Commit Graph

3004 Commits

Author SHA1 Message Date
rnhmjoj
a7b7d0fc3e
dnscrypt-proxy: 1.9.1 -> 1.9.4 2017-01-23 13:15:33 +01:00
Franz Pletz
dabedc40a9
ngrep: fix build due to new libpcap, use debian patches 2017-01-22 14:09:50 +01:00
Franz Pletz
9156d932b6
tcpdump: 4.7.4 -> 4.8.1 2017-01-22 13:01:00 +01:00
Vladimír Čunát
6b6553c768
Merge branch 'staging'
It contains security updates.  I somehow forgot to push this yesterday.
2017-01-20 16:33:59 +01:00
Jörg Thalheim
3fdde25b4c Merge pull request #21962 from Mic92/gemdir
bundleEnv: Used gemdir for most applications now
2017-01-19 09:34:14 +01:00
Vladimír Čunát
40003aa2ed
Merge branch 'master' into staging 2017-01-18 15:54:04 +01:00
Jörg Thalheim
246fd4c950
maphosts: use gemdir 2017-01-18 00:52:48 +01:00
Periklis Tsirakidis
513ce19fd0 offlineimap: 7.0.9 -> 7.0.12 2017-01-17 23:04:37 +01:00
Tristan Helmich
c7ea194b41 fping: 3.13 -> 3.15 (#21949) 2017-01-17 11:55:09 +01:00
Tristan Helmich
c885570944 fping: enable IPv6 (provides fping6 binary) (#21950) 2017-01-17 11:54:03 +01:00
Nikolay Amiantov
70a6628848 Merge pull request #21882 from abbradar/dhcp6
DHCPv6 improvements
2017-01-15 19:53:33 +03:00
Nikolay Amiantov
cb418318a0 radvd: 2.13 -> 2.15 2017-01-15 19:38:53 +03:00
Bas van Dijk
f0338024b9 strongswan: enable charon-systemd (#21872)
See: https://wiki.strongswan.org/projects/strongswan/wiki/Charon-systemd
2017-01-14 20:41:51 +01:00
Frederik Rietdijk
66d3b9a02d wicd: use python2 2017-01-11 18:25:10 +01:00
Pascal Wittmann
1738be8cd2
axel: 2.11 -> 2.12 2017-01-09 21:32:30 +01:00
Jörg Thalheim
188fcc1eb5
ferm: 2.3 -> 2.3.1 2017-01-08 23:40:40 +01:00
Joachim Fasting
0f24e56728
dnscrypt-proxy: 1.9.0 -> 1.9.1 2017-01-07 08:02:53 +01:00
Vladimír Čunát
07bf828bd9
Merge branch 'staging'; security /cc #21642 2017-01-06 16:32:47 +01:00
Gabriel Ebner
b0ccbb395c Merge pull request #21658 from acowley/mu-no-mug
mu: allow gtk-free builds
2017-01-06 00:22:30 -05:00
Anthony Cowley
8ca70e358d mu: allow gtk-free builds
The gtk components are enabled by default when stdenv.isLinux is true.
2017-01-05 17:55:54 -05:00
Franz Pletz
e94bfe55c4
mitmproxy: 0.17.1 -> 1.0.2, move to all-packages.nix 2017-01-05 06:25:26 +01:00
Matthias Beyer
b5c7ce015f http-prompt: 0.2.0 -> 0.8.0 2017-01-04 16:29:33 +01:00
Daiderd Jordan
27660cfdc0
Merge branch 'master' into staging 2017-01-04 01:42:26 +01:00
Eelco Dolstra
82b0ae1223 Merge pull request #21612 from NeQuissimus/curl_7_52_1
curl: 7.51.0 -> 7.52.1
2017-01-03 16:11:35 +01:00
Tim Steinbach
125fa1520d
curl: 7.51.1 -> 7.52.1 2017-01-03 08:42:59 -05:00
Michael Raskin
277e7119be openvpn: 2.3.13 -> 2.4.0 2017-01-02 15:38:46 +01:00
Michael Raskin
6151982f58 Merge pull request #21581 from bendlas/update-i2p
i2p: 0.9.26 -> 0.9.28
2017-01-02 14:15:10 +00:00
Michael Raskin
c882915351 Merge pull request #21548 from FPtje/patch-2
Strongswan: enable rdrand and aes-ni only on X86
2017-01-02 14:07:16 +00:00
Herwig Hochleitner
86a6083498 i2p: 0.9.26 -> 0.9.28
update patch
2017-01-02 13:14:42 +01:00
Daiderd Jordan
5a67b130b9
Merge branch 'master' into staging 2017-01-02 00:54:17 +01:00
Jörg Thalheim
d5f8652e6d Merge pull request #17364 from fmu/ndjbdns-fix
ndjbdns: build from latest sources which adds Darwin compatibility
2017-01-01 08:34:28 +01:00
volth
06b372f24f miredo: init at 1.2.6 2016-12-31 21:03:27 +01:00
Falco Peijnenburg
9c61571f1a Strongswan: enable rdrand and aes-ni only on X86
Strongswan fails to compile on armv7l-linux with `--enable-aesni` and  `--enable-rdrand` enabled. Errors are thrown about impossible constraints in asm (`--enable-rdrand`) or about gcc getting unknown command line parameters about aes (`--enable-aesni`). The options only makes sense on X86_64 processors.

The rdrand plugin is designed for Ivy Bridge processors:

> High quality / high performance random source using the Intel rdrand instruction found on Ivy Bridge processors

The aes-ni plugin also only exists on X86 processors (which have the AES instruction set)

Tested with a local override. The change triggers a (successful) rebuild on my X86_64 system. On armv7-linux this change fixes build errors.

See: 
https://wiki.strongswan.org/issues/337
2016-12-31 14:26:17 +01:00
Dhananjay Balan
cab497ee6d unbound 1.5.6 > 1.6.0 2016-12-30 18:13:10 +01:00
Joachim Fasting
64f45520b9
dnscrypt-proxy: 1.7.0 -> 1.9.0
Release notes at:
https://github.com/jedisct1/dnscrypt-proxy/releases/tag/1.9.0

Packaging tweaks:
- No longer split man page, kind of pointless ...
- No longer install libtool files, they are now optional
2016-12-30 05:33:58 +01:00
Vladimír Čunát
0163f0c427
openssh: update the gssapi patch
Only building was tested.
2016-12-29 17:04:58 -05:00
Graham Christensen
11e8ed5ff4
Revert "Revert "openssh: security 7.3p1 -> 7.4p1""
This reverts commit 661b5a9875.
2016-12-29 17:04:39 -05:00
Sophie Taylor
0e0fb196ca openntpd: v6+ requires libressl for constraints 2016-12-28 13:35:42 +10:00
zimbatm
12532879b0 zerotierone: 1.1.12 -> 1.1.14 2016-12-27 17:47:41 +00:00
Mitch Tishmack
b398665a4e wakelan: refactor allow builds on non linux 2016-12-26 15:04:45 -06:00
Vladimír Čunát
661b5a9875
Revert "openssh: security 7.3p1 -> 7.4p1"
This reverts commit 277080fea0.

I had tested the server on my physical machine before pushing,
but the openssh test got broken so something is clearly wrong.
http://hydra.nixos.org/build/45500080
2016-12-25 22:15:56 +01:00
Vladimír Čunát
277080fea0
openssh: security 7.3p1 -> 7.4p1
The two removed patches were for issues that should've been fixed.
Minor vulnerabilities addressed: CVE-2016-{10009,10010,10011,10012}.
https://www.openssh.com/txt/release-7.4
2016-12-25 18:42:55 +01:00
zimbatm
c38b4da994 strongswan: 5.5.0 -> 5.5.1 2016-12-24 15:57:56 +00:00
Joachim Fasting
a34eae0ecb
stun: gzip -9 -> gzip -9n
Note that it does not seem to make a difference to `nix-build --check`.
2016-12-20 15:32:14 +01:00
Joachim Fasting
8246a845b4
zerotierone: gzip -9 -> gzip -9n
Note that it does not seem to make a difference to `nix-build --check`.
2016-12-20 15:32:07 +01:00
Gabriel Ebner
182c735527 mu: 0.9.16 -> 0.9.18 2016-12-15 14:45:46 -05:00
Franz Pletz
dc0c7104ea
chrony: 2.4 -> 2.4.1 2016-12-15 15:35:22 +01:00
Tomas Hlavaty
d65ef03677 stunnel: 5.37 -> 5.38 2016-12-13 22:34:25 +01:00
schneefux
b6a4876258
httpie: 0.9.6 -> 0.9.8 2016-12-11 13:17:49 +01:00
Michael Raskin
64402bb9e0 getmail: 4.51.0 -> 4.52.0 2016-12-08 16:15:18 +01:00
Joachim Fasting
148ee2cba9
privoxy: homepage now reachable via https 2016-12-06 15:48:39 +01:00
Joachim Fasting
1a427cf625
privoxy: enable pie 2016-12-06 15:48:28 +01:00
Chris Martin
02ecd0f0f7 pssh: init at 2.3.1 2016-12-06 00:46:48 -05:00
Tristan Helmich
90292a8093 nzbget: 17.0-r1686 -> 17.1 2016-12-05 21:11:22 +01:00
Joachim Fasting
407537a4bc
privoxy: 3.0.24 -> 3.0.26
With some minor cosmetics
2016-12-05 13:20:51 +01:00
Franz Pletz
e3d54be387
dhcpcd: 6.11.3 -> 6.11.5 2016-12-04 01:40:26 +01:00
Eric Sagnes
813e5284cf urlwatch: 2.2 -> 2.5 2016-12-02 13:14:22 +09:00
Tuomas Tynkkynen
8a4d6516ee Merge remote-tracking branch 'upstream/staging' into master 2016-11-30 00:34:23 +02:00
Alexander Tsamutali
c9b8a6585d Add tools/networking/polysh 2016-11-29 17:32:21 +03:00
Franz Pletz
e394c305a8 Merge pull request #20620 from rnhmjoj/fakeroute
fakeroute: init at 0.3
2016-11-28 03:01:15 +01:00
Tuomas Tynkkynen
2d679dbe74 ntp: Don't use seccomp on non-x86
It only has the allowed system call numbers defined for i386 and x86_64
so it fails to build otherwise.
2016-11-26 20:38:17 +02:00
Franz Pletz
9007303001
curl: add upstream patch to fix HTTP2 performance issues
See #20639. Patch has to be in nixpkgs because fetchurl depends on curl.
2016-11-26 14:48:05 +01:00
Vladimír Čunát
925b335607
Merge branch 'master' into staging 2016-11-26 11:27:09 +01:00
roxma
78f81c5bac proxychains: fix build, add -ldl to LDFLAGS
Closes #20355
2016-11-25 12:17:11 +01:00
Frederik Rietdijk
3ebca4f4cf vde2: use python2 2016-11-24 22:28:03 +01:00
Frederik Rietdijk
c355a73e2c s3cmd: use python2 2016-11-24 22:28:02 +01:00
Jascha Geerds
79ea04c6c7 Merge pull request #20646 from romildo/upd.aria2
aria2: 1.28.0 -> 1.29.0
2016-11-23 23:48:22 +01:00
Nikolay Amiantov
e5167e8763 update-resolv-conf: 2016-04-24 -> 2016-09-30 2016-11-24 01:17:58 +03:00
Nikolay Amiantov
77a61cabe9 logmein-hamachi: 2.1.0.165 -> 2.1.0.174 2016-11-24 01:17:58 +03:00
Nikolay Amiantov
be95ceaff2 treewide: quote URLs in my packages 2016-11-24 01:17:52 +03:00
rnhmjoj
d753527bd4
fakeroute: init at 0.3 2016-11-23 15:22:55 +01:00
romildo
6f5a704205 aria2: 1.28.0 -> 1.29.0 2016-11-23 07:49:19 -02:00
Sophie Taylor
91d2071e7a openntpd: 5.7p4 -> 6.0p1 (#20602) 2016-11-22 03:45:09 +01:00
Franz Pletz
cc925a0162
stunnel: 5.36 -> 5.37 2016-11-22 03:16:47 +01:00
Franz Pletz
009e37d277
ntp: fix ntp-wait script, depends on perl 2016-11-21 23:25:21 +01:00
Franz Pletz
67fd21a170
ntp: use seccomp on linux 2016-11-21 23:11:05 +01:00
Franz Pletz
db66a95e5b
ntp: 4.2.8p8 -> 4.2.8p9
Includes fixes for 10 CVEs and contains other fixes.

See http://support.ntp.org/bin/view/Main/SecurityNotice#November_2016_ntp_4_2_8p9_NTP_Se.
2016-11-21 22:49:02 +01:00
Pascal Wittmann
1416ed7b08
vtun: 3.0.3 -> 3.0.4 2016-11-20 16:36:52 +01:00
Rok Garbas
c2e5c30bb7 offlineimap: 7.0.6 -> 7.0.9 2016-11-20 15:47:10 +01:00
Pascal Wittmann
4cdfa0b96a
axel: 2.7 -> 2.11 2016-11-19 10:51:56 +01:00
Thomas Tuegel
520064e4b5
networkmanager: multiple outputs 2016-11-15 07:15:04 -06:00
Tobias Geerinckx-Rice
e1220105e3
netsniff-ng: 0.6.1 -> 0.6.2 2016-11-09 02:24:45 +01:00
Benno Fünfstück
0e78ed82bf dirb: init at 2.22 2016-11-07 00:52:13 +01:00
Edward Tjörnhammar
721c3d48e1
i2pd: 2.9.0 -> 2.10.0 2016-11-06 08:13:03 +01:00
Sophie Taylor
c5cac5051a cjdns v17.3 -> v18 2016-11-04 11:52:28 +01:00
=
f14888b2fe reaverwps-t6x: init at 1.5.2 2016-11-03 23:45:14 +02:00
=
5245e4f1c2 pixiewps: init at 1.2.2 2016-11-03 23:45:14 +02:00
Tim Steinbach
04b22dd935 Merge pull request #19982 from sternenseemann/netcat
Make netcat-openbsd the default netcat
2016-11-02 19:44:29 -04:00
Eelco Dolstra
1e1609da6a curl: 7.50.3 -> 7.51.0
Fixes 11 CVEs:

https://curl.haxx.se/changes.html#7_51_0
2016-11-02 10:38:17 +01:00
sternenseemann
bbe9159725 netcat-openbsd: install man page 2016-10-30 15:06:16 +01:00
sternenseemann
e2372502d3 netcat: make netcat-openbsd the default netcat (#19411)
The motivation for this change is the following: As gnu-netcat,
e. g. does not support ipv6, it is not suitable as default netcat.

This commit also fixes all obvious build issues caused by this change.
2016-10-30 15:06:04 +01:00
Joachim Fasting
a79695e3e2
dnscrypt-wrapper: 0.2.1 -> 0.2.2
Upstream changed distribution terms to what they call "0-clause BSD" aka
ISC.
2016-10-29 03:04:03 +02:00
Sean Bartell
64b1fe26a7 nc6: remove
The download sources are gone and the program is obsolete now that
the popular versions of netcat support IPv6. See:
http://www.deepspace6.net/projects/netcat6.html
2016-10-28 10:54:33 -05:00
Frederik Rietdijk
7077a270bf Merge remote-tracking branch 'upstream/master' into HEAD 2016-10-26 13:06:43 +02:00
Graham Christensen
a95a5e48a9 Merge pull request #19824 from NeQuissimus/httpstat_1_2_1
httpstat: 1.2.0 -> 1.2.1
2016-10-24 19:16:20 -04:00
Franz Pletz
ffca975de7
kea: init at 1.1.0 2016-10-24 20:02:23 +02:00
Tim Steinbach
ca74b4e8c7
httpstat: 1.2.0 -> 1.2.1 2016-10-24 10:13:40 -04:00
Tim Steinbach
8f457026ad Merge pull request #19808 from vbgl/lftp-4.7.3
lftp: 4.7.1 -> 4.7.3
2016-10-23 20:55:52 -04:00
Kai Harries
2756711652
network-manager: give path to pppd executable
This fixes an issue I have faced when trying to connect to the internet
via wwan gsm modem.

(cherry picked from commit 0775adc599)

Closes https://github.com/NixOS/nixpkgs/pull/19812
2016-10-23 20:41:58 +02:00
Vincent Laporte
27750ac53a lftp: 4.7.1 -> 4.7.3 2016-10-23 18:03:55 +02:00
Joachim Fasting
0c0801e9c4
unbound: 1.5.9 -> 1.5.10
Fixes a fair number of bugs, see https://www.unbound.net/download.html.

Also use https for meta.homepage.
2016-10-22 20:47:11 +02:00
Frederik Rietdijk
e56832d730 Merge remote-tracking branch 'upstream/master' into HEAD 2016-10-22 17:23:24 +02:00
Tim Steinbach
2bc237ebe2
statsd: 0.7.2 -> 0.8.0 2016-10-20 17:35:03 -04:00
Graham Christensen
4d10b58cc1 Merge pull request #19730 from aneeshusa/fix-openssh-CVE-2016-8858
openssh: Patch CVE-2016-8858
2016-10-20 17:12:43 -04:00
Vladimír Čunát
4d5b893002 Merge #19081: gnome-3.22
Also master commits are brought in.
2016-10-20 23:04:10 +02:00
Aneesh Agrawal
7374105a96 openssh: Patch CVE-2016-8858
Also add myself as a maintainer.
2016-10-20 14:55:14 -04:00
Aycan iRiCAN
fe41a8560b ssldump: init at 09b3 2016-10-19 14:15:42 +00:00
Joachim F
7b4a9cd5f3 Merge pull request #19657 from romildo/upd.cmst
cmst: 2016.04.03 -> 2016.10.03
2016-10-19 05:24:26 +02:00
Frederik Rietdijk
727fcd3d2b httpstat: fix it 2016-10-18 23:14:36 +02:00
Frederik Rietdijk
0389aa9f7d getmail: use python2 2016-10-18 23:14:35 +02:00
romildo
bcca1cf326 aria2: 1.27.1 -> 1.28.0 2016-10-18 17:47:39 -02:00
romildo
5a049dfc15 cmst: 2016.04.03 -> 2016.10.03 2016-10-18 15:31:51 -02:00
Jinjing Wang
29191da7a0 shadowsocks-libev: 2.5.0 -> 2.5.5 2016-10-16 22:41:50 +08:00
schneefux
92487043ae
httpie: 0.9.3 -> 0.9.6 2016-10-16 15:44:29 +02:00
Alexander Ried
4094d63dea NetworkManager-strongswan: init at 1.4.0 2016-10-15 20:32:16 +02:00
Eelco Dolstra
811b876fab Revert "openssl, curl, git: Respect $NIX_SSL_CERT_FILE"
This reverts commit 942dbf89c6. Sorry,
this was supposed to go to staging instead of master...
2016-10-14 16:01:54 +02:00
Vladimír Čunát
061758490f Merge branch 'master' into staging
... to get the openssl mass rebuild: 942dbf89c.
2016-10-14 13:16:11 +02:00
Eelco Dolstra
942dbf89c6 openssl, curl, git: Respect $NIX_SSL_CERT_FILE
$NIX_SSL_CERT_FILE overrides $SSL_CERT_FILE, which in turn overrides
the default CA path (/etc/ssl/certs/ca-certificates.crt). This allows
Nix to set a CA path without interfering with other packages (such as
Homebrew).

See https://github.com/NixOS/nix/issues/921.
2016-10-14 12:06:10 +02:00
Vladimír Čunát
6eeea6effd Python: more evaluation fixups. 2016-10-14 00:03:12 +02:00
Franz Pletz
c766c7f095
fastd: fix meta.platforms typo 2016-10-14 00:02:30 +02:00
Tuomas Tynkkynen
c66124e9b7 sshpass: 1.05 -> 1.06 2016-10-14 00:58:07 +03:00
Franz Pletz
29bd3898a6
fastd: init at 18 2016-10-13 21:42:17 +02:00
Frederik Rietdijk
f3c6236eb4 Merge pull request #19442 from peterhoeg/lc
linkchecker: make it work with newer requests2
2016-10-12 10:21:29 +02:00
Vladimír Čunát
6898810ba6 Merge #19297: openssh: apply patch to fix vulnerability
NEWKEYS null pointer dereference.
2016-10-11 20:08:30 +02:00
Alexander Ried
bbb2f64588 tinc: 1.0.28 -> 1.0.29 (#19444) 2016-10-11 12:57:00 +02:00
Peter Hoeg
b120ef422c linkchecker: make it work with newer requests2
linkchecker has an odd version check for requests2 that fails on
versions > 2.9.x.

We patch out the check as we are providing a recent requests2. This
patch should be dropped when linkchecker >v9.3 is released.

We now also run the tests although I had to remove one failing test.
Yes, that's covering up the issue but we're still better off than
before.
2016-10-11 11:02:52 +08:00
Alexander Ried
9f0dffa84e networkmanagerapplet: 1.2.2 -> 1.4.2
Needs ModemManager for configuration of WWAN and jansson for
team configuration editing.
2016-10-10 09:42:59 +02:00
Alexander Ried
2117769601 modemmanager: 1.4.6 -> 1.6.2
Now supports systemd resume
2016-10-10 09:42:59 +02:00
Alexander Ried
1fa0a69fc2 networkmanager_openvpn: 1.2.2 -> 1.2.6 2016-10-10 09:42:59 +02:00
Alexander Ried
6bdf707641 networkmanager_vpnc: 1.2.2 -> 1.2.4 2016-10-10 09:42:59 +02:00
Alexander Ried
6f8a8fd9d4 networkmanager_pptp: 1.2.2 -> 1.2.4 2016-10-10 09:42:59 +02:00
Alexander Ried
f9aa64a6c4 networkmanager_openconnect: no update 2016-10-10 09:42:59 +02:00
Alexander Ried
8f631f575c networkmanager: 1.2.2 -> 1.4.2 2016-10-10 09:42:59 +02:00
Jörg Thalheim
5275d07fea Merge pull request #19357 from NeQuissimus/httpstat
httpstat: init at 1.2.0
2016-10-09 11:28:31 +02:00
Tim Steinbach
26f75f7d31
httpstat: init at 1.2.0 2016-10-08 18:48:04 -04:00
Franz Pletz
fa405aa264 bind: split out dnsutils & host binaries (#18903)
These tools are commonly used but don't require the other bind binaries.
Bind's libs are used, so they've also been split into an extra output.

The old version of host isn't maintained anymore and was removed From Debian
back in 2009: https://packages.qa.debian.org/h/host.html
2016-10-08 16:01:15 +02:00
Bjørn Forsman
3f7d2f72e7 gmvault: 1.8.1-beta -> 1.9.1
Adds support for OAuth2 (among other things).
2016-10-06 23:52:33 +02:00
Hendrik Schaeidt
d6d12ebc55
openvpn: disable libpam support on OSX to enable build 2016-10-06 20:24:02 +02:00
Graham Christensen
83a8cb1dc2
openssh: apply patch to fix https://bugzilla.redhat.com/show_bug.cgi?id=1380296 2016-10-06 08:54:10 -04:00
Tuomas Tynkkynen
5bf5de58ea treewide: Fix 'lib.optional' misuses
These add a singleton list of a package to buildInputs.
2016-10-01 23:38:06 +03:00
Jaka Hudoklin
98a8146428 Merge pull request #19016 from offlinehacker/pkgs/flannel/update/0.6.2
flannel: update, add nixos module, add tests
2016-10-01 17:22:34 +02:00
Jaka Hudoklin
eb1377ba30 flannel: 0.5.5 -> 0.6.2 2016-10-01 17:04:25 +02:00
Benno Fünfstück
1bae891e66 burpsuite: init at 1.7.06 2016-10-01 14:27:04 +02:00
Rob Vermaas
cfd62a1045 dd-agent: D'oh, removing duplicate requests dep.
(cherry picked from commit acf91fd6ef)
2016-09-30 13:24:19 +00:00
Rob Vermaas
a98dccf1e4 Fix dd-agent
(cherry picked from commit a6493ce4bd)
2016-09-30 13:15:23 +00:00
Joachim Fasting
10be782f25
connman: meta cleanup 2016-09-28 20:01:37 +02:00
makefu
16547d49da
wol: init at 0.7.1
wol, unlike wakelan, supports wake-on-lan passwords
2016-09-28 12:33:46 +02:00
Franz Pletz
d5adf2cc0b
dhcp: 4.3.3 -> 4.3.4
Uses shipped version of libbind now.

Fix CVE-2016-2774 & CVE-2015-8605.

cc #18856
2016-09-28 10:50:29 +02:00
Frederik Rietdijk
9e2c48994a getmail: pass in pythonPackages again
broken by 12bd2310ec
2016-09-26 16:06:57 +02:00
Michael Raskin
12bd2310ec getmail: 4.50.0 -> 4.51.0 2016-09-26 15:49:30 +02:00
Frederik Rietdijk
3ba16c8234 Do not use top-level buildPythonPackage or buildPythonApplication
but instead use the one in pythonPackages.
2016-09-26 11:10:51 +02:00
Frederik Rietdijk
e06e26af08 getmail: pass in pythonPackages 2016-09-26 11:10:51 +02:00
Arseniy Seroka
8269322d11 Merge pull request #18912 from grahamc/stunnel
stunnel: 5.31 -> 5.36
2016-09-25 01:05:31 +04:00
Franz Pletz
7d5546af42
chrony: 2.3 -> 2.4 2016-09-24 15:33:05 +02:00
Graham Christensen
90dae03cfe
stunnel: 5.31 -> 5.36 2016-09-23 22:26:25 -04:00
Eelco Dolstra
057bfdb689 Merge pull request #18877 from NeQuissimus/openvpn_2_3_12
openvpn: 2.3.11 -> 2.3.12
2016-09-23 18:06:18 +02:00
Eelco Dolstra
fe8dedf4ef Merge pull request #18879 from NeQuissimus/curl_7_50_3
curl: 7.50.1 -> 7.50.3
2016-09-23 18:05:27 +02:00
Tim Steinbach
cda53e434e
curl: 7.50.1 -> 7.50.3 2016-09-23 09:59:14 -04:00
Tim Steinbach
244aee5cd1
openvpn: 2.3.11 -> 2.3.12 2016-09-23 09:24:00 -04:00
Joachim F
7529fd3bff Merge pull request #18818 from Jookia/RFC_htpdate
Rfc htpdate
2016-09-23 15:19:49 +02:00
Alexey Shmalko
124f25bc7d Merge pull request #18794 from romildo/upd.aria2
aria2: 1.26.1 -> 1.27.1
2016-09-22 10:45:06 +03:00
Jookia
a83eadd81c htpdate: init at 1.1.3 2016-09-22 14:46:10 +10:00
Devresse Adrien
46f37ae78c davix: 0.4.0 -> 0.6.4 (#18768) 2016-09-21 19:35:50 +02:00
José Romildo Malaquias
01f3e331c5 aria2: 1.26.1 -> 1.27.1 2016-09-20 14:04:13 -03:00
Peter Simons
545040811b nbd: update to version 3.14 2016-09-19 15:45:12 +02:00
Franz Pletz
1234aaf47b
inadyn: 1.99.15 -> 2.0 2016-09-19 00:58:54 +02:00
Joachim F
bb27f062e6 Merge pull request #18592 from bendlas/update-connman
connman: 1.32 -> 1.33
2016-09-18 13:54:01 +02:00
Alexey Shmalko
19898d8284 Merge pull request #18650 from Ericson2314/openvpn-pkcs11
pkcs11-helper: git rev -> 1.11, openvpn w/ pkcs11-helper support
2016-09-18 14:43:07 +03:00
Joachim Fasting
a61af52bae
connman-notify: set platforms = linux
It seems pointless to build a notification app on platforms where
connman itself is not supported.
2016-09-17 13:52:00 +02:00
John Ericson
ea1caf9272 openvpn: Optional pkcs11 support 2016-09-16 07:24:03 -07:00
Zero King
c7e8ca2ce5 hping: broken on darwin 2016-09-16 09:11:22 +00:00
Kamil Chmielewski
914e0e594c buildGoPackage: deps.json -> deps.nix in NIXON
https://github.com/NixOS/nixpkgs/pull/17254#issuecomment-245295541

* update docs to describe `deps.nix`
* include goDeps in nix-shell GOPATH
* NixOS 16.09 rel notes about replacing goPackages
2016-09-16 00:04:55 +01:00
Benjamin Staffin
43dcb662e7 openssh: update gssapi patch, fix the build 2016-09-14 23:35:26 -04:00
Herwig Hochleitner
cc60ee187a connman: 1.32 -> 1.33 2016-09-14 18:44:48 +02:00
Franz Pletz
ee4c4768a4
curl3: remove vulnerable curl version 2016-09-14 09:03:23 +02:00
Kirill Boltaev
0f37287df5 treewide: explicitly specify gtk version 2016-09-13 21:09:24 +03:00
Kirill Boltaev
bccd75094f treewide: explicitly specify gtk and related package versions 2016-09-12 18:26:06 +03:00
michael bishop
2d6443aa71 toxvpn: 20160606 -> 2016-09-09
Closes #18459
2016-09-09 12:18:29 +01:00
obadz
95b6e93b63 pwnat: 0.3-beta -> 2014-09-08 2016-09-07 23:52:21 +01:00
obadz
4876c7362b stun: 0.96 -> 0.97 2016-09-07 18:25:59 +01:00
Eelco Dolstra
039ac38d1e minio-client: Init at 20160821 2016-09-07 17:41:53 +02:00
Eelco Dolstra
d0857bb1e6 openresolv: 3.7.0 -> 3.8.1 2016-09-07 14:15:57 +02:00
Alexander Ried
f4c89ba854 strongswan: 5.4.0 -> 5.5.0 2016-09-05 23:15:45 +02:00
Edward Tjörnhammar
4dfafbc0c3
i2pd: 2.8.0 -> 2.9.0 2016-09-04 12:48:14 +02:00
Jaka Hudoklin
639f98ff3c megatools: 1.9.94 -> 1.9.97 (#18254) 2016-09-04 00:53:58 +02:00
Jinjing Wang
3b45449f69 shadowsocks-libev: 2.4.8 -> 2.5.0 2016-09-03 15:49:14 +08:00
Tuomas Tynkkynen
e2c6740c37 Merge commit 'adaee73' from staging into master
This one was already merged into release-16.09, so let's not have the
stable branch is ahead of master and confuse things. In addition to
that, currently we have an odd situation that master has less things
actually finished building than in staging.

Conflicts:
	pkgs/data/documentation/man-pages/default.nix
2016-09-03 01:02:51 +03:00
Kranium Gikos Mendoza
71021a825d gtk-gnutella: disable bindnow/fortify/pic/relro hardening (#18195)
based on debian's settings at https://lintian.debian.org/full/lucab@debian.org.html#gtk-gnutella_1.1.8-2
2016-09-01 19:53:17 +02:00
Tuomas Tynkkynen
3364230d56 Disable bunch of non-compiling packages on Darwin
These ones have a "Last successful build" timestamp in the 2014s or
2015s. Presumably no one will notice if we now stop building them.

softether_4_18              2015-09-20  http://hydra.nixos.org/build/39418483
lensfun                     2014-09-30  http://hydra.nixos.org/build/39394104
net_snmp                    2015-09-20  http://hydra.nixos.org/build/39410553
djview                      2015-08-11  http://hydra.nixos.org/build/39413233
libmusicbrainz2             2015-09-20  http://hydra.nixos.org/build/39410106
fox_1_6                     2014-05-07  http://hydra.nixos.org/build/39410858
libofx                      2015-09-24  http://hydra.nixos.org/build/39423507
yacas                       2014-09-30  http://hydra.nixos.org/build/39393150
iomelt                      2014-09-30  http://hydra.nixos.org/build/39408486
softether                   2015-09-20  http://hydra.nixos.org/build/39425800
mp4v2                       2014-09-30  http://hydra.nixos.org/build/39421899
virtuoso7                   2014-09-21  http://hydra.nixos.org/build/39415206
man_db                      2015-04-23  http://hydra.nixos.org/build/39404236
libdiscid                   2014-09-30  http://hydra.nixos.org/build/39412202
zabbix22.agent              2014-09-21  http://hydra.nixos.org/build/39412149
vidalia                     2015-08-06  http://hydra.nixos.org/build/39411500
libmtp                      2015-09-20  http://hydra.nixos.org/build/39419199
wxGTK29                     2015-09-20  http://hydra.nixos.org/build/39415296
ncmpcpp                     2015-11-06  http://hydra.nixos.org/build/39404455
libtorrent                  2014-09-21  http://hydra.nixos.org/build/39394646
shishi                      2014-03-21  http://hydra.nixos.org/build/39418874
ocaml_3_12_1                2014-09-30  http://hydra.nixos.org/build/39392996
djview4                     2015-08-11  http://hydra.nixos.org/build/39427799
vimNox                      2014-05-23  http://hydra.nixos.org/build/39397012
ttfautohint                 2015-08-06  http://hydra.nixos.org/build/39398330
libraw                      2015-09-24  http://hydra.nixos.org/build/39402271
wxGTK30                     2015-09-20  http://hydra.nixos.org/build/39401871
sbcl_1_2_5                  2015-09-20  http://hydra.nixos.org/build/39426091
prover9                     2014-09-30  http://hydra.nixos.org/build/39406476
rcs                         2015-08-25  http://hydra.nixos.org/build/39392037
gpac                        2015-09-24  http://hydra.nixos.org/build/39399470
virtuoso6                   2014-09-30  http://hydra.nixos.org/build/39398651
xlslib                      2015-09-24  http://hydra.nixos.org/build/39410387
ucommon                     2015-03-27  http://hydra.nixos.org/build/39414040
commoncpp2                  2014-09-30  http://hydra.nixos.org/build/39420117
virtuoso                    2014-09-21  http://hydra.nixos.org/build/39399978
miniHttpd                   2014-09-30  http://hydra.nixos.org/build/39392925
mpack                       2014-09-26  http://hydra.nixos.org/build/39399535
nbd                         2014-09-26  http://hydra.nixos.org/build/39401367
newsbeuter-dev              2014-07-29  http://hydra.nixos.org/build/39406259
gimp_2_8                    2015-09-20  http://hydra.nixos.org/build/39436271
gimp                        2015-09-20  http://hydra.nixos.org/build/39435976
zabbix20.agent              2014-09-30  http://hydra.nixos.org/build/39393242
gst_all_1.gst-plugins-good  2015-09-20  http://hydra.nixos.org/build/39408506
ocaml_4_00_1                2014-09-30  http://hydra.nixos.org/build/39399526
inadyn                      2014-09-30  http://hydra.nixos.org/build/39426389
gst_all_1.gst-plugins-bad   2015-09-20  http://hydra.nixos.org/build/39392970
zabbix.agent                2014-09-30  http://hydra.nixos.org/build/39421412
cmake-2_8                   2015-09-24  http://hydra.nixos.org/build/39399443
liblastfm                   2015-08-06  http://hydra.nixos.org/build/39421812
newsbeuter                  2014-07-29  http://hydra.nixos.org/build/39396605
sdcv                        2014-09-26  http://hydra.nixos.org/build/39412928
2016-09-01 20:39:33 +03:00
Tuomas Tynkkynen
8c4aeb1780 Merge staging into master
Brings in:
    - changed output order for multiple outputs:
      https://github.com/NixOS/nixpkgs/pull/14766
    - audit disabled by default
      https://github.com/NixOS/nixpkgs/pull/17916

 Conflicts:
	pkgs/development/libraries/openldap/default.nix
2016-09-01 13:27:27 +03:00
Eelco Dolstra
8172cd734c docdev -> devdoc
It's "developer documentation", not "documentation developer" after
all.
2016-09-01 11:07:23 +02:00
Robin Gloster
459d46dc5a
socat2pre: enable ip6 on darwin 2016-08-31 15:41:51 +02:00
Tuomas Tynkkynen
3a762ef967 shadowsocks-libev: Fix 'lib.optional' use
Produces buildInputs having lists of lists.
2016-08-30 23:00:13 +03:00
José Romildo Malaquias
e9f1e1ad06 aria2: 1.24.0 -> 1.26.1 2016-08-30 09:51:35 -03:00
Tuomas Tynkkynen
c3bcb4e1ce treewide: Use explicit 'dev' references to glibc 2016-08-30 03:11:09 +03:00
Tuomas Tynkkynen
a17216af4c treewide: Shuffle outputs
Make either 'bin' or 'out' the first output.
2016-08-29 14:49:51 +03:00
obadz
3de6e5be50 Merge branch 'master' into staging
Conflicts:
      pkgs/applications/misc/navit/default.nix
      pkgs/applications/networking/mailreaders/alpine/default.nix
      pkgs/applications/networking/mailreaders/realpine/default.nix
      pkgs/development/compilers/ghc/head.nix
      pkgs/development/libraries/openssl/default.nix
      pkgs/games/liquidwar/default.nix
      pkgs/games/spring/springlobby.nix
      pkgs/os-specific/linux/kernel/perf.nix
      pkgs/servers/sip/freeswitch/default.nix
      pkgs/tools/archivers/cromfs/default.nix
      pkgs/tools/graphics/plotutils/default.nix
2016-08-27 23:54:54 +01:00
Graham Christensen
8d10928ad0 Merge pull request #17908 from Mic92/ferm
Ferm
2016-08-25 20:38:02 -04:00
Jörg Thalheim
7b354ce8cc
ferm: init at 2.3 2016-08-25 21:37:19 +02:00
Franz Pletz
62c72e9af7 dhcpcd: 6.10.1 -> 6.11.3 2016-08-25 01:43:54 +02:00
Jaka Hudoklin
bb21c377e7 Merge pull request #17651 from leenaars/argus
Argus + Argus-clients: init at 3.0.8.2
2016-08-24 23:48:20 +02:00
Robin Gloster
d8679e4957 easyrsa: use autoreconfHook 2016-08-24 20:18:52 +00:00
Robin Gloster
0e1b611a5b flannel: disable fortify hardening 2016-08-24 19:00:11 +00:00
obadz
78b7529ee3 Merge branch 'master' into staging 2016-08-24 11:57:44 +01:00
Daniel Peebles
3f337a2b23 Merge pull request #17685 from matthewbauer/darwin-misc2
Darwin misc. fixes
2016-08-24 11:52:27 +02:00
Michiel Leenaars
378c7a26af argus-clients: init at 3.0.8.2 2016-08-24 00:13:38 +02:00
obadz
8da8aa7ddb Merge branch 'hardened-stdenv' into staging 2016-08-23 18:50:10 +01:00
obadz
0e8d2725dc Merge branch 'master' into staging 2016-08-23 18:50:06 +01:00
Joachim Fasting
8ab400988c lsh: fix gcc5 build
The build fails with c11 (also tested c99), but works with gnu90.
2016-08-23 15:33:32 +00:00
Robin Gloster
7413278f9b Revert "Remove lsh, broken & unmaintained"
This reverts commit 73f4c2bdf8.
2016-08-23 15:32:41 +00:00
Zero King
04d7056514 mosh: 1.2.5 -> 1.2.6 (#17939) 2016-08-23 14:49:57 +00:00
zimbatm
320367c273 wrk: 4.0.0 -> 4.0.2 2016-08-23 10:40:03 +01:00
Eelco Dolstra
f2e496a9d8 Merge pull request #17935 from DamienCassou/offlineimap-7.0.6
offlineimap: 7.0.5 -> 7.0.6
2016-08-23 11:26:54 +02:00
Damien Cassou
d829298570 offlineimap: 7.0.5 -> 7.0.6 2016-08-23 10:47:55 +02:00
Tuomas Tynkkynen
df4ebf5f1a treewide: Fix output references to gnome3.gtk 2016-08-23 04:53:01 +03:00
Tuomas Tynkkynen
f46a48384a treewide: Make explicit that 'dev' output of readline is used 2016-08-23 03:52:07 +03:00
Tuomas Tynkkynen
dba79aa395 treewide: Make explicit that 'dev' output of bind is used 2016-08-23 03:45:22 +03:00
Tuomas Tynkkynen
282277dbc8 treewide: Use more makeBinPath 2016-08-23 01:18:10 +03:00
Tuomas Tynkkynen
74a3a2cd7e treewide: Use makeBinPath 2016-08-23 01:18:10 +03:00
Michiel Leenaars
4d2ef926b5 argus: init at 3.0.8.2 2016-08-22 22:17:14 +02:00
obadz
24a9183f90 Merge branch 'hardened-stdenv' into staging
Closes #12895

Amazing work by @globin & @fpletz getting hardened compiler flags by
enabled default on the whole package set
2016-08-22 01:19:35 +01:00
obadz
ba50fd7170 Merge branch 'master' into staging 2016-08-22 01:18:11 +01:00
Ram Kromberg
a0ff1c7824 ccnet: vala -> vala_0_23 2016-08-21 20:17:25 +03:00
Nikolay Amiantov
0b05a16070 wget: fix man pages 2016-08-21 18:25:54 +03:00
obadz
68936edfb3 Merge branch 'master' into staging 2016-08-21 12:03:41 +01:00
J Phani Mahesh
049f5e44e2 srelay: switch sf downloads to mirror://
This allows fallback to all configured mirrors for sourceforge
to download, instead of relying on just downloads.sourceforge.net
2016-08-20 19:14:31 +05:30
Joachim Fasting
ba0f9cfa49
Revert "Merge pull request #16980 from phanimahesh/sf-use-mirrors"
This reverts commit 217594fd1d, reversing
changes made to 8e8a89d8a8.

Turns out it wasn't ready afterall ...
2016-08-20 15:14:23 +02:00
J Phani Mahesh
a466257b1d srelay: switch sf downloads to mirror:// 2016-08-20 17:31:37 +05:30
Nikolay Amiantov
821e5c95b4 networkmanager098: fix binary paths 2016-08-19 17:57:04 +03:00
Nikolay Amiantov
1b8806098a networkmanager: point to kmod's modprobe 2016-08-19 17:56:59 +03:00
Nikolay Amiantov
ff22705793 treewide: replace several /sbin paths by /bin 2016-08-19 17:56:45 +03:00
Franz Pletz
b4cc9bd63a Merge remote-tracking branch 'origin/master' into hardened-stdenv
Fixes #17801 and #17802.
2016-08-17 19:43:43 +02:00
Frederik Rietdijk
5a501bd828 Remove top-level dbus_python and pythonDBus.
See #11567.

Furthermore, it renames pythonPackages.dbus to pythonPackages.dbus-
python as that's the name upstream uses.

There is a small rebuild but I couldn't figure out the actual cause.
2016-08-16 22:52:37 +02:00
Matthew Bauer
f6903292fc tlsdate: dont build on darwin
There was a typo previously adding these in.
2016-08-16 19:25:45 +00:00
Robin Gloster
33e1c78ae3 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-16 07:54:01 +00:00
Shea Levy
9adad8612b Revert "Merge branch 'modprobe-fix' of git://github.com/abbradar/nixpkgs"
Was meant to go into staging, sorry

This reverts commit 57b2d1e9b0, reversing
changes made to 760b2b9048.
2016-08-15 19:05:52 -04:00
Nikolay Amiantov
b067b53011 networkmanager098: fix binary paths 2016-08-16 00:19:26 +03:00
Nikolay Amiantov
cd05a8ed00 networkmanager: point to kmod's modprobe 2016-08-16 00:19:26 +03:00
Nikolay Amiantov
1afd250676 treewide: replace several /sbin paths by /bin 2016-08-16 00:19:25 +03:00
Nikolay Amiantov
fc7e8bd96e networkmanager: fix ExecReload in the service 2016-08-14 22:38:50 +03:00
Nikolay Amiantov
49fe339b09 update-resolv-conf: 20141003 -> 2016-04-24 2016-08-14 22:37:11 +03:00
Nikolay Amiantov
bd8217a2bc logmein-hamachi: 2.1.0.139 -> 2.1.0.165 2016-08-14 22:37:06 +03:00
Frederik Rietdijk
7986b718f3 Remove pycairo from top-level
See #11567.
2016-08-14 13:52:42 +02:00
Franz Pletz
bd4490e277 Merge branch 'master' into hardened-stdenv 2016-08-13 16:59:55 +02:00
Luca Bruno
e54bda6198 Merge pull request #17698 from DamienCassou/offlineimap-7.0.5
offlineimap: 7.0.4 -> 7.0.5
2016-08-12 21:45:30 +01:00
zimbatm
c2302f2f45 Merge pull request #17677 from kamilchm/no-go-libs-json
buildGoPackage: remove Go deps file `libs.json`
2016-08-12 18:13:29 +01:00
Damien Cassou
017e368036 offlineimap: 7.0.4 -> 7.0.5 2016-08-12 18:23:05 +02:00
Robin Gloster
b7787d932e Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-12 09:46:53 +00:00
Kamil Chmielewski
da3ddd48e4 buildGoPackage: remove Go deps file libs.json
After #16017 there were a lot
of comments saying that `nix` would be better than `JSON`
for Go packages dependency sets.
As said in https://github.com/NixOS/nixpkgs/pull/16017#issuecomment-229624046

    > Because of the content-addressable store, if two programs have the
    > same dependency it will already result in the same derivation in
    > the
    > store. Git also has compression in the pack files so it won't make
    > much difference to duplicate the dependencies on disk. And finally
    > most users will just use the binary builds so it won't make any
    > differences to them.

This PR removes `libs.json` file and puts all package dependencies in
theirs `deps.json`.
2016-08-11 23:07:09 +02:00
Michael Raskin
978dac9dee getmail: 4.49.0 -> 4.50.0 2016-08-11 17:57:35 +02:00
Vladimír Čunát
947abb08ac Merge branch 'staging' 2016-08-10 22:09:38 +02:00
Franz Pletz
38f322f2cf tlsdate: 0.0.12 -> 0.0.13 2016-08-10 07:12:08 +02:00
Franz Pletz
3b165fdacf dibbler: init at 1.0.1 2016-08-10 07:12:08 +02:00
Robin Gloster
0b8bde0b63 Merge pull request #17606 from jerith666/email-cwd
email: adopt upstream fix for "$cwd undefined in configure"
2016-08-09 06:00:08 +00:00
Matt McHenry
0d69547365 email: adopt upstream fix for "$cwd undefined in configure"
update to include https://github.com/deanproxy/eMail/pull/35
2016-08-08 23:02:04 -04:00
Aneesh Agrawal
f6eae2efab openssh: 7.2p2 -> 7.3p1 (#17493)
Also remove patch for CVE-2015-8325 that has been fixed upstream.
2016-08-07 19:55:20 +02:00
Vladimír Čunát
03e32315a5 Merge branch 'master' into staging
Hydra nixpkgs: ?compare=1286624
2016-08-07 11:35:28 +02:00
Kranium Gikos Mendoza
3c1b7efaa8 curl: 7.50.0 -> 7.50.1 (#17486) (#17527) 2016-08-05 15:52:58 +02:00
Rok Garbas
3823033107 Revert "curl: 7.47.1 -> 7.50.0" (#17528) 2016-08-05 11:03:51 +02:00
Rok Garbas
9c6fccf29a Revert "curl: 7.50.0 -> 7.50.1" (#17525) 2016-08-05 10:52:30 +02:00
Kranium Gikos Mendoza
4b62054f4c curl: 7.50.0 -> 7.50.1 (#17486) 2016-08-05 05:00:53 +02:00
Franz Pletz
6cf7e8d2ed libreswan: 3.17 -> 3.18 (security)
Fixes CVE-2016-5391, see

  https://libreswan.org/security/CVE-2016-5391/CVE-2016-5391.txt
2016-08-05 04:07:31 +02:00
Franz Pletz
05dbbae47c vlan: disable format hardening 2016-08-04 11:03:28 +02:00
Damien Cassou
54867b64b4 Merge pull request #17471 from DamienCassou/offlineimap-7.0.4
offlineimap: 7.0.2 -> 7.0.4
2016-08-04 08:33:05 +02:00
Robin Gloster
5268c44b0d Merge pull request #17498 from aneeshusa/remove-boost-dependency-for-mosh
mosh: remove boost dependency
2016-08-04 08:02:14 +02:00
Aneesh Agrawal
942aad7489 mosh: remove boost dependency
boost was removed from the mosh dependency requirements in 2012.
(It was only used from February and April 2012.)
2016-08-03 22:07:19 -04:00
Al Zohali
6e1f80eb9d networkmanager_l2tp: fixup (#17490) 2016-08-03 23:47:42 +01:00
Tobias Geerinckx-Rice
e696c48333
gandi-cli: 0.18 -> 0.19 2016-08-03 20:05:40 +02:00
Robin Gloster
1b979d8384 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-03 13:34:44 +00:00
Damien Cassou
c4f53918cb offlineimap: 7.0.2 -> 7.0.4 2016-08-03 09:00:12 +02:00
Tuomas Tynkkynen
21f17d69f6 treewide: Add lots of meta.platforms
Build-tested on x86_64 Linux & Mac.
2016-08-02 21:42:43 +03:00
Tuomas Tynkkynen
2258b21e4b treewide: Add lots of platforms to packages with no meta
Build-tested on x86_64 Linux and on Darwin.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen
1bf5ded193 treewide: Lots of meta.hydraPlatforms -> meta.platforms
In all of these files, there is no meta.platforms but only
meta.hydraPlatforms, which doesn't seem to have any purpose except being
inconsistent.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen
b96fe03484 treewide: Fix meta.platforms related typos 2016-08-02 21:17:44 +03:00
Robin Gloster
1be4907ca2 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-02 13:46:36 +00:00
Joachim Fasting
8d02a631be
dnscrypt-proxy: 1.6.1 -> 1.7.0
No user-facing changes of particular note.

Full changelog at https://github.com/jedisct1/dnscrypt-proxy/releases/tag/1.7.0
2016-08-02 09:35:08 +02:00
Michael Raskin
9c15bb7031 Revert "libreoffice: reinstante and use curl 7.48 before the removal of a required feature. CVE's not fixed because of that decision: a Windows-specific DLL substitution and a mbedSSL/PolarSSL specific insufficient certificate validation"
This reverts commit 8fd84fcb87.

While I was testing my solution, @obadz have committed a different and
hopefully a better one.
2016-08-01 17:32:10 +02:00
Michael Raskin
8fd84fcb87 libreoffice: reinstante and use curl 7.48 before the removal of a required feature. CVE's not fixed because of that decision: a Windows-specific DLL substitution and a mbedSSL/PolarSSL specific insufficient certificate validation 2016-08-01 17:22:41 +02:00
Frederik Rietdijk
ea6bd8fa79 py-unbound: fix evaluation 2016-08-01 10:19:48 +02:00
Frederik Rietdijk
8f9326ffd8 Merge pull request #17323 from arpa2/hashslinger
Hash-slinger: init at  2.7.0
2016-08-01 09:57:12 +02:00
Michiel Leenaars
c8f2d8dae0 py-unbound: init at 1.5.9 2016-08-01 09:51:33 +02:00
Robin Gloster
63c7b4f9a7 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-31 20:51:34 +00:00
Miguel Madrid
fa03b541b2 curl: 7.47.1 -> 7.50.0 (#17152) 2016-07-30 21:38:06 +01:00
Jinjing Wang
c8f535b452 shadowsocks-libev: 2.4.7 -> 2.4.8 (#17366) 2016-07-30 01:20:56 +01:00
Rob Vermaas
9494b764d2 dd-agent: support jmx, needs a separate daemon nowadays.
(cherry picked from commit 1425a1f964)
2016-07-29 12:42:07 +00:00
Florian
6733797248 ndjbdns: build from latest sources which adds Darwin compatibility 2016-07-29 12:55:35 +02:00
Damien Cassou
86393cfc20 Merge pull request #17301 from DamienCassou/offlineimap-7.0.1
offlineimap: 7.0.0 -> 7.0.2
2016-07-27 16:51:32 +02:00
Damien Cassou
b43df7a225 offlineimap: 7.0.0 -> 7.0.2 2016-07-27 16:50:37 +02:00
Joachim Fasting
7646bea560
dnscrypt-proxy: fix faulty use of platforms.allBut
In 63b6498aa0 I added a faulty
use of `platforms.allBut` causing dnscrypt-proxy to continue
being built (and failing) on OS X. D'oh!
2016-07-26 23:10:46 +02:00
José Romildo Malaquias
f2cdd55412 cmst: 2016.01.28 -> 2016.04.03 (#17134) 2016-07-25 20:32:42 +01:00
Robin Gloster
f222d98746 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-25 12:47:13 +00:00
Arseniy Seroka
88a89dedc6 Merge pull request #17211 from DamienCassou/offlineimap-7.0.0
offlineimap: 6.7.0.2 -> 7.0.0
2016-07-24 15:45:00 +04:00
Tobias Geerinckx-Rice
7c84bd121a
dropbear: 2016.73 -> 2016.74
Security fixes:
- Message printout was vulnerable to format string injection
- dropbearconvert import of OpenSSH keys could run arbitrary code
  as the local dropbearconvert user when parsing malicious key
  files
- dbclient could run arbitrary code as the local dbclient user if
  particular -m or -c arguments are provided
- dbclient or dropbear server could expose process memory to the
  running user if compiled with DEBUG_TRACE and running with -v

Fixes:
- Fix port forwarding failure when connecting to domains that have
  both IPv4 and IPv6 addresses. The bug was introduced in 2015.68
- Fix 100% CPU use while waiting for rekey to complete
2016-07-23 21:29:51 +02:00
Damien Cassou
0f6b69b46e offlineimap: 6.7.0.2 -> 7.0.0 2016-07-23 18:59:01 +02:00
Tuomas Tynkkynen
77a73115cd chrony: Tweak meta
- "repository" -> "repositories"
- reflow longDescription
2016-07-23 13:36:37 +03:00
Daiderd Jordan
e8343fbb38 Merge pull request #17137 from romildo/new.connman-notify
connman-notify: init at 2014-06-23
2016-07-23 00:36:11 +02:00
Graham Christensen
0cbea742ab Merge pull request #17175 from DamienCassou/offlineimap-6.7.0.2
offlineimap: 6.7.0.1 -> 6.7.0.2
2016-07-22 15:44:42 +00:00
Damien Cassou
24e632b242 offlineimap: 6.7.0.1 -> 6.7.0.2 2016-07-22 17:12:57 +02:00
Tobias Geerinckx-Rice
0d7da216be Merge pull request #17166 from peterhoeg/bully
bully: new upstream
2016-07-22 07:45:10 +02:00
Peter Hoeg
729bc134ea bully: new upstream 2016-07-22 13:08:16 +08:00
zimbatm
1018a00b89 Merge pull request #17149 from grahamc/k0001-weighttp-sha256
weighttp: 0.3 -> 0.4
2016-07-21 20:18:50 +01:00
Renzo Carbonara
8859fd948a
weighttp: 0.3 -> 0.4
cgit doesn't generate stable archives, so the SHA changed when there
was a commit earlier this year. Using fetchgit in hopes of stabilizing
the checked out sha.
2016-07-21 08:26:39 -05:00
Tuomas Tynkkynen
212dd434ec atftp: 0.7 -> 0.7.1 2016-07-21 07:22:17 +03:00
Franz Pletz
2ce60ead60 zerotierone: fix evaluation 2016-07-21 04:56:19 +02:00
José Romildo Malaquias
38d896aeee connman-notify: init at 2014-06-23 2016-07-20 22:44:55 -03:00
Robin Gloster
1f04b4a566 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-21 00:56:43 +00:00
Rok Garbas
e2f6c6b9d2 Merge pull request #16620 from zimbatm/ronn-0.7.3
Ronn 0.7.3
2016-07-21 01:23:06 +02:00
cransom
4a9b640f37 smokeping: init at 2.6.11 (#17090)
Includes a module for service setup and a test
to verify functionality of both service and pkg.
2016-07-21 01:07:59 +02:00
Robin Gloster
203846b9de Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-19 10:37:02 +00:00
Franz Pletz
eacabb9993 shncpd: init at 2016-06-22 2016-07-17 17:15:23 +02:00
Franz Pletz
8a6fce5431 ndjbdns: 1.05.9 -> 1.06 2016-07-17 17:15:23 +02:00
Eelco Dolstra
211bed46c4 Merge pull request #17004 from rickynils/openssh_privsep_dir
openssh: Use the default privilege separation dir (/var/empty)
2016-07-17 13:28:44 +02:00
Joachim F
5c837e952d Merge pull request #17001 from womfoo/fix/vtun
vtun: add debian gcc5 fix
2016-07-16 21:26:50 +02:00
Kranium Gikos Mendoza
16cc4dd3a3 vtun: add debian gcc5 fix 2016-07-16 21:07:21 +08:00
Joachim F
0fdd630965 Merge pull request #16726 from womfoo/bump/proxychains-4.2.0
proxychains: 4.0.1-head -> 4.2.0
2016-07-16 13:19:26 +02:00
Rickard Nilsson
4f8f1c30cb openssh: Use the default privilege separation dir (/var/empty)
(This is a rewritten version of the reverted commit
a927709a35, that disables the creation of
/var/empty during build so that sandboxed builds also works. For more
context, see https://github.com/NixOS/nixpkgs/pull/16966)

If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-16 10:15:58 +02:00
Robin Gloster
5185bc1773 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-15 14:41:01 +00:00
Frederik Rietdijk
2e986016d0 Merge pull request #16946 from phanimahesh/fix-16198
Fix typo: s/propogate/propagate/
2016-07-15 15:00:01 +02:00
Bjørn Forsman
2ad0a84751 Revert "openssh: Use the default privilege separation dir (/var/empty)"
This reverts commit a927709a35 because it
doesn't build:

$ nix-build -A openssh
...
mkdir /nix/store/yl2xap8n1by3dqxgc4rmrc4s753676a3-openssh-7.2p2/libexec
(umask 022 ; ./mkinstalldirs /var/empty)
mkdir /var
mkdir: cannot create directory '/var': Permission denied
mkdir /var/empty
mkdir: cannot create directory '/var/empty': No such file or directory
make: *** [Makefile:304: install-files] Error 1
builder for ‘/nix/store/ifygp4mqpv7l8cgp0njp8w7lmrl6brpp-openssh-7.2p2.drv’ failed with exit code 2
2016-07-15 12:42:37 +02:00
Rickard Nilsson
a927709a35 openssh: Use the default privilege separation dir (/var/empty)
If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-14 20:54:06 +02:00
zimbatm
dc6306a69d zerotierone: 1.1.6 -> 1.1.12 2016-07-14 14:02:54 +01:00
J Phani Mahesh
ac19f09122 wicd: propogatedBuildInputs -> propagatedBuildInputs 2016-07-14 17:23:06 +05:30
Ioannis Koutras
d861911263 ocproxy: init at 1.50 2016-07-13 17:15:23 +03:00
Robert Helgesson
c9b9619636 nethogs: 0.8.1 -> 0.8.5 2016-07-13 13:17:24 +02:00
Arseniy Seroka
a7f87bd518 Merge pull request #16904 from womfoo/fix-bump/smbldaptools-0.9.11
smbldaptools: 0.9.10 -> 0.9.11
2016-07-13 14:52:07 +04:00
Kranium Gikos Mendoza
d5e70a2adc smbldaptools: 0.9.10 -> 0.9.11 2016-07-13 09:01:25 +08:00
joachifm
3df7f3cbc3 Merge pull request #16831 from womfoo/fix-bump/gtkgnutella-1.1.9
gtk-gnutella: fix build and 1.1.5 -> 1.1.9
2016-07-12 16:21:36 +02:00
joachifm
7a54a71c9e Merge pull request #16808 from 4z3/urlwatch
urlwatch: 2.1 -> 2.2
2016-07-12 16:20:17 +02:00
Gabriel Ebner
51e1b2508c Merge pull request #16878 from womfoo/bump/siege-4.0.2
siege: 4.0.1 -> 4.0.2
2016-07-12 08:23:15 +02:00
Kranium Gikos Mendoza
e54223e8bb siege: 4.0.1 -> 4.0.2 2016-07-12 13:31:31 +08:00
Gabriel Ebner
ad41b8fa19 mu: fix build of webkit support and re-enable it 2016-07-11 10:37:31 +02:00
Jookia
ba2232f1f2 srelay: init at 0.4.8b6 (#16833) 2016-07-11 03:41:02 +02:00
Franz Pletz
bdf4c0d21f ntp: 4.2.8p6 -> 4.2.8p8 (security)
Fixes CVE-2016-4953, CVE-2016-4954, CVE-2016-4955, CVE-2016-4956.
2016-07-10 10:48:11 +02:00
Franz Pletz
033e593a4f dnsmasq: 2.75 -> 2.76 (security)
Fixes CVE-2015-8899.
2016-07-10 10:48:10 +02:00
Franz Pletz
b8ecb949e6 haproxy: 1.6.5 -> 1.6.6 (security)
Fixes at least CVE-2016-5360.
2016-07-10 10:46:22 +02:00
Franz Pletz
f1f6dc9b87 shadowsocks-libev: polarssl is now called mbedtls 2016-07-10 10:26:14 +02:00
Kranium Gikos Mendoza
f854c7d4f4 gtk-gnutella: 1.1.5 -> 1.1.9 2016-07-10 11:21:28 +08:00
Matthias Beyer
340a5d6fbf openvpn: 2.3.10 -> 2.3.11
Taken from #15856.
2016-07-09 15:04:55 +02:00
Miguel Madrid
57e1a6c48d traceroute: 2.0.21 -> 2.1.0 (#16809) 2016-07-09 14:40:14 +02:00
tv
93b246287b urlwatch: 2.1 -> 2.2 2016-07-09 12:16:30 +02:00
Kranium Gikos Mendoza
796ced26aa proxychains: 4.0.1-head -> 4.2.0 2016-07-05 19:24:21 +08:00
Rahul Gopinath
27a9ef8709 mailutils: fix build break
See #14606 for the breakage. It is fixed by using default guile 2.0
Also addes support for fribidi, sasl, and gssapi
2016-07-03 22:50:39 -07:00
zimbatm
17d6abb771 Merge pull request #16676 from mpscholten/maphosts2
maphosts: Don't provide bundler anymore
2016-07-03 18:10:33 +01:00
Marc Scholten
a11f780274 maphosts: Don't provide bundler anymore 2016-07-03 17:59:23 +02:00
Joachim Fasting
291c454d5e Merge pull request #16594 from mpscholten/maphosts2
maphosts: init at 1.1.1
2016-07-02 14:05:09 +02:00
zimbatm
cbe5813e84 zerotierone: use compile from the stdenv 2016-06-30 12:28:50 +01:00
zimbatm
4932524080 zerotierone: build manpages 2016-06-30 11:12:20 +01:00
Daniel Fullmer
3f4f3c4005 zerotierone: 1.1.4 -> 1.1.6 2016-06-29 21:45:40 -04:00
Marc Scholten
479c08750a maphosts: init at 1.1.1 2016-06-29 13:31:54 +02:00
Franz Pletz
85d0570d14 haproxy: 1.6.4 -> 1.6.5 2016-06-27 00:11:16 +02:00