
Dan Peebles
b426c85ce2 Get rid of most @rpath nonsense on Darwin
This requires some small changes in the stdenv, then working around the
weird choice LLVM made to hardcode @rpath in its install name, and then
lets us remove a ton of annoying workaround hacks in many of our Go
packages. With any luck this will mean less hackery going forward.
2017-10-08 16:13:46 -04:00
Vladimír Čunát
ef41fc7f51
Merge branch 'master' into staging
Hydra: ?compare=1399476
2017-10-07 10:17:42 +02:00
Franz Pletz
241cb4ed03
aespipe: 2.4d -> 2.5e 2017-10-07 04:04:19 +02:00
Bjørn Forsman
92852fd193 ccid: change patchPhase to postPatch
This stops the derivation from overriding the default patchPhase, which
right now prevents adding a list of patches in the "patches" attribute.
2017-10-06 12:09:56 +02:00
Orivej Desh
8a1820863f Merge pull request #30149 from cyraxjoe/enpass-version-update
enpass: 5.4.0.post4 ->  5.6.0
2017-10-06 06:45:21 +00:00
Joel Rivera
0d7e0b4ec2 enpass: 5.4.0.post4 -> 5.6.0
The file was generated with the update script that is part
of the nix expressions for enpass.

Also, it seems that 5.4 has some issues with dropbox sync,
this was the original rationale to look for a newer version.
2017-10-05 22:50:57 -05:00
Orivej Desh
66d4941afe Merge branch 'master' into staging
* master: (48 commits)
  Mathematica: 11.0.1 -> 11.2.0
  kbfs: 20170922.f76290 -> 20171004.40555d
  packer: 1.0.3 -> 1.1.0
  libxdg-basedir: 1.0.2 -> 1.2.0
  fscrypt: 0.2.1 -> 0.2.2
  devtodo: init at 0.1.20
  keybase: 1.0.30 -> 1.0.33
  elixir: Fix locale problem on NixOS
  keybase-gui: 1.0.25 -> 1.0.33
  terraform: 0.10.2 -> 0.10.7  (#30055)
  emby: 3.2.32.0 -> 3.2.33.0
  sbcl: 1.3.21 -> 1.4.0
  ardour: 5.11 -> 5.12
  axoloti: fix evaluation
  axoloti: init at 1.0.12-1
  melpa-packages: Add new lean packages
  fastlane: init at 2.60.1
  nixos/traefik: guard example path
  go-ethereum: 1.7.0 -> 1.7.1
  xzgv: 0.9.1 -> 0.9.2
  ...
2017-10-05 07:41:39 +00:00
Tim Steinbach
8c207e9f46
kbfs: 20170922.f76290 -> 20171004.40555d 2017-10-04 21:54:57 -04:00
Tim Steinbach
6581ad85c0
keybase: 1.0.30 -> 1.0.33 2017-10-04 17:24:19 -04:00
Tim Steinbach
843a75d27d
keybase-gui: 1.0.25 -> 1.0.33 2017-10-04 17:19:32 -04:00
Orivej Desh
f137004179 Merge branch 'master' into staging
* master: (81 commits)
  Add NixOS 17.09 AMIs
  gradle: 4.2 -> 4.2.1
  maintainers.nix: use my GitHub handle as maintainer name
  fcitx-engines.rime: init at 0.3.2
  brise: init at 2017-09-16
  librime: init at 1.2.9
  marisa: init at 0.2.4
  opencc: build shared library and programs
  josm: 12712 -> 12914
  exa: 0.7.0 -> 0.8.0
  krb5: add deprecation date for old configuration
  rustRegistry: 2017-09-10 -> 2017-10-03
  go-ethereum: Fix libusb segmentation faults on Darwin
  tor-browser-bundle-bin: 7.0.5 -> 7.0.6
  libsodium: 1.0.13 -> 1.0.15
  tor-browser-bundle: geoip support
  tor-browser-bundle: support transports obfs2,obfs3
  tor-browser-bundle: bump https-everywhere to 2017.9.12
  tint2: limit platforms to Linux since macOS is not supported and fails the tests
  eclipse-plugin-vrapper: init at 0.72.0
  ...
2017-10-03 17:46:39 +00:00
Jan Tojnar
feddf1b278
pinentry: add optional libsecret dependency
libsecret is used for cacheing passwords.
2017-10-01 01:38:15 +02:00
Jan Tojnar
75bf151d25
pinentry: fix configure arguments
pinentry 0.9.6 changed the `qt4` flag to just `qt`. Additionally,
the `--with-x` option has not been there for a while. This commit
renames and removes the flags, respectively.
2017-10-01 01:38:15 +02:00
Jan Tojnar
4ad98786a0
pinentry: add GNOME 3 frontend support 2017-10-01 01:38:15 +02:00
John Ericson
f037625f87 Merge remote-tracking branch 'upstream/staging' into deps-reorg 2017-09-28 12:32:57 -04:00
Joerg Thalheim
b775b2cd4f metasploit: use makeWrapper instead 2017-09-27 16:34:09 +01:00
Daiderd Jordan
3ad8cc1300 Merge pull request #29757 from berdario/sshuttle-darwin
Fix tests for Sshuttle on Darwin.
2017-09-26 23:09:57 +02:00
Tim Steinbach
5c137d8c59 Merge pull request #29751 from fadenb/oath-toolkit_2.6.2
oath-toolkit: 2.6.1 -> 2.6.2
2017-09-26 09:12:19 -04:00
Francesco Gazzetta
1d163835c8 bash-supergenpass: init at 2012-11-02 (#29797)
* Add fgaz to mantainers

* bash-supergenpass: init at 2012-11-02
2017-09-26 11:01:11 +01:00
Dario Bertini
08d05f1ef5 Fetch sshuttle-darwin patch from github 2017-09-26 07:16:14 +01:00
Dario Bertini
7055b4aa45 Fix tests for Sshuttle on Darwin. 2017-09-24 23:46:07 +01:00
Tristan Helmich
62597385c3 oath-toolkit: 2.6.1 -> 2.6.2 2017-09-24 21:05:00 +02:00
Jean-François Roche
b50ae94ed3 Update kbfs: 20170429.44efa06 -> 20170922.f76290 (#29716)
kbfs was not working with the lastest keybase update
(ef3cb5cc47).

We should enforce update of keybase/keybase-ui and kbfs (like done here:
f74a1e6bcb)
all together to avoid API problems.
2017-09-24 18:06:31 +01:00