Commit Graph

83522 Commits

Author SHA1 Message Date
Scott R. Parish
64f5845418 glibc: patch 2.23 for CVE-2016-3075, CVE-2016-1234, CVE-2016-3706
This addresses the following security advisories:

+ CVE-2016-3075: Stack overflow in _nss_dns_getnetbyname_r
+ CVE-2016-1234: glob: buffer overflow with GLOB_ALTDIRFUNC due to incorrect
                 NAME_MAX limit assumption
+ CVE-2016-3706: getaddrinfo: stack overflow in hostent conversion

Patches cherry-picked from glibc's release/2.23/master branch.

The "glob-simplify-interface.patch" was a dependency for
"cve-2016-1234.patch".
2016-05-13 23:47:17 -07:00
Joachim Fasting
3f0518ac4d Merge pull request #15378 from aneeshusa/add-lib-output-for-ccacheStdenv
ccacheStdenv: inherit lib output from wrapped gcc
2016-05-14 06:25:34 +02:00
Joachim Fasting
4e9833d9e8 Merge pull request #15384 from Shados/fix-preshell-terminfo
nixos: ensure TERMINFO is set before user shells are run
2016-05-14 06:21:25 +02:00
Joachim Fasting
6194e9d801
kernelPatches.grsecurity: 4.5.4-201605122039 -> 4.5.4-201605131918
Also revert to using the grsecurity-scrape mirror; relying on upstream
just isn't viable. Lately, updates have been so frequent that a new
version is released before Hydra even gets around to building the
previous one.
2016-05-14 05:15:35 +02:00
Nikolay Amiantov
cd5dd9f82e udev service: fix packages' paths 2016-05-14 05:12:52 +03:00
Nikolay Amiantov
5c39f28a9f Merge pull request #15024 from abbradar/xfce-no-desktop
xfce service: add noDesktop option
2016-05-14 04:55:27 +03:00
Rok Garbas
ac8cd3e9a6 pythonPackages.psycopg2: 2.5.4 -> 2.6.1 2016-05-14 03:35:34 +02:00
Nikolay Amiantov
c6a61092e7 pythonPackages.sip: let python.buildEnv detect it 2016-05-14 04:29:22 +03:00
Nikolay Amiantov
38ef2df4a6 pythonPackages.pyqt{,5}: let python.buildEnv detect it 2016-05-14 04:22:50 +03:00
Nikolay Amiantov
9ff10bb9f9 Merge pull request #15334 from igsha/fix-pyqt5
pyqt5: fix
2016-05-14 04:22:01 +03:00
Nikolay Amiantov
4ed271893f pythonPackages.pygobject{,3}: let python.buildEnv detect it 2016-05-14 04:04:41 +03:00
Nikolay Amiantov
4cb218b76a xgboost: fix license
Looks like `nix-env -qaP --drv-path` is not enough and one need to
either add `--json` too to catch problems like this... or just use
`nox-review wip`.
2016-05-14 02:38:12 +03:00
Nikolay Amiantov
c403235585 xgboost: init at 2016-05-14 2016-05-14 02:16:13 +03:00
Joachim Fasting
7fdce2feb0
kernelPatches.grsecurity_4_5: 4.5.4-201605112030 -> 4.5.4-201605122039 2016-05-13 23:11:07 +02:00
Arseniy Seroka
67d1b8f757 Merge pull request #15431 from zimbatm/sublime-3114
sublime3: 3103 -> 3114
2016-05-14 00:07:01 +03:00
Tuomas Tynkkynen
e460267737 bind: Attempt to fix Darwin OpenSSL linking
Issue #15279 reports:

````
Checking for OpenSSL library... using OpenSSL from /nix/store/c6kijfc5py2805lmqczvmcws5cm9jg1l-openssl-1.0.2g-dev/lib and /nix/store/c6kijfc5py2805lmqczvmcws5cm9jg1l-openssl-1.0.2g-dev/include
checking whether linking with OpenSSL works... no
configure: error: Could not run test program using OpenSSL from
/nix/store/c6kijfc5py2805lmqczvmcws5cm9jg1l-openssl-1.0.2g-dev/lib and /nix/store/c6kijfc5py2805lmqczvmcws5cm9jg1l-openssl-1.0.2g-dev/include.
Please check the argument to --with-openssl and your
shared library configuration (e.g., LD_LIBRARY_PATH).
builder for ‘/nix/store/54nni99j4ycwws6zfjwcvv8vxsdk895i-bind-9.10.4.drv’ failed with exit code 1
````
2016-05-13 23:31:30 +03:00
Joachim Fasting
aab9a5f0d1 Merge pull request #15351 from groxxda/bump/libinput
libinput: 1.2.3 -> 1.3.0
2016-05-13 20:36:33 +02:00
Joachim Fasting
10aaca8c1f
grsecurity_4_5: 4.5.3-201605080858 -> 4.5.4-201605112030 2016-05-13 20:11:31 +02:00
Thomas Tuegel
21efdd8003 Merge pull request #15420 from samuelrivas/emacs-wrapper
emacs: hide wrapper dependencies
2016-05-13 11:58:24 -05:00
Thomas Tuegel
5e694aa3b3 Merge pull request #15430 from mdorman/emacs-revert
Revert removal of three hand-maintained emacs packages
2016-05-13 11:57:34 -05:00
Benjamin Staffin
f17fc4ed1c Merge pull request #15426 from zimbatm/packer-0.10.1
packer: 0.8.6 -> 0.10.1
2016-05-13 12:18:05 -04:00
vbgl
2d72723726 ocaml-batteries: 2.4.0 -> 2.5.2 (#15424) 2016-05-13 18:08:17 +02:00
Franz Pletz
6d1fe178c3 mpd: 0.19.12 -> 0.19.15 2016-05-13 17:45:39 +02:00
Franz Pletz
939c80c26f jenkins module: Check for 200 & 403 response codes
The new jenkins version shows a setup wizard on first startup that will
throw a 403 HTTP response code instead of 200.
2016-05-13 17:45:39 +02:00
Franz Pletz
4a3a92d5c8 jenkins: 1.653 -> 2.3 2016-05-13 17:45:39 +02:00
Franz Pletz
11dee6fa17 pcsclite: 1.8.14 -> 1.8.16 2016-05-13 17:27:59 +02:00
Franz Pletz
9e01c46e4a ccid: 1.4.20 -> 1.4.23 2016-05-13 17:27:59 +02:00
Franz Pletz
4d750ae2c7 php: 7.0.5 -> 7.0.6 2016-05-13 17:27:59 +02:00
Franz Pletz
f743e56744 radvd: 2.12 -> 2.13 2016-05-13 17:27:59 +02:00
Franz Pletz
6b633b15e9 sslh: 1.17 -> 1.18 2016-05-13 17:27:58 +02:00
Franz Pletz
006f6d9437 linux: 4.5.3 -> 4.5.4 2016-05-13 17:27:51 +02:00
Franz Pletz
9458198868 f2fs-tools: 1.5.0 -> 1.6.1 2016-05-13 17:27:01 +02:00
Franz Pletz
9e56f3a9b5 oraclejdk8: 8u91 -> 8u92 2016-05-13 17:27:00 +02:00
Franz Pletz
d510563837 oraclejdk8: jmc is only available in jdk, not in jre 2016-05-13 17:27:00 +02:00
Franz Pletz
54e87bad04 tinc: 1.0.26 -> 1.0.28 2016-05-13 17:27:00 +02:00
Franz Pletz
c7e69de43b p0f: 3.08b -> 3.09b 2016-05-13 17:25:25 +02:00
Franz Pletz
c6ff91912b ncmpcpp: 0.7.3 -> 0.7.4 2016-05-13 17:25:25 +02:00
Franz Pletz
993dadd213 gnuradio: 3.7.9.1 -> 3.7.9.2 2016-05-13 17:25:24 +02:00
Adam Russell
74883be684
idea.idea14-ultimate: init at 14.1.7
(cherry picked from commit a4f13a8bae)
2016-05-13 15:54:34 +02:00
Arseniy Seroka
efa8c3b6be Merge pull request #15428 from chris-martin/idea-security-update
Idea security update
2016-05-13 15:15:28 +03:00
Frederik Rietdijk
8fa6930d84 pythonPackages.aws_shell: use futures 3.0, not 2.2 2016-05-13 13:34:29 +02:00
zimbatm
dabef63eaf sublime3: 3103 -> 3114 2016-05-13 11:36:50 +01:00
Michael Alan Dorman
1b314a70c2 Revert "Remove obsolete pcache version"
This reverts commit 5cc4ff09fa.
2016-05-13 06:35:19 -04:00
Michael Alan Dorman
ada0d47b3e Revert "Remove obsolete s version"
This reverts commit 7ccdbff95b.
2016-05-13 06:35:06 -04:00
Michael Alan Dorman
0d4dfbd570 Revert "Remove obsolete xml-rpc version"
This reverts commit 5017e24756.
2016-05-13 06:34:44 -04:00
Vladimír Čunát
bb73e25cdc coreutils: disable checks when using non-standard storeDir
That should help with https://github.com/NixOS/nix/issues/512
2016-05-13 11:41:17 +02:00
Chris Martin
ff48229c42 idea.webstorm: 10.0.4 -> 10.0.5 2016-05-13 04:57:20 -04:00
Chris Martin
ee511456fc idea.phpstorm: 10.0.1 -> 10.0.4 2016-05-13 04:57:03 -04:00
Chris Martin
8cf2a2dbeb idea.pycharm-professional: 2016.1.2 -> 2016.1.3 2016-05-13 04:56:36 -04:00
Chris Martin
89f46ab3e3 idea.pycharm-community: 2016.1.2 -> 2016.1.3 2016-05-13 04:55:57 -04:00