Commit Graph

96912 Commits

Author SHA1 Message Date
Graham Christensen
d71dbd733c
chromium: 54.0.2840.100 -> 55.0.2883.75 2016-12-07 20:26:47 -05:00
Graham Christensen
86da9839b1
xen: Patch for CVE-2016-9385, CVE-2016-9377, and CVE-2016-9378 2016-12-07 20:16:05 -05:00
Graham Christensen
4c5a198019
teeworlds: 0.6.3 -> 0.6.4 for CVE-2016-9400 2016-12-07 19:46:54 -05:00
Graham Christensen
0683c1a35c
p7zip: patch for CVE-2016-9296 2016-12-07 19:38:50 -05:00
Graham Christensen
e0b850147d
openafs: 1.6.17 -> 1.6.20 for CVE-2016-9772
From release notes:
      OPENAFS-SA-2016-003: file and directory names leak due to
      reuse of directory objects without zeroing the contents
      (12461 12462 12463 12464 12465)
2016-12-07 19:29:06 -05:00
Graham Christensen
e42f6a11ac
gstreamer: 1.10.1 -> 1.10.2 for multiple CVEs
CVE-2016-9807, CVE-2016-9808, CVE-2016-9809, CVE-2016-9810, CVE-2016-9811, CVE-2016-9812, CVE-2016-9813, CVE-2016-9634, CVE-2016-9635, CVE-2016-9636

https://gstreamer.freedesktop.org/releases/1.10/#1.10.2
2016-12-07 09:10:29 -05:00
Graham Christensen
76ef70af7d
imagemagick: 6.9.6-2 -> 6.9.6-7 for CVE-2016-9556 and CVE-2016-9559 2016-12-07 07:24:13 -05:00
Jörg Thalheim
0df00d66d5 Merge pull request #20916 from montag451/corosync
corosync: 2.4.1 -> 2.4.2
2016-12-07 12:50:23 +01:00
Jörg Thalheim
a65deea6c6 Merge pull request #20953 from joelmo/master
portaudio: remove old version portaudioSVN
2016-12-07 09:14:23 +01:00
David Terry
f067bca841 nixos: docs: note that channels are per user 2016-12-07 09:06:25 +01:00
Jörg Thalheim
8d18d06e3c Merge pull request #20969 from ericsagnes/pkg-update/styx
styx: 0.3.1 -> 0.4.0
2016-12-07 09:00:38 +01:00
Jörg Thalheim
52753e409e Merge pull request #20966 from demoslam/update/ag-1.0.2
silver-searcher: 0.33.0 -> 1.0.2
2016-12-07 08:49:43 +01:00
demoslam
d76c48796e silver-searcher: 0.33.0 -> 1.0.2 2016-12-06 22:22:03 -08:00
Eric Sagnes
30d4eca088 styx-themes: init 2016-12-07 15:01:29 +09:00
Eric Sagnes
c56fa24745 styx: 0.3.1 -> 0.4.0 2016-12-07 15:01:03 +09:00
Joachim F
583e5cfa0d Merge pull request #20881 from romildo/new.e17gtk
e17gtk: init at 3.22.0
2016-12-07 05:25:30 +01:00
Joachim F
48cad0441b Merge pull request #20901 from ambrop72/kdevelop-5.0.3
kdevelop: 5.0.2 -> 5.0.3
2016-12-07 05:23:17 +01:00
Joachim F
bf574f33cb Merge pull request #20955 from savannidgerinel/bugfix-icu-version
icu4c: fix #20954: icu_54_1 package does not compile
2016-12-07 01:25:06 +01:00
Joachim Fasting
984d9ebb56
hidepid: polkit and systemd-logind compatibility
`systemd.hideProcessInformation = true`, would break interactions
requiring polkit arbitration such as initating poweroff/reboot as a
normal user; the polkit daemon cannot be expected to make decisions
about processes that don't exist as far as it is concerned.

systemd-logind lacks the `sys_ptrace` capability and so needs to be part
of the designated proc gid, even though it runs as root.

Fixes https://github.com/NixOS/nixpkgs/issues/20948
2016-12-07 01:12:05 +01:00
Savanni D'Gerinel
705e29046d icu: remove icu4c-54.1
Only zoom-us depends on icu4c-54.1. Since we know that version has some vulnerabilities, and zoom-us appears to work with icu4c-57.1, I remove the icu/54.1.nix file, remove icu_54_1 from all-packages.nix, and have zoom-us depend on icu (i.e., icu4c-57.1)
2016-12-06 17:51:11 -06:00
Nikolay Amiantov
c182733691 skype: return to stock qt4
Fix a SIGABRT, also finally get rid of qt4_clang.
2016-12-07 01:47:30 +03:00
Profpatsch
5373ca9712 haskell/ghcjs: fix ghcjs-ffiqq, add ghcjs-vdom (#20614)
Both experimental libraries that are in the ghcjs GitHub organization, but are
not yet officially released on hackage.
2016-12-06 23:24:42 +01:00
Profpatsch
271c0f5451 lib/generators: mkKeyValueLine -> mkKeyValueLine (#20920)
Rename, since the previous name was potentially confusing.
2016-12-06 23:19:34 +01:00
Joel Moberg
b165b5e924 portaudio: remove old version portaudioSVN
The project is now using git and the sha for the source is wrong. Can
not find other derivations using this.
2016-12-06 22:26:41 +01:00
Pascal Wittmann
80f2e535b3
pdfpc: 4.0.3 -> 4.0.4 2016-12-06 20:24:26 +01:00
Graham Christensen
14e53ca5ab
sudolikeaboss: 0.2.1 -> 20161127-2d9afe1 2016-12-06 13:07:02 -05:00
Tim Steinbach
1e00f3fef0 Merge pull request #20936 from NeQuissimus/scala_2_12_1
scala: 2.12.0 -> 2.12.1
2016-12-06 12:14:45 -05:00
Frederik Rietdijk
462a63bb1e beets: add missing dependency six, fixes #20946 2016-12-06 16:48:56 +01:00
Frederik Rietdijk
736169d01d buildPythonPackage: yet another fix, fixes #20943
I didn't copy the old behaviour correctly with
c1d98d959b
2016-12-06 16:48:55 +01:00
Joachim Fasting
db0bd30a7c
ion3: specify meta.{platforms,license} 2016-12-06 15:48:45 +01:00
Joachim Fasting
148ee2cba9
privoxy: homepage now reachable via https 2016-12-06 15:48:39 +01:00
Joachim Fasting
1a427cf625
privoxy: enable pie 2016-12-06 15:48:28 +01:00
Bruno Bzeznik
fc9e65c558 pythonPackages.escapism: init at 0.0.1 2016-12-06 14:41:56 +01:00
Edward Tjörnhammar
6344039906 Merge pull request #20933 from loskutov/datagrip
idea.datagrip: init at 2016.3
2016-12-06 14:28:54 +01:00
Joachim F
e436874ef0 Merge pull request #20919 from joachifm/privoxy-service-improvements
Privoxy service improvements
2016-12-06 14:16:28 +01:00
Frederik Rietdijk
3c22f3f5fc Merge pull request #20942 from teh/master
digital-ocean: Init at 1.10.1
2016-12-06 12:50:47 +01:00
Tom Hunger
6bfffa9932 digital-ocean: Init at 1.10.1 2016-12-06 11:17:27 +00:00
Mikael Brockman
d2fc461f6b
awslogs: init at 0.7
fixes #20921
2016-12-06 10:56:54 +01:00
Jascha Geerds
cac53b75a8 hipchat: 4.28.0.1659 -> 4.29.4.1662 2016-12-06 09:46:33 +01:00
Frederik Rietdijk
eb6cebd120 Merge pull request #20938 from chris-martin/pssh
pssh: init at 2.3.1
2016-12-06 09:18:12 +01:00
Chris Martin
02ecd0f0f7 pssh: init at 2.3.1 2016-12-06 00:46:48 -05:00
Tim Steinbach
c9d1d430ec
linux: 4.9-rc7 -> 4.9-rc8 2016-12-05 19:40:11 -05:00
Tim Steinbach
200715b022
scala: 2.12.0 -> 2.12.1 2016-12-05 19:38:26 -05:00
Shea Levy
67e1c1b4a7 Add pythonPackages.wp_export_parser 2016-12-05 19:32:56 -05:00
Joachim Fasting
9578299bbe
grsecurity: 4.8.11-201611271225 -> 4.8.12-201612031658 2016-12-06 01:24:32 +01:00
Joachim Fasting
cc396697a6
grsecurity: enable ability to lock in readonly mounts 2016-12-06 01:24:12 +01:00
Joachim Fasting
0e765c72e5
grsecurity: enable module hardening 2016-12-06 01:23:58 +01:00
Joachim Fasting
31d79afbe5
grsecurity docs: note that pax_sanitize_slab defaults to fast 2016-12-06 01:23:51 +01:00
Joachim Fasting
071fbcda24
grsecurity: enable optional sysfs restrictions
Fairly severe, but can be disabled at bootup via
grsec_sysfs_restrict=0. For the NixOS module we ensure that it is
disabled, for systemd compatibility.
2016-12-06 01:23:36 +01:00
Joachim Fasting
8c1f5afdf3
grsecurity: delay toggling of sysctls until system is up
We generally trust init, so there's little point in having these enabled
during early bootup; it accomplishes little except fill our logs with
spam.
2016-12-06 01:22:53 +01:00