Franz Pletz
e9fc4e7db6
Merge remote-tracking branch 'origin/master' into hardened-stdenv
2016-03-07 22:08:27 +01:00
Franz Pletz
c686f03305
tomcat: 6.0.44 -> 6.0.45, 7.0.62 -> 7.0.68, 8.0.23 -> 8.0.32
...
Fixes at least CVE-2015-5174, CVE-2015-5345, CVE-2015-5351, CVE-2016-0706,
CVE-2016-0714, CVE-2016-0763.
2016-03-07 03:34:44 +01:00
Hoang Xuan Phu
5ac1de516e
archiveopteryx: override specific build settings instead of PREFIX
...
Closes #13708 and fixes #13707 .
2016-03-06 11:37:24 +01:00
Franz Pletz
cb3d27df93
Merge remote-tracking branch 'origin/master' into hardened-stdenv
2016-03-05 18:55:30 +01:00
Franz Pletz
aff1f4ab94
Use general hardening flag toggle lists
...
The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
2016-03-05 18:55:26 +01:00
tv
fdf22fb5bb
exim: 4.86 -> 4.86.2
2016-03-05 11:26:33 +01:00
Michael Raskin
708c6094c5
nginx, nginxUnstable: hardening: only use when the compiler is gcc
2016-03-04 16:57:47 +01:00
Michael Raskin
7b9684a5b5
nginx, nginxUnstable: enable hardening. Flags as recommended by @arno01 (Andrey Arapov) in #7190
2016-03-04 16:54:37 +01:00
Nikolay Amiantov
364423f38c
ejabberd: 16.01 -> 16.02
2016-03-04 14:46:45 +03:00
Nikolay Amiantov
01a3b6c059
uwsgi: 2.0.11.2 -> 2.0.12
2016-03-04 14:46:45 +03:00
Nikolay Amiantov
d7a98cb693
postsrsd: 1.3 -> 1.4
2016-03-04 14:46:45 +03:00
Robin Gloster
d47857c3d9
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-03-01 21:09:17 +00:00
Domen Kožar
e5069c1be5
rethinkdb: patch for glibc 2.23
2016-03-01 14:13:16 +01:00
Cole Mickens
f91f3a4c5a
plex: 0.9.15.3.1674 -> 0.9.15.6.1714
2016-02-28 14:30:05 -08:00
Cole Mickens
e1338ad121
plexpass: 0.9.15.5.1712 -> 0.9.15.6.1714
2016-02-28 14:30:03 -08:00
Nikolay Amiantov
a693d5cc99
Merge pull request #13514 from abbradar/samba-closure
...
samba: reduce closure size
2016-02-28 22:30:13 +03:00
Robin Gloster
3b4765c9e5
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-28 16:32:57 +00:00
Franz Pletz
a9d24cedeb
Merge pull request #12487 from hrdinka/refactor/nsd
...
Refactor NSD service and update to 4.1.7
2016-02-28 17:13:21 +01:00
zimbatm
69ce5cb656
use the sourceforge mirrors everywhere
...
find pkgs -name "*.nix" -exec sed -r \
"s|https?://downloads.sourceforge.net/|mirror://sourceforge/|g" -i {} \;
2016-02-28 12:07:42 +00:00
Peter Simons
0ac7cbe334
Merge pull request #13536 from phunehehe/postfix-symlinks
...
postfix: use relative symlinks for mailq and newaliases
2016-02-28 11:28:46 +01:00
Nikolay Amiantov
82560aefd7
samba: reduce closure size
2016-02-28 12:49:34 +03:00
Michael Raskin
a08c8b12f0
Add Apache Jena Fuseki instead of obsolete and unavailable Jena Joseki
2016-02-28 10:39:33 +01:00
Hoang Xuan Phu
6bb016101f
postfix: use relative symlinks for mailq and newaliases
2016-02-28 16:19:18 +08:00
Christoph Hrdinka
a0753c7cb2
nsd: 4.1.6 -> 4.1.7
2016-02-28 09:17:46 +01:00
Graham Christensen
0a2c3ec971
mysql: 5.5.45 -> 5.5.48 for multiple CVEs: CVE-2015-4792 CVE-2015-4802 CVE-2015-4815 CVE-2015-4816 CVE-2015-4819 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4879 CVE-2015-4913
2016-02-27 15:31:52 -06:00
zimbatm
17348dc094
Remove all dots at end of descriptions
...
Specially crafted for @JagaJaga
find pkgs -name "*.nix" -exec \
sed -e 's|\(description.*\)\.";|\1";|g' -i {} \;
2016-02-27 17:30:29 +00:00
Robin Gloster
cfffac2a90
postfix: use hardening flags from stdenv
2016-02-27 11:50:34 +00:00
Robin Gloster
5176e7ac77
mongodb: enable pie hardening
2016-02-27 00:48:49 +00:00
Robin Gloster
3477e662e6
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-27 00:08:08 +00:00
Robin Gloster
b4dadff542
memcached: enable pie hardening
2016-02-26 23:13:13 +00:00
Robin Gloster
1a31447c4c
icecast: enable pie hardening
2016-02-26 23:06:53 +00:00
Robin Gloster
310fa56788
nginx: enable pie hardening
2016-02-26 16:38:26 +00:00
Robin Gloster
0f4ecfad68
certificate-transparency: clean up and use newer clang
2016-02-25 01:27:43 +00:00
Robin Gloster
2fbbd71861
riak2: disable format hardening
2016-02-24 21:36:26 +00:00
zimbatm
09c14170d8
Merge pull request #13125 from abbradar/uwsgi
...
Refactor uWSGI
2016-02-23 22:32:54 +00:00
Frederik Rietdijk
40ca841c5c
Merge pull request #13124 from FRidh/buildPythonApplication
...
buildPythonApplication: use new function for Python applications
2016-02-23 16:02:10 +01:00
Cole Mickens
f0061cb039
plexpass: 0.9.15.4.1679 -> 0.9.15.5.1712
2016-02-22 20:22:07 -08:00
Pascal Wittmann
5d6d841d58
Merge pull request #13373 from tomberek/revert_kippo_twisted
...
kippo: revert twisted dependency
2016-02-22 23:50:17 +01:00
Thomas Bereknyei
e31c8922e0
kippo: revert twisted dependency
2016-02-22 13:57:24 -05:00
Robin Gloster
bb2639aafc
Merge branch 'curl-7.15-fixup' of https://github.com/zimbatm/nixpkgs into hardened-stdenv
2016-02-22 01:14:22 +00:00
Vladimír Čunát
5e26e698b9
Merge #13081 : update plex and plexpass
2016-02-21 11:47:07 +01:00
Robin Gloster
4036e9ba8c
Merge branch 'up' into hardened-stdenv
2016-02-20 22:27:33 +00:00
Moritz Ulrich
0e96c96b84
mosquitto: Use built-in Makefile for installation.
...
This will also install man pages, client-binaries (mosquitto_sub,
mosquitto_pub), libs, headers, etc.
2016-02-20 14:46:20 +01:00
Robin Gloster
bc21db3692
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-19 21:16:14 +00:00
Arseniy Seroka
bce982e082
Merge pull request #13076 from romildo/update-opensmtpd
...
opensmtpd: 5.7.3p1 -> 5.7.3p2
2016-02-19 22:53:59 +03:00
Nikolay Amiantov
d39d87bb81
uwsgi: disable built-in yaml support
2016-02-19 17:02:40 +03:00
Nikolay Amiantov
c6f143307c
uwsgi: refactor, throw sensible error if plugin is not found
2016-02-19 17:02:40 +03:00
Frederik Rietdijk
4d06bf70f4
buildPythonApplication: use new function for Python applications
2016-02-19 13:16:41 +01:00
Shea Levy
c4910af815
Merge branch 'redis-3.0.7' of https://github.com/kragniz/nixpkgs
2016-02-18 13:30:57 -05:00
Louis Taylor
6326172fed
redis: 3.0.6 -> 3.0.7
2016-02-18 17:36:36 +00:00