alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity
96389 commits 217 branches 121 tags 4.5 GiB
Commit graph

2641 commits

Author SHA1 Message Date
Kranium Gikos Mendoza 16cc4dd3a3 vtun: add debian gcc5 fix 2016-07-16 21:07:21 +08:00
Joachim F 0fdd630965 Merge pull request #16726 from womfoo/bump/proxychains-4.2.0 
proxychains: 4.0.1-head -> 4.2.0
 2016-07-16 13:19:26 +02:00
Rickard Nilsson 4f8f1c30cb openssh: Use the default privilege separation dir (/var/empty) 
(This is a rewritten version of the reverted commit
a927709a35, that disables the creation of
/var/empty during build so that sandboxed builds also works. For more
context, see https://github.com/NixOS/nixpkgs/pull/16966)

If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
 2016-07-16 10:15:58 +02:00
Robin Gloster 5185bc1773 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-15 14:41:01 +00:00
Frederik Rietdijk 2e986016d0 Merge pull request #16946 from phanimahesh/fix-16198 
Fix typo: s/propogate/propagate/
 2016-07-15 15:00:01 +02:00
Bjørn Forsman 2ad0a84751 Revert "openssh: Use the default privilege separation dir (/var/empty)" 
This reverts commit a927709a35 because it
doesn't build:

$ nix-build -A openssh
...
mkdir /nix/store/yl2xap8n1by3dqxgc4rmrc4s753676a3-openssh-7.2p2/libexec
(umask 022 ; ./mkinstalldirs /var/empty)
mkdir /var
mkdir: cannot create directory '/var': Permission denied
mkdir /var/empty
mkdir: cannot create directory '/var/empty': No such file or directory
make: *** [Makefile:304: install-files] Error 1
builder for ‘/nix/store/ifygp4mqpv7l8cgp0njp8w7lmrl6brpp-openssh-7.2p2.drv’ failed with exit code 2
 2016-07-15 12:42:37 +02:00
Rickard Nilsson a927709a35 openssh: Use the default privilege separation dir (/var/empty) 
If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:

fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.

The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
 2016-07-14 20:54:06 +02:00
zimbatm dc6306a69d zerotierone: 1.1.6 -> 1.1.12 2016-07-14 14:02:54 +01:00
J Phani Mahesh ac19f09122 wicd: propogatedBuildInputs -> propagatedBuildInputs 2016-07-14 17:23:06 +05:30
Ioannis Koutras d861911263 ocproxy: init at 1.50 2016-07-13 17:15:23 +03:00
Robert Helgesson c9b9619636 nethogs: 0.8.1 -> 0.8.5 2016-07-13 13:17:24 +02:00
Arseniy Seroka a7f87bd518 Merge pull request #16904 from womfoo/fix-bump/smbldaptools-0.9.11 
smbldaptools: 0.9.10 -> 0.9.11
 2016-07-13 14:52:07 +04:00
Kranium Gikos Mendoza d5e70a2adc smbldaptools: 0.9.10 -> 0.9.11 2016-07-13 09:01:25 +08:00
joachifm 3df7f3cbc3 Merge pull request #16831 from womfoo/fix-bump/gtkgnutella-1.1.9 
gtk-gnutella: fix build and 1.1.5 -> 1.1.9
 2016-07-12 16:21:36 +02:00
joachifm 7a54a71c9e Merge pull request #16808 from 4z3/urlwatch 
urlwatch: 2.1 -> 2.2
 2016-07-12 16:20:17 +02:00
Gabriel Ebner 51e1b2508c Merge pull request #16878 from womfoo/bump/siege-4.0.2 
siege: 4.0.1 -> 4.0.2
 2016-07-12 08:23:15 +02:00
Kranium Gikos Mendoza e54223e8bb siege: 4.0.1 -> 4.0.2 2016-07-12 13:31:31 +08:00
Gabriel Ebner ad41b8fa19 mu: fix build of webkit support and re-enable it 2016-07-11 10:37:31 +02:00
Jookia ba2232f1f2 srelay: init at 0.4.8b6 (#16833) 2016-07-11 03:41:02 +02:00
Franz Pletz bdf4c0d21f ntp: 4.2.8p6 -> 4.2.8p8 (security) 
Fixes CVE-2016-4953, CVE-2016-4954, CVE-2016-4955, CVE-2016-4956.
 2016-07-10 10:48:11 +02:00
Franz Pletz 033e593a4f dnsmasq: 2.75 -> 2.76 (security) 
Fixes CVE-2015-8899.
 2016-07-10 10:48:10 +02:00
Franz Pletz b8ecb949e6 haproxy: 1.6.5 -> 1.6.6 (security) 
Fixes at least CVE-2016-5360.
 2016-07-10 10:46:22 +02:00
Franz Pletz f1f6dc9b87 shadowsocks-libev: polarssl is now called mbedtls 2016-07-10 10:26:14 +02:00
Kranium Gikos Mendoza f854c7d4f4 gtk-gnutella: 1.1.5 -> 1.1.9 2016-07-10 11:21:28 +08:00
Matthias Beyer 340a5d6fbf openvpn: 2.3.10 -> 2.3.11 
Taken from #15856.
 2016-07-09 15:04:55 +02:00
Miguel Madrid 57e1a6c48d traceroute: 2.0.21 -> 2.1.0 (#16809) 2016-07-09 14:40:14 +02:00
tv 93b246287b urlwatch: 2.1 -> 2.2 2016-07-09 12:16:30 +02:00
Kranium Gikos Mendoza 796ced26aa proxychains: 4.0.1-head -> 4.2.0 2016-07-05 19:24:21 +08:00
Rahul Gopinath 27a9ef8709 mailutils: fix build break 
See #14606 for the breakage. It is fixed by using default guile 2.0
Also addes support for fribidi, sasl, and gssapi
 2016-07-03 22:50:39 -07:00
zimbatm 17d6abb771 Merge pull request #16676 from mpscholten/maphosts2 
maphosts: Don't provide bundler anymore
 2016-07-03 18:10:33 +01:00
Marc Scholten a11f780274 maphosts: Don't provide bundler anymore 2016-07-03 17:59:23 +02:00
Joachim Fasting 291c454d5e Merge pull request #16594 from mpscholten/maphosts2 
maphosts: init at 1.1.1
 2016-07-02 14:05:09 +02:00
zimbatm cbe5813e84 zerotierone: use compile from the stdenv 2016-06-30 12:28:50 +01:00
zimbatm 4932524080 zerotierone: build manpages 2016-06-30 11:12:20 +01:00
Daniel Fullmer 3f4f3c4005 zerotierone: 1.1.4 -> 1.1.6 2016-06-29 21:45:40 -04:00
Marc Scholten 479c08750a maphosts: init at 1.1.1 2016-06-29 13:31:54 +02:00
Franz Pletz 85d0570d14 haproxy: 1.6.4 -> 1.6.5 2016-06-27 00:11:16 +02:00
Franz Pletz 815d2a0583 iperf3: 3.1 -> 3.1.3 2016-06-27 00:11:16 +02:00
obadz e13a76f978 Merge pull request #16467 from groxxda/bump/networkmanager 
networkmanager: cleanup
 2016-06-23 23:41:44 +01:00
obadz 24520af0fa network-manager/l2tp: remove workaround that's now in main repo 2016-06-23 23:35:43 +01:00
Alexander Ried a6a11b3852 network-manager-applet: remove unused dbus_glib dependency 2016-06-23 23:12:41 +02:00
Alexander Ried 64a9dc4dd7 networkmanager: cleanup 2016-06-23 23:12:41 +02:00
Alexander Ried c1319572d4 networkmanager: Dependency on avahi-autoipd has been dropped. 
Native IPv4 link-local addressing configuration based on systemd network library is now used instead.
 2016-06-23 23:12:41 +02:00
obadz a709f60d7b networkmanager/l2tp: fix format error on x86/32bit 2016-06-23 12:32:59 +01:00
zimbatm b0487cb402 Merge pull request #16408 from arpa2/unbound 
unbound: 1.5.8 -> 1.5.9
 2016-06-22 21:44:54 +01:00
Joachim Fasting 1d98608e43 Merge pull request #16362 from womfoo/aria2 
aria2: 1.23.0 -> 1.24.0
 2016-06-22 19:04:18 +02:00
obadz f540e09a8b Merge pull request #16412 from obadz/networkmanager-1.2 
NetworkManager & plugins: upgrade to 1.2
 2016-06-22 15:12:23 +01:00
obadz a9e995d679 network-manager & plugins: no longer remove -Werror and friends 
Code using deprecated APIs has been removed
See comment by @dkosovic on the matter:
https://github.com/xelerance/xl2tpd/issues/108#issuecomment-227621314
 2016-06-22 03:16:20 +01:00
obadz 2cf9b5a6c0 network-manager/vpnc: 1.0.12 -> 1.2.2 2016-06-22 03:16:20 +01:00
obadz f337c2cf9c network-manager/openconnect: 1.0.2 -> 1.2.2 2016-06-22 03:16:20 +01:00
obadz 9f3e2af9fe network-manager/openvpn: 1.0.12 -> 1.2.2 2016-06-22 03:16:20 +01:00
obadz a8074165ef network-manager/l2tp: 0.9.8.7 -> 1.2.2 2016-06-22 03:16:19 +01:00
obadz c434fd0659 network-manager/pptp: 1.0.12 -> 1.2.2 2016-06-22 03:16:19 +01:00
obadz 325f9e966d network-manager-applet: 1.0.10 -> 1.2.2 2016-06-22 03:16:19 +01:00
obadz 233541a371 network-manager: 1.0.12 -> 1.2.2 2016-06-22 03:16:12 +01:00
obadz 925fb7ebfc network-manager: move 0.9.8 to its own directory 2016-06-22 02:35:22 +01:00
obadz b7731e446a network-manager/l2tp: replace patch by substitutions to simplify upgrades 2016-06-22 02:33:39 +01:00
obadz 9191f09c05 network-manager/pptp: replace patch by substitutions to simplify upgrades 2016-06-22 02:33:39 +01:00
Michiel Leenaars f125db1c60 unbound: 1.5.8 -> 1.5.9 2016-06-21 23:22:18 +02:00
Edward Tjörnhammar f3950f712f
i2pd: 2.7.0 -> 2.8.0 
Signed-off-by: Edward Tjörnhammar <ed@cflags.cc>
 2016-06-21 15:03:59 +02:00
Kranium Gikos Mendoza 28fc4871f5 aria2: 1.23.0 -> 1.24.0 2016-06-21 09:44:23 +08:00
obadz c8d3b166f5 network-manager/l2tp: add workaround for https://github.com/xelerance/xl2tpd/issues/108 2016-06-20 21:41:59 +01:00
Gabriel Ebner cbb0effa6e wget: 1.17.1 -> 1.18 
Fixes #16368.
 2016-06-20 22:15:46 +02:00
Arseniy Seroka f529432ca5 Merge pull request #16349 from telotortium/ssh-ident 
ssh-ident: init at 2016-04-21
 2016-06-20 22:04:57 +03:00
Bjørn Forsman bd01fad0ed Captialize meta.description of all packages 
In line with the Nixpkgs manual.

A mechanical change, done with this command:

  find pkgs -name "*.nix" | \
      while read f; do \
          sed -e 's/description\s*=\s*"\([a-z]\)/description = "\u\1/' -i "$f"; \
      done

I manually skipped some:

* Descriptions starting with an abbreviation, a user name or package name
* Frequently generated expressions (haskell-packages.nix)
 2016-06-20 13:55:52 +02:00
Robert Irelan 222c435996 ssh-ident: init at 2016-04-21 
Add ssh-ident package from its GitHub repo. Since there are no version
tags on GitHub, I'm using the date of its most recent commit.
 2016-06-19 12:44:46 -07:00
obadz 6b02ae3893 pptpd: init at 1.4.0 2016-06-18 02:08:07 +01:00
Joachim Fasting d27006b82b
dnscrypt-wrapper: 0.2 -> 0.2.1 2016-06-14 14:22:18 +02:00
Edward Tjörnhammar efb519d2f4
i2pd: 2.6.0 -> 2.7.0 2016-06-14 12:28:27 +02:00
obadz ca17bd0c8a socat: add readline support 2016-06-13 12:09:32 +01:00
Herwig Hochleitner 8b3278b794 i2p: 0.9.25 -> 0.9.26 2016-06-12 21:51:04 +02:00
Nikolay Amiantov 659bea9dda dropbear: disable on Darwin 2016-06-11 03:38:57 +03:00
Robin Gloster 8031cba2ab Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-06-10 09:27:04 +00:00
Rushmore Mushambi 83c40ada7e Merge pull request #16017 from kamilchm/rework-go 
Rework goPackages
 2016-06-09 17:09:13 +02:00
Kamil Chmielewski bbc37e0eb7 Moving from fetchgit generated by go2nix to fetchFromGitHub where rev is 
a tag
 2016-06-09 13:08:10 +02:00
Kamil Chmielewski 7eb671ebcd no more goPackages 2016-06-09 13:08:00 +02:00
Kamil Chmielewski 6d9b9681f9 ngrok: FIX go-bindata moved to all-packages 2016-06-09 11:22:02 +02:00
Kamil Chmielewski e44d38125c s3gof3r: extracted from goPackages 2016-06-09 11:21:30 +02:00
Kamil Chmielewski 93b9ebfde8 ngrok: extracted from goPackages 2016-06-09 11:21:30 +02:00
Kamil Chmielewski e5b9d23de7 flannel: extracted from goPackages 2016-06-09 11:21:30 +02:00
Jinjing Wang 4bc528ce28 shadowsocks-libev: 2.4.6 -> 2.4.7 2016-06-09 09:51:07 +08:00
Benno Fünfstück ba09675232 zap: update 2.4.3 -> 2.5.0 2016-06-08 20:21:39 +02:00
zimbatm d220132f22 httpie: 0.9.2 -> 0.9.3 (#16067) 2016-06-08 16:38:08 +01:00
Damien Cassou 1048d3ddd3 Merge pull request #16058 from DamienCassou/offlineimap-6.7.0.1 
offlineimap: 6.7.0 -> 6.7.0.1
 2016-06-08 06:34:53 +02:00
Damien Cassou 2ba759b1e2 offlineimap: 6.7.0 -> 6.7.0.1 2016-06-08 06:22:16 +02:00
michael bishop e8108e0d22
toxvpn: update versions and allow systemd to be optional 2016-06-06 05:00:15 -03:00
Joachim Fasting 4178dbc42c Merge pull request #15842 from romildo/upd.aria2 
aria2: 1.22.0 -> 1.23.0, uget: 2.0.5 -> 2.0.8
 2016-06-03 18:30:43 +02:00
Georges Dubus a942635724 Merge pull request #15944 from 0w0/openfortivpn_1.0.1_to_1.1.4 
openfortivpn: 1.0.1 -> 1.1.4
 2016-06-03 16:58:28 +02:00
Tuomas Tynkkynen bac26e08db Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
0w0 a26f113611 openfortivpn: 1.0.1 -> 1.1.4 2016-06-03 14:19:52 +08:00
José Romildo Malaquias 4c730e3e82 uget: 2.0.5 -> 2.0.8 2016-06-01 08:26:40 -03:00
Franz Pletz 6ee74b5593 whois: 5.2.11 -> 5.2.12 2016-05-31 20:10:26 +02:00
Frederik Rietdijk cf32f82b8d Merge pull request #15764 from FRidh/wxpythoncleanup 
Python: wxPython cleanup
 2016-05-31 10:47:22 +02:00
José Romildo Malaquias b767e99923 aria2: 1.22.0 -> 1.23.0 2016-05-30 17:56:26 -03:00
Robin Gloster 2d382f3d98 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-05-30 19:39:34 +00:00
obadz 0c9e904943 toxvpn: restartIfChanged = false & minor cleanups 2016-05-30 14:23:52 +01:00
obadz d18ba0f50d toxvpn: init at 20151111 
(Authored by @cleverca22)
 2016-05-30 00:21:22 +01:00
Matthias Beyer f48c8ddf0b
http-prompt: init at 0.2.0 
Closes #15563
 2016-05-28 14:04:20 +02:00
Tuomas Tynkkynen 7eb99329ae Merge pull request #15716 from peterhoeg/linkchecker 
linkchecker: init at 9.3
 2016-05-28 05:46:53 +03:00
Vladimír Čunát e4832c7541 Merge branch 'staging' 
Includes a security update of libxml2.
 2016-05-27 15:58:40 +02:00
Peter Hoeg c1ffbd8ee8 linkchecker: init at 9.3 
A few changes from upstream:

 1) the executable is patched to support a --no-robots flag to ignore
    robots.txto

 2) the GUI doesn't work (for now), so this is CLI only
 2016-05-27 15:07:05 +08:00
Franz Pletz 4962f52b88 openvpn: --enable-password-save was removed 2016-05-26 19:17:39 +02:00
Franz Pletz bf12560053 openvpn: Fix build for systemd 230 2016-05-26 19:16:45 +02:00
Frederik Rietdijk 63b7323402 Remove bittornado 
Package is broken. Won't work with wxPython30, and wheel produced with
buildPythonPackage cannot be installed either.
 2016-05-26 18:51:25 +02:00
Vladimír Čunát 81039713fa Merge branch 'master' into staging 
... to get the systemd update (rebuilding ~7k jobs).
 2016-05-26 16:50:22 +02:00
Michael Raskin a19a10c6ac mailsend: 1.18 -> 1.19 2016-05-25 16:01:18 +02:00
Tobias Geerinckx-Rice 81af789e7b
strongswan: 5.3.2 -> 5.4.0 2016-05-24 15:00:49 +02:00
namore 5ad882951b olsrd: fix top-level name and directory naming (#15663) 2016-05-24 13:26:30 +02:00
Vladimír Čunát ddd9520011 libreswan: security update 3.16 -> 3.17 
Fixes #15645.
It complained about a missing header, so I added nss to buildInputs
instead of just nssTools.
 2016-05-24 10:37:10 +02:00
Vladimír Čunát 0b192a0976 Merge branch 'master' into staging 
That's to get mesa rebuild from master, as it's nontrivial.
 2016-05-23 09:02:10 +02:00
Vladimír Čunát c4661e9643 Merge: make dev output references explicit 
This is a rebase of most commits from #14766,
resolving conflicts and a few other evaluation problems.
 2016-05-22 12:09:23 +02:00
Bjørn Forsman c7db50e24f Revert "network-manager: multiple outputs" 
This reverts commit c25907d072.

I think this commit broke the NixOS service for NetworkManager. At least
with this, and the two previous reverts, everything is back to normal.
(With multiple-outputs split, it would have reduced the closure size by
3 MiB.)
 2016-05-21 13:12:44 +02:00
Tuomas Tynkkynen 2a73de6e6c treewide: Make explicit that 'dev' output of openssl is used 2016-05-19 10:02:23 +02:00
Tuomas Tynkkynen d7071caba5 treewide: Make explicit that 'dev' output of libssh2 is used 2016-05-19 10:00:45 +02:00
Tuomas Tynkkynen 603dcd6263 treewide: Make explicit that 'dev' output of libnl is used 2016-05-19 10:00:43 +02:00
Tuomas Tynkkynen 62479404ea treewide: Make explicit that 'dev' output of libidn is used 2016-05-19 10:00:42 +02:00
Tuomas Tynkkynen 8bbc3fe801 treewide: Make explicit that 'dev' output of expat is used 2016-05-19 10:00:30 +02:00
Franz Pletz f8d481754c
Merge remote-tracking branch 'origin/master' into hardened-stdenv 2016-05-18 17:10:02 +02:00
Domen Kožar b49bf121b8 rename iElectric to domenkozar to match GitHub 2016-05-17 13:00:47 +01:00
Peter Simons 8e462995ba Bring my stdenv.lib.maintainers user name in line with my github nick. 2016-05-16 22:49:55 +02:00
Joachim Fasting 3ad0276e7e Merge pull request #15435 from mayflower/nzbget_no_config 
nzbget: 16.4 -> 17.0-r1686 and nzbget service
 2016-05-15 14:05:31 +02:00
Tristan Helmich 36f8b3cad1 nzbget: 16.4 -> 17.0-r1686 and nzbget service 2016-05-13 18:56:39 +02:00
Franz Pletz f743e56744 radvd: 2.12 -> 2.13 2016-05-13 17:27:59 +02:00
Franz Pletz 54e87bad04 tinc: 1.0.26 -> 1.0.28 2016-05-13 17:27:00 +02:00
Vladimír Čunát 3e387c3e00 Merge branch 'staging' 
Darwin isn't in a perfect state, in particular its bootstrap tools won't
build which will block nixpkgs channel. But on the whole it seems
acceptable.
 2016-05-13 10:14:53 +02:00
Pascal Wittmann 2a300d6aa5 axel: 2.6 -> 2.7 2016-05-12 20:37:04 +02:00
Vladimír Čunát 6c2fbfbd77 Merge branch 'master' into staging 2016-05-12 04:53:38 +02:00
Rok Garbas 3d932ba135 wicd: wicd-curses fix for ... 
... AttributeError: 'Screen' object has no attribute 'get_input_nonblocking'

fixes #10281
 2016-05-12 03:19:28 +02:00
Joachim Fasting 44a6a5ed34 Merge pull request #15397 from acowley/ntopng-darwin 
ntopng: prefer nixpkgs over in-tree deps
 2016-05-12 01:54:53 +02:00
Anthony Cowley 86c3444e03 ntopng: prefer nixpkgs over in-tree deps 
I've also added darwin compatibility.
 2016-05-11 19:33:08 -04:00
Jinjing Wang 9dd9477588 shadowsocks-libev: 2.4.5 -> 2.4.6 2016-05-11 21:10:23 +08:00
Domen Kožar 76aa0ba664 snabb: build in parallel 2016-05-09 15:13:29 +01:00
Robin Bate Boerop 30d5914d4c
imapsync: add missing dependencies 2016-05-09 16:08:36 +02:00
Vladimír Čunát 65a9fa8cdc Merge branch 'master' into staging 2016-05-08 21:24:48 +02:00
Joachim Fasting 715e42dc76
dnscrypt-proxy: minor refactor 2016-05-06 01:57:08 +02:00
Robin Gloster 9820cb1bf2 use dontBuild instead of hacks 
changes:
 * buildPhase = "true"
 * buildPhase = ":"
 2016-05-04 10:11:04 +00:00
Tuomas Tynkkynen aadaa91379 Merge remote-tracking branch 'upstream/master' into staging 
Conflicts:
	pkgs/applications/networking/browsers/vivaldi/default.nix
	pkgs/misc/emulators/wine/base.nix
 2016-05-03 23:12:48 +03:00
Arseniy Seroka f3eca5f5d2 Merge pull request #15196 from groxxda/bump/connman 
connman: 1.31 -> 1.32
 2016-05-03 22:58:20 +03:00
Alexander Ried d74335da85 connman: make dependency on awk explicit 2016-05-03 20:10:58 +02:00
Alexander Ried b95eebec65 connman: 1.31 -> 1.32 
fetch release tarball instead of git checkout and drop autotools

This update is compatible with iptables 1.6.0 (see #12178)
 2016-05-03 20:10:54 +02:00
Alexander Ried 3fe746cfc2 tinc_pre: 1.1pre-git2016.01.28 -> 1.1pre-14 (#15192) 
split the documentation output
remove the tinc-gui binary because python dependencies are not fulfilled
 2016-05-03 19:39:53 +02:00
Tobias Geerinckx-Rice bf81306848
gandi-cli: pull out of python-packages.nix 2016-05-03 18:28:23 +02:00
Franz Pletz b8aaa3f130 fping: 3.10 -> 3.13 2016-05-03 16:15:20 +02:00
Franz Pletz d1998b93d7 lftp: 4.6.4 -> 4.7.1 2016-05-03 16:15:20 +02:00
Franz Pletz e07b06d12a tgt: 1.0.60 -> 1.0.63 2016-05-03 16:15:20 +02:00
obadz 8536d8b4ed tcpflow: 1.4.5 -> 1.4.6 (#15151) 
Switch to fetchFromGitHub as website does not have latest version.
Default to not building against cairo to avoid dependencies on lots
of graphic libraries for a predominently command-line application.
 2016-05-03 01:39:46 +01:00
Robin Gloster c92bca56f8 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-05-02 22:58:02 +00:00
Nikolay Amiantov 87ebab128a replace ${stdenv.cc.cc}/lib occurences 2016-05-01 00:13:23 +03:00
Pascal Wittmann 4cd0770d57 imapsync: 1.644 -> 1.684 2016-04-30 10:09:44 +02:00
Nikolay Amiantov a77cb861fd xl2tpd: 1.3.6 -> 1.3.7 2016-04-30 03:12:34 +03:00
Nikolay Amiantov 938d64f1f3 quote URLs in my packages to ease opening them from urxvt 2016-04-30 03:12:32 +03:00
Joachim Fasting 6475315115 Merge pull request #15055 from danbst/siege-bump 
siege: 3.0.8 -> 4.0.1
 2016-04-28 22:58:20 +02:00
Tuomas Tynkkynen 89ce5d4b96 ddclient: Fix build after multiple outputs merge 2016-04-28 20:48:33 +03:00
danbst f690ccb26f siege: 3.0.8 -> 4.0.1 2016-04-28 15:03:55 +00:00
Tuomas Tynkkynen 4ff8f377af Merge remote-tracking branch 'upstream/master' into staging 2016-04-28 00:13:53 +03:00
Joachim Fasting 1bf1ba1f88
siege: fix build after multiple-outputs 2016-04-27 19:22:47 +02:00
Nikolay Amiantov e6e7c1e914 logmein-hamachi: init at 2.1.0.139, add nixos service 2016-04-27 16:15:01 +03:00
Frederik Rietdijk d5e6a4494a Python: use PyPI mirror (#15001) 
* mirrors: add pypi

* Python: Use pypi mirror for all PyPI packages
 2016-04-26 13:38:03 +01:00
Thomas Tuegel c25907d072 network-manager: multiple outputs 2016-04-25 19:04:24 -05:00
Joachim Fasting da7eaef5b0 Merge pull request #14913 from makkus/seafile 
seafile-*: 4.4.2 -> 5.0.7
 2016-04-23 19:08:15 +02:00
Tuomas Tynkkynen bd18cc3cdc Merge pull request #14888 from dezgeg/pr-kill-module-init-tools 
Delete all usages of module_init_tools and remove the package
 2016-04-23 14:29:41 +03:00
Markus Binsteiner 83274eccf0 seafile-*: 4.4.2 -> 5.0.7 
Also updated dependencies:
ccnet: 1.4.2 -> 5.0.7
libsearpc: 1.2.2 -> 3.0.7
 2016-04-23 12:52:42 +12:00
Nikolay Amiantov d10d105ca6 aria2: 1.21.0 -> 1.22.0 2016-04-23 02:24:22 +03:00
Tobias Geerinckx-Rice 5a6cac7ca4
miniupnpd: 1.9.20160222 -> 2.0 2016-04-22 17:11:20 +02:00
Vladimír Čunát e9379f7416 Merge branch 'staging' 
This includes a fix to closure-size regression that moved
share/doc/*/ to share/doc/
 2016-04-22 16:49:09 +02:00
Emery Hemingway 3148c7e45b pcapfix: init at 1.1.0 2016-04-22 11:34:45 +02:00
Tuomas Tynkkynen 01854a850a treewide: Replace module_init_tools -> kmod 
The former is deprecated and doesn't handle compressed kernel modules,
so all current usages of it are broken.
 2016-04-22 10:40:57 +03:00
Nikolay Amiantov 294d1f4c70 cmst: move to qmakeHook 
This reverts commit 2c024d28a2.
 2016-04-20 18:55:56 +03:00
Eelco Dolstra b4bf432709 nghttp2: 1.8.0 -> 1.9.2, unify with libnghttp2, and use multiple outputs 
Note: I ignored the C++ libraries, but it appears we're not currently
using them. Once we do, we'll probably want to put them in a separate
output as well (to prevent non-C++ users from depending on Boost).
 2016-04-18 21:13:18 +02:00
Robin Gloster d020caa5b2 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-04-18 13:49:22 +00:00
joachifm dabacbb211 Merge pull request #14734 from sheenobu/sipsak_fixbuild_gnu89 
sipsak: fix build by using --std=gnu89
 2016-04-16 20:18:26 +02:00
Sheena Artrip 1a520f8aa4 sipsak: fix build by using --std=gnu89 2016-04-16 13:52:21 -04:00
Pascal Wittmann 0f48602926 Merge pull request #14745 from layus/update/urlwatch-2.1 
urlwatch: update 2.0 -> 2.1
 2016-04-16 09:53:50 +02:00
Aneesh Agrawal 6e4d06873f openssh: fix CVE-2015-8325 
Debian Security Advisory: https://www.debian.org/security/2016/dsa-3550
Upstream commit: https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755
 2016-04-15 23:45:10 -04:00
Guillaume Maudoux 29280a60d5 urlwatch: update 2.0 -> 2.1 2016-04-15 22:23:01 +02:00
Joachim Fasting ec406eb640
dnscrypt-proxy: split man output 2016-04-15 17:41:41 +02:00
aszlig 2c024d28a2
cmst: Fix running of {pre,post}Configure 
Commit 0055c6a introduced a new preConfigure hook that sets the right
qmake path. Unfortunately the mkDerivation attributes of cmst override
the whole configurePhase, so this hook isn't run at all.

I've also added running the preBuild and postBuild hooks for the sake of
completeness so that it's easier to override the derivation attributes.

This fixes the build of cmst and it now successfully compiles on my
machine.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
 2016-04-15 05:26:02 +02:00
Tuomas Tynkkynen 897e0d1224 treewide: Mass replace 'openssl}/bin' to refer to the correct outputs 2016-04-14 08:32:20 +03:00
obadz bd9089987a Merge pull request #14665 from bendlas/update-i2p 
i2p: 0.9.24 -> 0.9.25
 2016-04-13 19:50:47 +01:00
Herwig Hochleitner e4a56dbff8 i2p: 0.9.24 -> 0.9.25 2016-04-13 20:48:20 +02:00
zimbatm 04267ed630 Merge pull request #14647 from MostAwesomeDude/tahoe 
Tahoe-LAFS improvements
 2016-04-13 16:39:53 +01:00
Corbin 4c85efbda1 tahoe-lafs: 1.10.2 -> 1.11.0 
Also add myself to maintainers, as I *do* care about this package.
 2016-04-12 18:44:26 -07:00
Vladimír Čunát 30f14243c3 Merge branch 'master' into closure-size 
Comparison to master evaluations on Hydra:
  - 1255515 for nixos
  - 1255502 for nixpkgs
 2016-04-10 11:17:52 +02:00
Alexander Ried ed791dbb94 minidlna: install manpages 2016-04-08 23:04:12 +02:00
Emery Hemingway 36b5fd8d4d cjdns: 16 -> 17.3 2016-04-08 15:55:13 +02:00
Robin Gloster 3e68106afd Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-04-07 21:52:26 +00:00
Micxjo Funkcio 2d0e18f64f
aria2: 1.20.0 -> 1.21.0 2016-04-07 14:31:45 -07:00
Vladimír Čunát d1df28f8e5 Merge 'staging' into closure-size 
This is mainly to get the update of bootstrap tools.
Otherwise there were mysterious segfaults:
https://github.com/NixOS/nixpkgs/pull/7701#issuecomment-203389817
 2016-04-07 14:40:51 +02:00
Domen Kožar 009a9ceb88 snabbswitch: 2015.12 -> 2016.04, rename to snabb 2016-04-07 12:49:11 +01:00
Nikolay Amiantov 1f79dc2d6a Merge commit 'refs/pull/14421/head' of git://github.com/NixOS/nixpkgs 2016-04-07 03:00:45 +03:00
Nikolay Amiantov 5330244958 Merge commit 'refs/pull/14242/head' of git://github.com/NixOS/nixpkgs 2016-04-07 03:00:36 +03:00
Robin Gloster bdbce02057 eggdrop: fix build 2016-04-04 16:17:14 +00:00
Robin Gloster bbbaccfa68 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-04-04 15:24:52 +00:00
Tristan Helmich 399d2bca32 mosh: fix segfaulting issue 
Discussion on this issue at https://github.com/mobile-shell/mosh/issues/727 and https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=817929#35
 2016-04-04 15:14:09 +02:00
Robin Gloster d326ca40a8 stunnel: 5.30 -> 5.31 
fixes tarball 404
 2016-04-03 11:36:13 +00:00
Robin Gloster 696d85a62d Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-04-03 11:01:57 +00:00
Peter Hoeg 64a9bd37e6 networkmanager: 1.0.6 -> 1.0.12 
Also pulls in networkmanager-applet at 1.0.10 as it is no longer in sync with the NM version.
 2016-04-03 18:40:51 +08:00
Peter Simons 90d0b08237 Merge pull request #14371 from pmahoney/skarnet 
Update skarnet.org packages
 2016-04-01 17:59:14 +02:00
Patrick Mahoney fc1f5d2cf1 set target for darwin binary compat in skarnet.org packages 
skalibs:
execline:
s6-dns:
s6-networking:
s6-portable-utils:
s6-rc:
s6:

The above software uses the target triplet from `cc -dumpmachine` as a
binary compatibility check. However, on darwin, the output includes the
darwin version number, which leads to build failures against a binary
skalibs package built a different version of darwin than the current
system.

Explicitly setting target ensures code can be compiled against a skalibs
binary built on a different version of darwin.

See http://www.skarnet.org/cgi-bin/archive.cgi?1:mss:623:heiodchokfjdkonfhdph
 2016-04-01 10:39:37 -05:00
Patrick Mahoney e0c225857f update skarnet.org packages 
skalibs:           2.4.7.0 -> 2.3.9.0
execline:          2.1.4.0 -> 2.1.4.5
s6:                2.2.1.0 -> 2.2.4.3
s6-rc:             0.0.1.0 -> 0.0.2.1
s6-portable-utils: 2.0.5.2 -> 2.0.5.3
s6-linux-utils:    2.0.2.0 -> 2.0.2.3
s6-dns:            2.0.0.4 -> 2.0.0.7
s6-networking:     2.1.0.1 -> 2.1.0.4
 2016-04-01 10:38:58 -05:00
Eelco Dolstra 3fb1708427 ssh: Fix support for ssh-dss host keys 2016-04-01 15:54:52 +02:00
Vladimír Čunát ab15a62c68 Merge branch 'master' into closure-size 
Beware that stdenv doesn't build. It seems something more will be needed
than just resolution of merge conflicts.
 2016-04-01 10:06:01 +02:00
Edward Tjörnhammar 29f5b917ea
i2pd: 2.5.1 -> 2.6.0 2016-03-31 22:07:35 +02:00
Franz Pletz 2e08d8234e Merge remote-tracking branch 'origin/master' 2016-03-31 10:06:30 +02:00
Franz Pletz 6dc2337b94 Merge pull request #14313 from mayflower/pkg/dhcpcd/6.10.1 
dhcpcd: 6.9.4 -> 6.10.1 (security)
 2016-03-30 13:06:12 +02:00
Robin Gloster a4e65c3639 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-30 09:01:20 +00:00
Franz Pletz e498a645c1 ncat: Remove old package, available in nmap 2016-03-30 08:53:22 +02:00
Franz Pletz 5aa986fba2 dhcpcd: 6.9.4 -> 6.10.1 (security) 
Fixes CVE-2016-1503 & CVE-2016-1504.

Changelog:
  - http://roy.marples.name/archives/dhcpcd-discuss/2016/1143.html
  - http://roy.marples.name/archives/dhcpcd-discuss/2016/1146.html
 2016-03-30 06:57:59 +02:00
Robin Gloster 0fc7905db3 dhcpcd: do not enable pie hardening 2016-03-29 00:26:35 +00:00
Joachim Fasting 8bd72dfaa4 lsh: fix gcc5 build 
The build fails with c11 (also tested c99), but works with gnu90.
 2016-03-28 19:01:58 +02:00
joachifm a66a64cedc Merge pull request #14182 from NeQuissimus/pppscripts 
ppp: Include convenience scripts
 2016-03-28 15:19:44 +00:00
Robin Gloster f60c9df0ba Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-28 15:16:29 +00:00
Eelco Dolstra 38afa836b3 openvpn: 2.3.8 -> 2.3.10 
In particular, this fixes the systemd-ask-password regression
re-introduced by cb1c818491.
 2016-03-27 23:29:53 +02:00
Domen Kožar b07e7bfc7b Merge remote-tracking branch 'origin/staging' 2016-03-27 13:19:04 +01:00
Peter Hoeg 8857774f91 network-manager: use ping/ping6 from the nix store 
NM upstream has a hardcoded path to /usr/bin/ping.

This patch changes:

 - ping/ping6 are now from the nix store
 - we no longer try to make substitutions on a missing file
 - we use file from the nix store
 2016-03-27 15:15:16 +08:00
Joachim Fasting 1f78d14028 curl3: mark as broken 
This is an ancient version of curl, that currently has 19 known vulnerabilities.
It is used by and was added to support only one package.
 2016-03-26 13:18:48 +01:00
Pascal Wittmann 0d84a3fde2 eggdrop: fix build with gcc5 2016-03-25 19:57:07 +01:00
Marius Bakke 8afda7e421 s3cmd: 1.5.2 -> 1.6.1 2016-03-25 05:19:35 +00:00
Tobias Geerinckx-Rice bcb030a5a4 minissdpd: 1.5.20160301 -> 1.5.20160301 2016-03-24 21:33:18 +01:00
Tim Steinbach a4d741ef9d ppp: Include convenience scripts 2016-03-24 19:26:00 +00:00
Tobias Geerinckx-Rice 6db204b7d9 netsniff-ng: 0.6.0 -> 0.6.1 2016-03-24 20:23:59 +01:00
Joachim Fasting db6ae35bd9 cadaver: fix build against newer versions of openssl 
Apply patch from Arch Linux.

See https://hydra.nixos.org/build/33258957/nixlog/1/raw
 2016-03-24 19:05:14 +01:00
Nikolay Amiantov 0c6db0ca48 cc-wrapper: add option to skip flags for native optimizations 2016-03-24 20:16:17 +03:00
Joachim Fasting 63b6498aa0 dnscrypt-proxy: disable darwin build 
The darwin build has been broken for a long time and I'm unable to
properly debug the issue.

What appears to be happening is that the symbol `HAVE_SANDBOX_INIT` ends
up being defined as 1 while `HAVE_SANDBOX_H` ends up being 0, resulting in
undefined reference errors when `sandbox_init()` is called (because
`<sandbox.h>` is not included first).
This is a regression from dnscrypt-proxy 1.6.0 to 1.6.1.

For context, sandbox.h is a deprecated OSX mechanism for sandboxing.

The build failure is at
https://hydra.nixos.org/build/32705849/nixlog/1/raw

This patch closes NixOS/nixpkgs#14064
 2016-03-24 17:14:22 +01:00
joachifm 96af7c6dcb Merge pull request #14171 from NeQuissimus/pptp180 
pptp: 1.7.2 -> 1.8.0
 2016-03-24 12:58:54 +00:00
Pascal Wittmann fcc0bf2d05 axel: 2.5 -> 2.6 2016-03-24 00:07:40 +01:00
Tim Steinbach 3fc2f99907 pptp: 1.7.2 -> 1.8.0 2016-03-23 23:01:39 +00:00
Pascal Wittmann 2bb151f91b atftp: fix build by using gcc49 
See #13559
 2016-03-22 16:42:07 +01:00
Franz Pletz bf9f211ae3 whois: 5.2.10 -> 5.2.11 2016-03-22 00:52:40 +01:00
Franz Pletz fbdcbaf25c horst: 2015-07-22 -> 2016-03-15 2016-03-21 22:07:25 +01:00
Pascal Wittmann 806f71370c amuleGui: fix build 
See #13559
 2016-03-21 21:29:39 +01:00
Tobias Geerinckx-Rice a685456213 dropbear: 2016.72 -> 2016.73 
Changes: https://matt.ucc.asn.au/dropbear/CHANGES.
 2016-03-20 23:20:56 +01:00
Teo Klestrup Röijezon ab29cfefab haproxy: 1.5.14 -> 1.6.4 2016-03-17 16:04:03 +01:00
Sheena Artrip 0cae22a370 meta: Add sheenobu as maintainer for relevant packages. 
freeradius: add sheenobu as maintainer

sipsak: add sheenobu as maintainer
 2016-03-15 21:45:49 -04:00
Robin Gloster 3f45f0948d Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-15 01:44:24 +00:00
Edward Tjörnhammar e433a3015a i2pd: 2.4.0 -> 2.5.1 2016-03-13 21:36:29 +01:00
zimbatm 099d7dc1b8 Merge pull request #13878 from DamienCassou/offlineimap-6.7.0 
offlineimap: 6.6.1 -> 6.7.0
 2016-03-13 18:29:04 +00:00
Damien Cassou 8c660e0301 offlineimap: 6.6.1 -> 6.7.0 2016-03-13 08:44:53 +01:00
Joachim Fasting 6da91e9e4a dnscrypt-wrapper: refactorings 
- use fetchFromGitHub
- move build deps to nativeBuildInputs
- use https for meta.homepage
 2016-03-12 19:06:57 +01:00
Joachim Fasting b3592d0b20 dnscrypt-proxy: refactorings 
- move build deps to nativeBuildInputs
- use https urls
 2016-03-12 18:53:28 +01:00
José Romildo Malaquias 607ea3ef76 uget: init at 2.0.5 2016-03-12 10:05:49 -03:00
Thomas Tuegel 1fae9a36aa ppp: fix evaluation error on Darwin 2016-03-11 09:12:39 -06:00
Eelco Dolstra b7fe9712dd Merge pull request #13824 from aneeshusa/update-openssh-to-7.2p2 
openssh: 7.2p1 -> 7.2p2 for OSA x11fwd.adv
 2016-03-11 10:52:14 +01:00
Tobias Geerinckx-Rice e834a7c05b dropbear: 2015.71 -> 2016.72 
Bugfix release:
- Validate X11 forwarding input. Could allow bypass of
  authorized_keys command= restrictions.
 2016-03-11 03:08:02 +01:00
Aneesh Agrawal 2dd09b634e openssh: update homepage link 
Unfortunately, the site is not available over HTTPS.
 2016-03-10 18:40:00 -05:00
Aneesh Agrawal e5ca25eb7a openssh: 7.2p1 -> 7.2p2 for OSA x11fwd.adv 
Fixes OpenSSH Security Advisory x11fwd.adv, which is available at
http://www.openssh.com/txt/x11fwd.adv.
 2016-03-10 18:01:33 -05:00
Domen Kožar 83766949c1 speedtest-cli: 0.3.1 -> 0.3.4 (fix runtime) 2016-03-10 20:42:37 +00:00
Aneesh Agrawal ce74aac132 openssh: update GSSAPI patch to openssh 7.2 2016-03-08 16:11:56 -05:00
Aneesh Agrawal 9e86984fe0 openssh: decouple gssapi patch from kerberos 
The GSSAPI patch is useful but maintained by Debian, not upstream, and
can be slow to update. To avoid breaking openssh_with_kerberos when
the openssh version is bumped but the GSSAPI patch has not been updated,
don't enable the GSSAPI patch implicitly but require it to be explicitly
enabled.
 2016-03-08 15:14:25 -05:00
Vladimír Čunát 09af15654f Merge master into closure-size 
The kde-5 stuff still didn't merge well.
I hand-fixed what I saw, but there may be more problems.
 2016-03-08 09:58:19 +01:00
Franz Pletz ac73835b54 quicktun: Remove custom hardening, now enabled by default 2016-03-08 00:39:39 +01:00
Franz Pletz e9fc4e7db6 Merge remote-tracking branch 'origin/master' into hardened-stdenv 2016-03-07 22:08:27 +01:00
joachifm 453686a24a Merge pull request #13705 from aneeshusa/use-bin-instead-of-sbin-for-openssh 
openssh: use bin instead of sbin folder
 2016-03-07 12:03:37 +00:00
joachifm 884627a6ef Merge pull request #13720 from aneeshusa/allow-compiling-openssh-without-linking-openssl 
openssh: allow building without linking openssl
 2016-03-07 11:55:36 +00:00
Aneesh Agrawal 14201da332 openssh: allow building without linking openssl 
http://undeadly.org/cgi?action=article&sid=20140430045723 has the
original announcement of this option. Note, openssl headers are still
required at build time, see this comment:
http://www.gossamer-threads.com/lists/openssh/dev/61125#61125
 2016-03-06 16:36:55 -05:00
Marius Bakke 7135553cf1 unbound: drop sbin directory 2016-03-06 12:50:41 +00:00
Marius Bakke 14e6b7aeb9 unbound: 1.5.7 -> 1.5.8 2016-03-06 12:11:40 +00:00
Vladimír Čunát a458a9f78f curl: use an official download link 
It works now that we have e6f61b4cf3.
 2016-03-06 11:12:23 +01:00
Aneesh Agrawal bb39304ce6 openssh: use bin instead of sbin folder 
References #11939.
 2016-03-05 23:56:32 -05:00
Franz Pletz 1fb09c1e7d dhcpcd: enable PIE hardening 2016-03-06 00:15:49 +01:00
Franz Pletz aff1f4ab94 Use general hardening flag toggle lists 
The following parameters are now available:

  * hardeningDisable
    To disable specific hardening flags
  * hardeningEnable
    To enable specific hardening flags

Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.

cc-wrapper supports the following flags:

  * fortify
  * stackprotector
  * pie (disabled by default)
  * pic
  * strictoverflow
  * format
  * relro
  * bindnow
 2016-03-05 18:55:26 +01:00
Robin Gloster fed49425c5 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-03 16:11:55 +00:00
joachifm 1b1379a68d Merge pull request #13531 from magnetophon/connman-dmenu-master 
connman-dmenu: init at git-29-9-2015
 2016-03-03 13:07:44 +00:00
Nikolay Amiantov f442830c55 libreswan: specify that we don't support parallel building 2016-03-02 18:56:32 +03:00
Nikolay Amiantov 23dd97ee88 Merge commit 'refs/pull/13412/head' of git://github.com/NixOS/nixpkgs 2016-03-02 18:56:24 +03:00
Marius Bakke c5f177cb5d dnscrypt-proxy: 1.6.0 -> 1.6.1 2016-03-02 15:12:06 +00:00
Alex Franchuk 69d8cb4a6b libreswan: add package and service to nixos 2016-03-02 09:44:30 -05:00
Robin Gloster 33f7d0b3f6 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-01 22:46:39 +00:00
Eelco Dolstra cc71804ab0 openssh: Fix build 2016-03-01 22:25:17 +01:00
Aneesh Agrawal 7f8d50b443 openssh: 7.1p2 -> 7.2p1 2016-03-01 22:25:16 +01:00
Robin Gloster 3b4765c9e5 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-28 16:32:57 +00:00
zimbatm 69ce5cb656 use the sourceforge mirrors everywhere 
find pkgs -name "*.nix" -exec sed -r \
    "s|https?://downloads.sourceforge.net/|mirror://sourceforge/|g" -i {} \;
 2016-02-28 12:07:42 +00:00
Franz Pletz b871649530 quicktun: init at 2.2.4 2016-02-28 12:23:12 +01:00
Domen Kožar 67b9053d29 Merge pull request #13530 from danielfullmer/zerotier-fix 
zerotierone: hardcoded path fix
 2016-02-28 10:20:04 +00:00
Bart Brouns 8fa1fb4920 connman-dmenu: init at git-29-9-2015 
fix indentation
 2016-02-28 05:18:35 +01:00
Daniel Fullmer 110dfca988 zerotierone: hardcoded path fix 
New code in zerotier broke the previous substitution where we refer to
the correct path for "ip".
 2016-02-27 22:13:41 -05:00
Arseniy Seroka 824a1fb5b9 Merge pull request #13496 from zimbatm/no-dots-at-end-of-description 
Remove all dots at end of descriptions
 2016-02-27 21:34:06 +03:00
Franz Pletz 0a9076b5f8 socat: 2.0.0-b8 -> 2.0.0-b9 (CVE-2016-2217) 
https://lwn.net/Vulnerabilities/674840/

http://www.dest-unreach.org/socat/contrib/socat-secadv7.html
http://www.dest-unreach.org/socat/contrib/socat-secadv8.html
 2016-02-27 19:10:38 +01:00
Franz Pletz 88d1564985 socat: 1.7.3.0 -> 1.7.3.1 (CVE-2016-2217) 
https://lwn.net/Vulnerabilities/674840/

http://www.dest-unreach.org/socat/contrib/socat-secadv7.html
http://www.dest-unreach.org/socat/contrib/socat-secadv8.html
 2016-02-27 19:10:38 +01:00
zimbatm 17348dc094 Remove all dots at end of descriptions 
Specially crafted for @JagaJaga

    find pkgs -name "*.nix" -exec \
      sed -e 's|\(description.*\)\.";|\1";|g' -i {} \;
 2016-02-27 17:30:29 +00:00
Franz Pletz 158ff99ae4 chrony: 2.2 -> 2.3 2016-02-27 18:00:07 +01:00
Christoph Hrdinka 0c0312d342 Merge pull request #13048 from bendlas/update-i2p 
i2p: 0.9.23 -> 0.9.24
 2016-02-27 17:49:20 +01:00
Franz Pletz c691b6a858 ntp: 4.2.8p4 -> 4.2.8p6 (multiple CVEs) 
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
 2016-02-27 16:34:02 +01:00
Robin Gloster 08893722ba Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-27 08:23:17 +00:00
Robin Gloster 3477e662e6 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-27 00:08:08 +00:00
zimbatm 2f38c1be69 Merge pull request #11142 from cresh/darwin-sshpass 
sshpass: Enable on OS X.
 2016-02-27 00:00:01 +00:00
Arseniy Seroka 766ad682f1 Merge pull request #13471 from Profpatsch/networkmanager-link-local 
networkmanager: fix link-local ip addresses
 2016-02-27 02:55:31 +03:00
Robin Gloster 8b9eccbf2d radvd: enable pie hardening 2016-02-26 23:03:00 +00:00
zimbatm 35ab3d301f Merge remote-tracking branch 'upstream/staging' 2016-02-26 22:37:04 +00:00
Robin Gloster e392824fb3 dnsmasq: enable pie hardening 2016-02-26 17:55:51 +00:00
Robin Gloster 62f65d15ca chrony: enable pie hardening 2016-02-26 17:54:46 +00:00
Robin Gloster 631c09bbe5 checksec: clean up 2016-02-26 17:26:03 +00:00
Robin Gloster a73762200d socat: enable pie hardening 2016-02-26 16:45:49 +00:00
Robin Gloster b6279950bd openssh: enable pie hardening 2016-02-26 16:30:26 +00:00
Robin Gloster 351173c2dd stunnel: 5.29 -> 5.30 2016-02-26 15:51:08 +00:00
Domen Kožar fe9f5dbbbc Merge pull request #6600 from 4z3/tlsdate 
tlsdate doesn't build on x86_64-darwin
 2016-02-26 10:59:00 +00:00
Profpatsch 70c02402c8 networkmanager: fix link-local ip addresses 
NetworkManager needs an additional avahi-user to use link-local
IPv4 (and probably IPv6) addresses. avahi-autoipd also needs to be
patched to the right path.
 2016-02-26 03:28:56 +01:00
zimbatm 853a213698 Merge pull request #13323 from rycee/ddclient/platform 
ddclient: add meta.platforms
 2016-02-26 00:02:06 +00:00
Franz Pletz c459ba8f85 ratools: init at 0.6.2 2016-02-25 16:56:48 +01:00
Franz Pletz 6a27fc57b7 radvd: 2.11 -> 2.12 2016-02-25 16:56:48 +01:00