Commit graph

97570 commits

Author SHA1 Message Date
Graham Christensen
c7a2073323
openjpeg2: patch for CVE-2016-9580, and CVE-2016-9581 2016-12-21 14:37:47 -05:00
Daiderd Jordan
0d3f0f05e2
libupnp: 1.6.20 -> 1.6.21 for CVE-2016-8863
Switching to git tags means we don't get pre-generated configure
scripts. Thusly, run bootstrap ourselves.

For https://github.com/NixOS/nixpkgs/issues/21289
For CVE-2016-8863 (remote code execution)
2016-12-21 14:37:47 -05:00
Graham Christensen
2f17c3628e
nagios: 4.2.3 -> 4.2.4 for CVE-2016-9566 2016-12-21 14:37:46 -05:00
Graham Christensen
72faac9d35
tomcatUnstable: 9.0.0.M13 -> 9.0.0.M15 for CVE-2016-9774, CVE-2016-9775 2016-12-21 14:37:46 -05:00
Graham Christensen
a528c04612
tomcat85: 8.5.8 -> 8.5.9 for CVE-2016-9774, CVE-2016-9775 2016-12-21 14:37:46 -05:00
Graham Christensen
2c24ce5cfa
game-music-emu: 0.6.0 -> 0.6.1 for multiple CVEs
CVE-2016-9957 CVE-2016-9958 CVE-2016-9959 CVE-2016-9960 CVE-2016-9961
2016-12-21 14:37:45 -05:00
Joachim F
9e6ac83f2a Merge pull request #21262 from FlorentBecker/ocaml-pcre
ocaml-pcre: fix name
2016-12-21 20:36:56 +01:00
Thomas Tuegel
dd968d0365
okular: propagate build inputs
Fixes #14390. The runtime dependencies were not being detected in the
wrapper because they were not propagated.
2016-12-21 11:17:54 -06:00
Tobias Geerinckx-Rice
a211c1752c Merge pull request #21336 from holidaycheck/sauce-connect-4.4.2
sauce-connect: 4.4.0 -> 4.4.2
2016-12-21 16:07:28 +01:00
Eelco Dolstra
953fe37009
gcc: 6.2.0 -> 6.3.0 2016-12-21 15:48:25 +01:00
Frederik Rietdijk
e0d1691ba3 Docs Python: fix examples and links 2016-12-21 15:45:39 +01:00
Ricardo Ardissone
44a8fb956e nrg2iso: init at 0.4.0 2016-12-21 16:29:34 +02:00
Tobias Pflug
7609b9aaa3 sauce-connect: 4.4.0 -> 4.4.2 2016-12-21 15:04:45 +01:00
Frederik Rietdijk
4a795afdbc Merge pull request #21318 from leenaars/ssrc
ssrc: init at 1.33
2016-12-21 15:03:28 +01:00
Michiel Leenaars
f4d1b6f781 ssrc: init at 1.33 2016-12-21 14:44:01 +01:00
Jörg Thalheim
8e08ed1062 Merge pull request #21329 from volhovM/update/scudcloud-1.38
scudcloud: 1.35 -> 1.38
2016-12-21 13:35:34 +01:00
Hoang Xuan Phu
5a31ad1bbf
simp_le: switch to zenhack/simp_le
kuba/simp_le seems unmaintained.
fixes #21174
2016-12-21 12:11:04 +01:00
Hoang Xuan Phu
17322ca4fd
certbot: 0.6.0 -> 0.9.3 2016-12-21 12:04:56 +01:00
Ole Jørgen Brønner
52a220aaa0 nix-zsh-completions: 0.2 -> 0.3 2016-12-21 11:59:14 +01:00
Eelco Dolstra
5d4740fded Merge pull request #20929 from nathan7/boehm-7.6.0
boehm-gc: 7.2g -> 7.6.0
2016-12-21 11:19:27 +01:00
Peter Simons
076b90d5ee hackage-packages.nix: automatic Haskell package set update
This update was generated by hackage2nix v2.0.4 from Hackage revision
c9f5faab75.
2016-12-21 10:17:49 +01:00
Peter Simons
17f42ee50f git-annex: switch to yesod-persistent-1.4.1.1 to fix build 2016-12-21 10:17:33 +01:00
Peter Simons
3dad7633e2 python-pyflakes: trigger re-build to fix transient error on Hydra 2016-12-21 10:04:33 +01:00
Peter Simons
8809fa30b5 configuration-hackage2nix.yaml: update list of failing builds 2016-12-21 10:04:33 +01:00
Peter Simons
7e317d4ff8 LTS Haskell 7.14 2016-12-21 10:04:33 +01:00
Mikhail Volkhov
de683845b8
scudcloud: 1.35 -> 1.38 2016-12-21 10:39:05 +03:00
Benjamin Staffin
c1ecf36b93 Merge pull request #21323 from bjornfor/prometheus
nixos/prometheus: add services.prometheus.configText option
2016-12-20 20:36:27 -08:00
Ricardo M. Correia
04a9e07bbd Merge pull request #21295 from vbgl/containers-0.22
ocamlPackages.containers: 0.20 -> 0.22
2016-12-21 01:23:36 +01:00
Bjørn Forsman
caa476b357 nixos/prometheus: add services.prometheus.configText option
The structured options are incomplete compared to upstream and I think
it will be a maintenance burden to try to keep up. Instead, provide an
option for the raw config file contents (prometheus.yml).
2016-12-21 00:32:24 +01:00
Frederik Rietdijk
48fa032aae Merge pull request #21322 from mimadrid/update/meld-3.16.4
meld: 3.16.2 -> 3.16.4
2016-12-21 00:09:27 +01:00
mimadrid
8021c1f429
meld: 3.16.2 -> 3.16.4 2016-12-20 23:56:29 +01:00
Bjørn Forsman
3fb785b0ad nixos: unbreak prometheus test
target_groups was renamed to static_configs in d459916504
("prometheus service: rename values to match prometheus 1.0 naming.").
Catch up.
2016-12-20 23:26:51 +01:00
Aristid Breitkreuz
06cfff71dd parted: re-enable checks 2016-12-20 21:57:28 +01:00
aszlig
5ed1aee3af
python/pypillowfight: Disable tests entirely
This is getting entirely different results on i686-linux:

https://hydra.nixos.org/build/45122757/nixlog/6/raw

According to @jflesch the reference system these tests are built for is
Debian GNU/Linux (possibly only x86_64-linux I guess):

https://github.com/jflesch/libpillowfight/issues/2#issuecomment-268259174

So let's disable them until they're more deterministic and less
platform/distro-specific.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-12-20 19:00:29 +01:00
Tim Steinbach
d7e342d185 Merge pull request #21312 from NeQuissimus/mc-server_1_11_1
minecraft-server: 1.11 -> 1.11.1
2016-12-20 12:50:29 -05:00
Tim Steinbach
cbe8ff1a72 minecraft-server: 1.11 -> 1.11.1 2016-12-20 12:48:56 -05:00
Eelco Dolstra
edd5babb31 Merge pull request #21306 from joachifm/gzip-9n
Remove uses of gzip that might capture build time
2016-12-20 15:52:47 +01:00
Eelco Dolstra
df48cb7aa2 Merge pull request #21305 from joachifm/deterministic-tarball-v2
make-system-tarball: create reproducible tarballs
2016-12-20 15:39:32 +01:00
Joachim Fasting
a34eae0ecb
stun: gzip -9 -> gzip -9n
Note that it does not seem to make a difference to `nix-build --check`.
2016-12-20 15:32:14 +01:00
Joachim Fasting
8246a845b4
zerotierone: gzip -9 -> gzip -9n
Note that it does not seem to make a difference to `nix-build --check`.
2016-12-20 15:32:07 +01:00
Joachim Fasting
6758d157d2
multipath-tools: ensure gzip does not capture timestamp
gzip is originally called as 'gzip -9 -c'

This is a port of
a8e7ddd1df

Note that it does not seem to make a difference to `nix-build --check`.
2016-12-20 15:31:55 +01:00
Joachim Fasting
168fe999e7
make-system-tarball: create reproducible tarballs
Ensure that archive members are added in sorted order with a fixed
mtime.  This allows `nix-build --check` to succeed (when building a
tarball of a simple system configuration).

We also remove env-vars which doesn't appear to do much apart from
capture a bunch of store paths we probably don't want.

This is an alternative to
4b78a5b5fb
2016-12-20 15:26:21 +01:00
Thomas Tuegel
b9d3898995
qt57: 5.7.0 -> 5.7.1 2016-12-20 07:40:53 -06:00
Aristid Breitkreuz
6d75b913fd Merge pull request #21255 from jokogr/u/syncthing-0.14.15
syncthing: 0.14.13 -> 0.14.15
2016-12-20 14:20:26 +01:00
Aristid Breitkreuz
978c26a465 Merge pull request #21290 from peterhoeg/u/db
dropbox: 15.4.22 -> 16.4.29
2016-12-20 14:12:34 +01:00
Joachim Fasting
5a8147479e make-initrd: create reproducible initrds
To achieve reproducible results, `cpio` archive members are added in
sorted order and inodes renumbered.

The `cpio-clean.pl` script is made obsolete by setting mtimes via
`touch` & using `cpio --reproducible`.  Suggested by @dezgeg in
https://github.com/NixOS/nixpkgs/pull/21273#issuecomment-268116605.

Note that using `--reproducible` means that initial ramdisk creation now
requires at least `cpio` version 2.12 (released in 2015).
2016-12-20 14:00:04 +01:00
Daiderd Jordan
49e3190efa
Revert "xhyve: update and fix to use our Hypervisor framework"
This reverts commit f3b65f67d9.
2016-12-20 13:02:27 +01:00
Alexander Kjeldaas
6b4a41a360 libfaketime: make the build reproducible
A rebased version of cb8bd05a01
Note: we no longer apply the spurious lrt patch.

This allows `nix-build --check -A libfaketime` to succeed.
2016-12-20 12:54:23 +01:00
Daiderd Jordan
fb2a7cd705 Revert "apple-sdk: 10.9 -> 10.11"
This reverts commit 377cef8d16.
2016-12-20 12:33:27 +01:00
Eelco Dolstra
a02bb00156
Enable virtualisation.writableStore by default
This works around:

  machine: must succeed: nix-store -qR /run/current-system | grep nixos-
  machine# error: changing ownership of path ‘/nix/store’: Invalid argument

Probably Nix shouldn't be anal about the ownership of the store unless
it's trying to build/write to the store.

http://hydra.nixos.org/build/45093872/nixlog/17/raw
(cherry picked from commit 57a0f140643cde409022e297ed05e05f8d34d778)
2016-12-20 10:52:47 +01:00