1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-24 14:41:17 +00:00
Commit graph

4156 commits

Author SHA1 Message Date
obadz 66d5edf654 chromium: add nixos module security.chromiumSuidSandbox
Closes #17460

Changed the wrapper derivation to produce a second output containing the sandbox.
Add a launch wrapper to try and locate the sandbox (either in /var/setuid-wrappers or in /nix/store).
This launch wrapper also sheds libredirect.so from LD_PRELOAD as Chromium does not tolerate it.

Does not trigger a Chromium rebuild.

cc @cleverca22 @joachifm @jasom
2016-08-06 10:27:47 +01:00
Robin Gloster 19158a60cf Merge pull request #17541 from womfoo/bump/wraith-1.4.7
wraith: 1.4.6 -> 1.4.7, fixes build
2016-08-05 19:04:02 +02:00
Kranium Gikos Mendoza 9470b28743 wraith: 1.4.6 -> 1.4.7 2016-08-06 00:05:40 +08:00
obadz d6528a1b7f chromium: fixup commit 33557ac
Helps with #17460

@cleverca22 saw calls to SetuidSandboxHost::GetSandboxBinaryPath so we
patch this function instead.

cc @joachifm
2016-08-05 10:55:48 +01:00
obadz 33557acb36 chromium: add ability to control which sandbox is used
First step towards addressing #17460

In order to be able to run the SUID sandbox, which is good for security
and required to run Chromium with any kind of reasonable sandboxing when
using grsecurity kernels, we want to be able to control where the
sandbox comes from in the Chromium wrapper. This commit patches the
appropriate bit of source and adds the same old sandbox to the wrapper
(so it should be a no-op)
2016-08-04 20:37:35 +01:00
Robin Gloster dd7e09114f bip: set -Wno-error=unused-result, remove --disable-pie 2016-08-04 07:49:12 +00:00
Robin Gloster 56e69fcc0e iptraf: disable fortify hardening 2016-08-04 07:48:23 +00:00
Benjamin Staffin 78e5e61bbe Update google-chrome versions
The previous download links were all broken.

Stable: 51.0.2704.103 -> 52.0.2743.116
Beta:   52.0.2743.41  -> 53.0.2785.34
Dev:    53.0.2767.4   -> 54.0.2816.0
2016-08-04 00:22:58 -04:00
Hector A. Escobedo 594256c3a8 purple-matrix: init at 2016-07-11 2016-08-03 15:46:28 -04:00
Rok Garbas 2a4312d92b
firefox-beta-bin: 48.0b9 -> 49.0b1 2016-08-03 19:39:46 +02:00
Robin Gloster 1b979d8384 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-03 13:34:44 +00:00
mimadrid 4a06ece723
qutebrowser: 0.8.1 -> 0.8.2 2016-08-03 11:02:02 +02:00
zimbatm 2f791c7444 terraform: 0.6.16 -> 0.7.0 2016-08-03 09:53:20 +01:00
Luca Bruno 2cce7a064e telepathy_salut: fix build, add myself as maintainer 2016-08-02 22:00:24 +02:00
Tuomas Tynkkynen 21f17d69f6 treewide: Add lots of meta.platforms
Build-tested on x86_64 Linux & Mac.
2016-08-02 21:42:43 +03:00
Tuomas Tynkkynen 63de40099f treewide: Move some meta sections to end-of-file
That seems to be the overwhelming convention.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen 2258b21e4b treewide: Add lots of platforms to packages with no meta
Build-tested on x86_64 Linux and on Darwin.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen 59ce911810 treewide: Some EOF-whitespace fixes 2016-08-02 21:17:44 +03:00
taku0 47024938a2 firefox-bin: 47.0.1 -> 48.0 (#17452) 2016-08-02 16:55:55 +02:00
Robin Gloster 1be4907ca2 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-02 13:46:36 +00:00
Benno Fünfstück 2c7b5ac8a9 notmuch-mutt: drop unused fetchurl parameter 2016-08-02 11:45:42 +02:00
Benno Fünfstück 58afc252e4 notmuch-mutt: remove unused parameter 2016-08-02 11:39:50 +02:00
Peter Hoeg 8c04c3c899 notmuch-mutt: init at 0.22 2016-08-02 11:39:50 +02:00
Frederik Rietdijk 266fde80ca kde5.konversation: 1.6 -> 1.6.1 2016-08-02 09:00:03 +02:00
Frederik Rietdijk 65c109f887 kde5.konversation: use kdeWrapper 2016-08-02 08:49:12 +02:00
Robin Gloster 63c7b4f9a7 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-31 20:51:34 +00:00
Ioannis Koutras 631edf7de8 syncthing-inotify: init at 0.8.3 2016-07-30 20:19:16 +03:00
Peter Hoeg 10deae8a57 syncthing: 0.14.2 -> 0.14.3 2016-07-30 11:32:43 +08:00
mimadrid 5fbe282abd
wireshark: 2.0.4 -> 2.0.5 2016-07-29 12:11:09 +02:00
mimadrid 2ea77889ad filezilla: 3.19.0 -> 3.20.0 2016-07-27 22:48:43 +02:00
Christian L f51169366b neomutt: 20160611 -> 20160723 (#17268)
For information about what has changes, please refer to
http://www.neomutt.org/2016/07/23/release.
2016-07-27 18:55:48 +02:00
jokogr 54e870e3b1 syncthing: 0.14.0 -> 0.14.2 (#17274)
* Update syncthing from 0.14.0 to 0.14.2
* Use fetchFromGitHub instead of fetchgit
* Add joko to package maintainers
2016-07-27 18:49:43 +02:00
Miguel Madrid 94549d4fab qutebrowser: 0.8.0 -> 0.8.1 (#17302) 2016-07-27 15:50:29 +01:00
Robin Gloster 3882698004 Merge pull request #17294 from kamilchm/fix-mesos-fetcher-extract
mesos: FIX #16917 Failed to extract tgz
2016-07-27 12:23:07 +02:00
Kamil Chmielewski 81efd0c82d mesos: FIX #16917 Failed to extract tgz 2016-07-27 10:11:33 +02:00
Gabriel Ebner 7fce7c5a07 qutebrowser: 0.7.0 -> 0.8.0 2016-07-26 14:53:59 +02:00
Ram Kromberg 5685968ca6 midori: 0.5.8 -> 0.5.11 (#17142) 2016-07-25 21:25:42 +01:00
Kranium Gikos Mendoza a5d1c8d471 bluejeans: 2.160.63.8 -> 2.160.66.8 (#17232) 2016-07-25 20:53:32 +01:00
Maximilian Güntner 1fa6fe72fd unison: 2.48.3 -> 2.48.4 (#17209)
Signed-off-by: Maximilian Güntner <code@maschinenpsychologe.de>
2016-07-25 20:50:09 +01:00
Robin Gloster f222d98746 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-25 12:47:13 +00:00
Nikolay Amiantov cce1e9f2f4 tdesktop: use parseDrvName to get Qt release version
Closes #16559
2016-07-23 09:41:25 +03:00
Peter Hoeg 9d53dc00c3 dropbox: 4.4.29 -> 6.4.14 (#17165) 2016-07-23 00:51:55 +02:00
Robin Gloster 1f04b4a566 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-21 00:56:43 +00:00
edanaher 5682279d14 pidgin-osd: init at 0.1.0 (#16792)
* pidgin-osd: init at 0.1.0

A straightforward pidgin plugin; kind of ancient, but still works fine.

* Use autoreconf, which minor hackery around ChangeLog.
2016-07-21 01:12:31 +02:00
Rok Garbas f5dca01b50 firefox-bin: 48.0b7 -> 48.0b9 2016-07-21 00:59:56 +02:00
Rok Garbas 0558ae3057 firefox-bin: libpulseaudio.dev is needed otherwise firefox doesn't start 2016-07-21 00:56:38 +02:00
Graham Christensen 5bc522913b Merge pull request #17032 from Ralith/purple-hangouts
purple-hangouts-hg: init at 2016-07-17
2016-07-20 14:38:26 +00:00
Peter Hoeg c5222b9d55 syncthing: 0.13.10 -> 0.14.0 (#17110) 2016-07-20 12:46:22 +02:00
Benjamin Saunders 54b037720d purple-hangouts-hg: init at 2016-07-17 2016-07-19 21:45:48 -07:00
Graham Christensen 098aee0cd7 Merge pull request #17035 from phanimahesh/alpine
alpine:configure: allow using passfile
2016-07-20 02:27:23 +00:00
Frederik Rietdijk bae6ad8efa uzbl: fix build
See also #16740.
2016-07-19 15:06:42 +02:00
Robin Gloster 203846b9de Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-19 10:37:02 +00:00
kc1212 05274e53f8 syncthing: 0.13.9 -> 0.13.10 (#16912) 2016-07-18 12:46:47 +02:00
J Phani Mahesh 9a4d0d8e44 alpine:configure: allow using passfile 2016-07-17 17:28:10 +05:30
Joachim F 23e27413b3 Merge pull request #17029 from nathanielbaxter/dev/teamspeak_client
teamspeak_client: 3.0.19.1 -> 3.0.19.3
2016-07-17 11:29:01 +02:00
Nathaniel Baxter 3c9788e1ce teamspeak_client: 3.0.19.1 -> 3.0.19.3 2016-07-17 17:06:44 +10:00
Joachim Fasting ec4ae7c8b6
teamspeak_client: specify a custom, nonfree license
The licensing terms depend on use [1], but the software is clearly nonfree.
Previously, the package would happily build even with allowUnfree = false.

[1]: http://sales.teamspeakusa.com/licensing.php
2016-07-17 04:52:22 +02:00
Joachim Fasting a317a15b30
mutt: fetch {sidebar,trash}.patch from AUR 2016-07-16 14:01:29 +02:00
Rok Garbas a377c71280 firefox-bin: 48.0b1 -> 48.0b7
* removed firefox-developer-bin
* extend firefox-bin expression to accept sources as input so
  firefox-developer-bin can be packaged outside nixpkgs
* generate_sources.rb now includes full urls in the output
2016-07-16 13:04:04 +02:00
Austin Seipp 3a8067e6de nixpkgs: bittorrentSync 2.3.7 -> 2.3.8
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2016-07-16 01:20:15 -05:00
Robin Gloster 5185bc1773 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-07-15 14:41:01 +00:00
Frederik Rietdijk 7d69e5dda2 Merge pull request #16929 from siddharthist/terraform/0.6.15->0.6.16
terraform: 0.6.15 -> 0.6.16
2016-07-15 11:19:28 +02:00
Nikolay Amiantov 7529b2c661 Merge pull request #16947 from RamKromberg/fix/flashplayer
flashplayer: 11.2.202.626 -> 11.2.202.632 APSB16-25
2016-07-14 23:17:41 +04:00
Alexey Lebedeff 52ed165c91 viber: 4.2.2.6 -> 6.0.1.5
- Use Qt provided by viber itself -> no longer broken
- Remove notes about obsolete bugs
2016-07-14 15:36:29 +03:00
Ram Kromberg 6046702e5e flashplayer: 11.2.202.626 -> 11.2.202.632 2016-07-14 12:42:26 +03:00
rushmorem 3b27257e9a habitat: fix naming collision 2016-07-14 05:40:09 +02:00
rushmorem ea15a54ef2 habitat: add an option to run in an FHS chroot
`hab studio enter` as well as other `hab` commands that make use
of the studio assume an FHS system when creating a chroot.

See https://github.com/habitat-sh/habitat/issues/994
2016-07-14 04:36:58 +02:00
Langston Barrett f3262a209b terraform: 0.6.15 -> 0.6.16 2016-07-13 18:32:13 +02:00
joachifm 9903923572 Merge pull request #16805 from rnhmjoj/mutt
mutt: 1.6.0 -> 1.6.2
2016-07-12 18:36:19 +02:00
Renzo Carbonara 103ae01173 zoom-us: init at 2.0.52458.0531 (#15607) 2016-07-12 13:37:11 +02:00
mimadrid 15d28334a7
filezilla: 3.18.0 -> 3.19.0 2016-07-11 22:06:34 +02:00
zimbatm a265ad2842 firefox-developer-bin: fix hashes (#16860)
the nightly tend to get replaced in-place on the FTP and so benefit from
an update script as well
2016-07-11 13:40:58 +02:00
Oliver Charles 65ac26e28a Merge pull request #16841 from womfoo/bump/bluejeans-2.160.63.8
bluejeans: 2.160.49.8 -> 2.160.63.8
2016-07-11 10:00:18 +01:00
Kranium Gikos Mendoza 5da05eef62 bluejeans: 2.160.49.8 -> 2.160.63.8 2016-07-10 23:52:23 +08:00
Franz Pletz a950c154c1 wireshark: 2.0.3 -> 2.0.4 (security)
Fixes a few security problems:
  https://www.wireshark.org/docs/relnotes/wireshark-2.0.4.html
2016-07-10 10:46:22 +02:00
rnhmjoj 8745e47909
mutt: 1.6.0 -> 1.6.2 2016-07-09 05:16:51 +02:00
Tim Steinbach 72221e71d5 slack: 2.0.3 -> 2.1.0 2016-07-07 08:44:05 -04:00
Tobias Geerinckx-Rice 921d3321f5
trezor-bridge: mark as broken
Cool, a bitcoin wallet app silently changes its hash.

CC maintainer @ehmry
2016-07-06 19:42:45 +02:00
Miguel Madrid 87be90336f links2: 2.12 -> 2.13 (#16756) 2016-07-06 19:40:05 +02:00
Thomas Tuegel 05b3749bb2 dropbox: don't use bundled Qt libraries
Fixes #16744.
2016-07-06 11:34:43 -05:00
Rahul Gopinath af074c0972 gnunet: cleanup patching
Do not use loop and sed since sed can take a list of files.
2016-07-04 17:10:22 -07:00
Rahul Gopinath b31ab67a81 gnunet: ensure that zlib is actually linked
Fixes #14969
2016-07-04 16:51:14 -07:00
Tobias Geerinckx-Rice a978c2e9c2 Merge pull request #16699 from womfoo/bump/utox-0.9.4
utox: 0.9.0 -> 0.9.4
2016-07-04 15:01:23 +02:00
Kranium Gikos Mendoza a89eee9da8 utox: 0.9.0 -> 0.9.4 2016-07-03 20:54:45 +08:00
Vladimír Čunát ac0ba89d1e Merge #16661: thunderbird: 45.1.1 -> 45.2.0 2016-07-02 17:04:49 +02:00
mimadrid 0dfaa1e8bd
thunderbird: 45.1.1 -> 45.2.0 2016-07-02 12:23:58 +02:00
taku0 4774abecb6 thunderbird-bin: 45.1.1 -> 45.2.0 (#16659) 2016-07-02 09:50:02 +02:00
Franz Pletz e77eba305f errbot: init at 4.2.2 (#16551) 2016-07-01 16:04:01 +02:00
Ram Kromberg 0253f7eafb transgui: init at 5.0.1-svn-r986 2016-07-01 13:51:47 +03:00
zimbatm 3110682457 Merge pull request #16636 from hiberno/update-neomutt
neomutt: 20160530 -> 20160611
2016-07-01 09:27:17 +01:00
Christian Lask 39812a3531 neomutt: 20160530 -> 20160611 2016-07-01 10:01:33 +02:00
taku0 a10ddb582e firefox-bin: 47.0 -> 47.0.1 (#16599) 2016-06-30 23:39:45 +02:00
rushmorem 0604af9212 nomad: 0.3.2 -> 0.4.0 2016-06-30 20:30:22 +02:00
Eelco Dolstra 0967b0d303 firefox-esr: Fix build
http://hydra.nixos.org/build/36668046
2016-06-29 17:23:03 +02:00
Eelco Dolstra 0c832dceb2 firefox-esr: 45.1.1 -> 45.2.0 2016-06-29 16:08:26 +02:00
Eelco Dolstra 653be3c802 firefox: 47.0 -> 47.0.1 2016-06-29 16:06:50 +02:00
kc1212 20c8e628fd syncthing: 0.13.7 -> 0.13.9 (#16558) 2016-06-28 02:35:37 +02:00
Nikolay Amiantov f990abb801 tdesktop: 0.9.49 -> 0.9.56 2016-06-27 22:03:29 +03:00
Rushmore Mushambi 1aa2167f0a Merge pull request #16550 from rushmorem/habitat-src
habitat: build from source
2016-06-27 14:32:11 +02:00
Frederik Rietdijk 73ed4df1d1 Merge pull request #16547 from womfoo/qbittorrent
qbittorrent: 3.3.4 -> 3.3.5
2016-06-27 14:05:32 +02:00
rushmorem 531cdf4be1 habitat: build from source 2016-06-27 13:38:10 +02:00
Kranium Gikos Mendoza e8dcd4a9d5 qbittorrent: 3.3.4 -> 3.3.5 2016-06-27 17:00:33 +08:00
rushmorem 5f2dc4bc05 habitat: init at 0.7.0 2016-06-25 21:44:54 +02:00
Jos van den Oever 892ff1ad20 davmail: 4.7.1 -> 4.7.2
Bugfix release, detect Exchange throttling to temporarily block requests and a few Carddav fixes.

EWS:
- EWS: handle Exchange throttling, suspend all requests according to server provided delay
- EWS: send DavMailException instead of authentication exception on EWS not available error

Enhancements:
- 128x128 DavMail icon
- Add a new davmail.httpMaxRedirects setting
- DAV: add a hidden davmail.disableNTLM setting

Carddav:
- Carddav: fix another regression on contact create with empty field
- Carddav: remove email over EWS unit test
- Carddav: fix email address removal over EWS
2016-06-24 00:04:38 +02:00
zimbatm e25933ac6e Merge pull request #16410 from womfoo/conkeror
conkeror: 1.0pre-20160130 -> 1.0.3
2016-06-22 21:47:13 +01:00
Marius Bakke 4a7d31a392 treewide: remove double quotes from wrappers
Close #14753; see that for context.
2016-06-22 11:12:27 +02:00
Kranium Gikos Mendoza ac680eed2b conkeror: 1.0pre-20160130 -> 1.0.3 2016-06-22 07:14:03 +08:00
Thomas Tuegel 6a61621cb4 Merge pull request #16396 from FRidh/trojita
trojita: init at 0.7
2016-06-21 10:53:41 -05:00
Frederik Rietdijk bb8bd4b5cf trojita: init at 0.7 2016-06-21 14:24:45 +02:00
Pascal Wittmann 5844bc63df Merge pull request #16372 from mimadrid/update/filezilla-3.18.0
filezilla: 3.17.0.1 -> 3.18.0
2016-06-21 01:27:36 +02:00
mimadrid d7695b790f
filezilla: 3.17.0.1 -> 3.18.0 2016-06-20 22:48:23 +02:00
aszlig 9728554c4f
Merge pull request #16099 (Chromium update)
The changes contain an update of the stable channel (along with beta and
dev as well) fixing 18 security vulnerabilities:

http://googlechromereleases.blogspot.de/2016/06/stable-channel-update.html
http://googlechromereleases.blogspot.de/2016/06/stable-channel-update_6.html
http://googlechromereleases.blogspot.de/2016/06/stable-channel-update_16.html

I've built and tested this at the following evaluation on my Hydra:

https://headcounter.org/hydra/eval/324449
2016-06-20 18:43:41 +02:00
Bjørn Forsman bd01fad0ed Captialize meta.description of all packages
In line with the Nixpkgs manual.

A mechanical change, done with this command:

  find pkgs -name "*.nix" | \
      while read f; do \
          sed -e 's/description\s*=\s*"\([a-z]\)/description = "\u\1/' -i "$f"; \
      done

I manually skipped some:

* Descriptions starting with an abbreviation, a user name or package name
* Frequently generated expressions (haskell-packages.nix)
2016-06-20 13:55:52 +02:00
Scott R. Parish 1f1f0f049b chromium: Update to latest stable, beta, and dev channels
stable 51.0.2704.63 => 51.0.2704.103
beta   51.0.2704.63 => 52.0.2743.41
dev    52.0.2743.10 => 53.0.2767.4

This addresses 15 security fixes, including:

 * High   CVE-2015-1696: Cross-origin bypass in Extension bindings. Credit to
                         anonymous.
 * High   CVE-2015-1697: Cross-origin bypass in Blink. Credit to Mariusz
                         Mlynski.
 * Medium CVE-2016-1698: Information leak in Extension bindings. Credit to
                         Rob Wu.
 * Medium CVE-2016-1699: Parameter sanitization failure in DevTools. Credit
                         to Gregory Panakkal.
 * Medium CVE-2016-1700: Use-after-free in Extensions. Credit to Rob Wu.
 * Medium CVE-2016-1701: Use-after-free in Autofill. Credit to Rob Wu.
 * Medium CVE-2016-1702: Out-of-bounds read in Skia. Credit to cloudfuzzer.

See: http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html
2016-06-19 19:50:45 -07:00
zimbatm f29ce0fecc Merge pull request #16341 from mimadrid/update/thunderbird-45.1.1
thunderbird: 45.1.0 -> 45.1.1
2016-06-19 22:22:14 +01:00
mimadrid 96539866a6
thunderbird: 45.1.0 -> 45.1.1 2016-06-19 17:09:55 +02:00
Gabriel Ebner 9988488fc6 qutebrowser: use makeQtWrapper
Fixes #15597.
2016-06-19 14:42:13 +02:00
Gabriel Ebner 5862c38d9d qutebrowser: 0.6.2 -> 0.7.0 2016-06-19 14:08:09 +02:00
Joachim Fasting d426bab792 Merge pull request #16283 from peterhoeg/st_0137
syncthing: 0.13.4 -> 0.13.7
2016-06-17 18:01:01 +02:00
Cast 0efb130d50 owncloud: 2.1.1 -> 2.2.1 2016-06-16 19:10:20 +02:00
taku0 c802f56639 flashplayer: 11.2.202.621 -> 11.2.202.626 2016-06-16 21:24:38 +09:00
Peter Hoeg 54e806e690 syncthing: 0.13.4 -> 0.13.7 2016-06-15 12:59:41 +08:00
Joachim Fasting c94f4f85c5 Merge pull request #16226 from bobvanderlinden/fix-lsyncd
lsyncd: removed support for Darwin
2016-06-14 15:04:48 +02:00
Bob van der Linden 61431e239b lsyncd: removed support for Darwin 2016-06-14 10:46:56 +02:00
zimbatm 373b4deb46 Merge pull request #16195 from bendlas/update-dropbox-master
dropbox: 3.20.1 -> 4.4.29
2016-06-12 22:05:57 +01:00
Herwig Hochleitner 7df03fbbb3 dropbox: 3.20.1 -> 4.4.29 2016-06-12 21:55:47 +02:00
devhell 20f0c66fe4 canto-{curses,daemon}: 0.9.{6,5} -> 0.9.{7,6}
Unfortunately there is no changelog available.
2016-06-12 16:55:53 +01:00
Arseniy Seroka d4876168e2 Merge pull request #16140 from hiberno/update-vivaldi
vivaldi: 1.1 -> 1.2
2016-06-11 22:32:38 +03:00
Arseniy Seroka 263edf8897 Merge pull request #16147 from womfoo/bluejeans
bluejeans: 2.155.17.5 -> 2.160.49-8
2016-06-11 22:31:46 +03:00
Christian Lask da0b516a5f vivaldi: 1.1 -> 1.2 2016-06-11 09:55:32 +02:00
Kranium Gikos Mendoza 1497998a40 bluejeans: 2.155.17.5 -> 2.160.49-8 2016-06-11 06:29:52 +08:00
Rahul Gopinath 65b3ddec31 neomutt: 20160502 -> 20160530
Adds keywords, compress, nntp to patches.
2016-06-10 13:55:21 -07:00
Robin Gloster 8031cba2ab Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-06-10 09:27:04 +00:00
Christian Lask 527077f02c qutebrowser: 0.6.1 -> 0.6.2 2016-06-10 10:11:59 +02:00
Rok Garbas 4c96860b53 firefox-bin: 47.0b9 -> 48.0b1, 48.0a2 -> 49.0a2 2016-06-10 04:24:27 +02:00
Thomas Tuegel e6fdc9f7f0 Merge pull request #16092 from abbradar/qt561
Qt: 5.6.0 -> 5.6.1
2016-06-09 14:32:53 -05:00
Nikolay Amiantov 7b84294bd9 tdesktop: fix with new Qt 2016-06-09 21:37:24 +03:00
Rushmore Mushambi 83c40ada7e Merge pull request #16017 from kamilchm/rework-go
Rework goPackages
2016-06-09 17:09:13 +02:00
Kamil Chmielewski 3a41ffe8aa ipfs: build fails with Go 1.6, revert to 1.5 2016-06-09 16:10:50 +02:00
Kamil Chmielewski 1dfae0678d nomad: extracted from goPackages 2016-06-09 13:08:10 +02:00
Kamil Chmielewski 8cd1d4cda5 buildGoPackage: use Go 1.6 by default 2016-06-09 13:08:10 +02:00
Kamil Chmielewski 734d152977 buildGo16Packages: fetchgit -> fetchFromGitHub 2016-06-09 13:08:10 +02:00
Kamil Chmielewski bbc37e0eb7 Moving from fetchgit generated by go2nix to fetchFromGitHub where rev is
a tag
2016-06-09 13:08:10 +02:00
Kamil Chmielewski 30acfc3b45 ipfs: extracted from goPackages 2016-06-09 13:08:09 +02:00
Kamil Chmielewski 7eb671ebcd no more goPackages 2016-06-09 13:08:00 +02:00
Vladimír Čunát cc174b3d55 pidgin: simplify using the wrapped version
Now only the `pidgin` attribute is exposed and it's wrapped based on
whether the `plugins` parameter is overridden.

Discussion: https://github.com/NixOS/nixpkgs/issues/8999#issuecomment-224851642
2016-06-09 12:21:36 +02:00
Kamil Chmielewski 6f51fdd81c drive: extracted from goPackges 2016-06-09 11:22:02 +02:00
Kamil Chmielewski 03feac7937 pond: extracted from goPackages 2016-06-09 11:22:02 +02:00
Kamil Chmielewski e89a086f06 terraform: extracted from goPackages 2016-06-09 11:22:02 +02:00
Kamil Chmielewski 5017469197 xmpp-client: extracted from goPackages 2016-06-09 11:22:02 +02:00
Kamil Chmielewski 06327d22d6 syncthing012: extracted from goPackages 2016-06-09 11:22:02 +02:00
Joachim Fasting ccf7048307 Merge pull request #16057 from taku0/firefox-bin-47.0
firefox-bin: 46.0.1 -> 47.0
2016-06-08 17:20:24 +02:00
Michael Raskin d88aa14c6e Firefox: 46.0.1 -> 47.0 2016-06-08 17:09:12 +02:00
taku0 697437c8e7 firefox-bin: 46.0.1 -> 47.0 2016-06-07 03:23:43 +09:00
Rushmore Mushambi 97c64f560c Merge pull request #16024 from rushmorem/k8s-update
kubernetes: v1.0.3 -> v1.2.4
2016-06-06 19:42:34 +02:00
rushmorem 21c83f294d kubernetes: v1.0.3 -> v1.2.4 2016-06-06 19:25:32 +02:00
Thomas Tuegel f0c76d603f dropbox: use bundled libraries whenever possible 2016-06-05 19:45:27 -05:00
Nikolay Amiantov 9dc2ab3d16 teamviewer: 11.0.53191 -> 11.0.57095
Also fixes #15965
2016-06-03 23:46:07 +03:00
Tuomas Tynkkynen bac26e08db Fix lots of fetchgit hashes (fallout from #15469) 2016-06-03 17:17:08 +03:00
Moritz Ulrich 7a962c441f Merge pull request #15946 from hiberno/update-neomutt
neomutt: 20160416 -> 20160502
2016-06-03 12:26:51 +02:00
Christian Lask 5ff90d1518 neomutt: 20160416 -> 20160502 2016-06-03 12:22:42 +02:00
Emery Hemingway c544cbca42 qtox: 1.3.0 -> 1.4.1 2016-06-02 14:58:01 +02:00
Joachim Schiele 1f3b0391f4 Merge pull request #15406 from Mayeu/patch-5
owncloud-client: Fix "libocsync.so.0 not found" error
2016-06-02 12:33:52 +02:00
Mayeu - Cast 61b4f1463c owncloud-client: Fix "libocsync.so.0 not found" error
Close #15130
2016-06-02 08:48:09 +02:00
taku0 b835f3e262 thunderbird-bin: 45.1.0 -> 45.1.1 (#15860) 2016-06-01 11:34:44 +02:00
Thomas Tuegel a1facf3362 qtox: run pre- and post-install hooks
Fixes #15744.
2016-05-30 16:31:58 -05:00
Thomas Tuegel 7299f68a05 qbittorrent: don't use qmakeHook
Qt now configures QMake for all builds so there is no need to invoke
`qmakeHook` just to get a working `qmake`.
2016-05-30 16:30:06 -05:00
Robin Gloster 2d382f3d98 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-05-30 19:39:34 +00:00
Rok Garbas ea3f1ff7f0 firefox-bin: 47.0b8 -> 47.0b9 2016-05-30 11:27:45 +02:00
Paul Hendry 8ea1f2d36c syncthing: 0.12.25 -> 0.13.4 (#15730)
* Rename v0.12.25 package from 'syncthing' to 'syncthing012'
* Remove syncthing011
2016-05-30 10:15:58 +02:00
Gabriel Ebner ad94726f9e remmina: set correct path to libX11.so.6 2016-05-30 08:04:54 +02:00
Bjørn Forsman 41eafd25a0 Revert "x2goclient: move to qmake4Hook"
This reverts commit 83406bc171, because
it broke the build.

x2goclient requires to be built with its top-level (hand coded) Makefile
(in accordance with upstream documentation). Invoking qmake directly on
the .pro file, without specifying a separate build tree, will overwrite
the Makefile and break the build.

For instance, there are no install rules in the .pro file. That exists
only in the Makefile.
2016-05-29 11:38:41 +02:00
Joachim Fasting 61f92ec541 Merge pull request #15779 from joachifm/sipcmd-refactor
sipcmd: refactoring
2016-05-28 23:03:52 +02:00
aszlig 79d18eb604
chromium: Update dev channel to v52.0.2743.10
With this update we need to rebase the nix_plugin_paths patch, which was
done by @srp and I took it from his comment at:

https://github.com/NixOS/nixpkgs/pull/15762#issuecomment-222230677

Other than that, using libjpeg from nixpkgs fails to link:

https://headcounter.org/hydra/build/1114273

Rather than just using versionAtLeast to check for >= version 52, we're
matching on the explicit version number. That way we can make sure that
we (try to) build with system libjpeg again so we can keep it out of the
overall Chromium build time.

Built and tested using the VM tests on my Hydra at:

https://headcounter.org/hydra/eval/322006

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-05-28 19:15:39 +02:00
aszlig c7a3645e7b
chromium: Remove stuff for versions <= v51
We're already on version 52, so there really is no need to keep all
those conditionals and old patches anymore.

Tested dropping the unconditional build_fixes_46.patch via the Chromium
VM tests.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-05-28 19:04:22 +02:00
aszlig 0f4095ec50
chromium: Fix hash for beta Debian package
I'm not sure how the wrong hash ended up being there, but I've checked
the hash from three different machines (and networks) just to be sure I
didn't make a mistake.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-05-28 18:57:15 +02:00
Scott R. Parish e2d067d760
chromium: Update to latest stable and beta channel
Overview of updated versions:

stable: 50.0.2661.102 -> 51.0.2704.63
beta: 51.0.2704.47 -> 51.0.2704.63

I tried to update dev, but couldn't get it to compile, it was failing
with a "'isnan' was not declared in this scope.

As far as I can tell, at the moment the beta and stable channels are
on the same version.

The stable update addresses the following security issues:

  * High   CVE-2016-1672: Cross-origin bypass in extension bindings. Credit
                          to Mariusz Mlynski.
  * High   CVE-2016-1673: Cross-origin bypass in Blink. Credit to Mariusz
                          Mlynski.
  * High   CVE-2016-1674: Cross-origin bypass in extensions. Credit to Mariusz
                          Mlynski.
  * High   CVE-2016-1675: Cross-origin bypass in Blink. Credit to Mariusz
                          Mlynski.
  * High   CVE-2016-1676: Cross-origin bypass in extension bindings. Credit
                          to Rob Wu.
  * Medium CVE-2016-1677: Type confusion in V8. Credit to Guang Gong of
                        Qihoo 360.
  * High   CVE-2016-1678: Heap overflow in V8. Credit to Christian Holler.
  * High   CVE-2016-1679: Heap use-after-free in V8 bindings. Credit to Rob Wu.
  * High   CVE-2016-1680: Heap use-after-free in Skia. Credit to Atte Kettunen
                          of OUSPG.
  * High   CVE-2016-1681: Heap overflow in PDFium. Credit to Aleksandar Nikolic
                          of Cisco Talos.
  * Medium CVE-2016-1682: CSP bypass for ServiceWorker. Credit to
                          KingstonTime.
  * Medium CVE-2016-1683: Out-of-bounds access in libxslt. Credit to Nicolas
                          Gregoire.
  * Medium CVE-2016-1684: Integer overflow in libxslt. Credit to Nicolas
                          Gregoire.
  * Medium CVE-2016-1685: Out-of-bounds read in PDFium. Credit to Ke Liu
                          of Tencent's Xuanwu LAB.
  * Medium CVE-2016-1686: Out-of-bounds read in PDFium. Credit to Ke Liu
                          of Tencent's Xuanwu LAB.
  * Medium CVE-2016-1687: Information leak in extensions. Credit to Rob Wu.
  * Medium CVE-2016-1688: Out-of-bounds read in V8. Credit to Max Korenko.
  * Medium CVE-2016-1689: Heap buffer overflow in media. Credit to Atte
                          Kettunen of OUSPG.
  * Medium CVE-2016-1690: Heap use-after-free in Autofill. Credit to Rob Wu.
  * Low    CVE-2016-1691: Heap buffer-overflow in Skia. Credit to Atte Kettunen
                          of OUSPG.
  * Low    CVE-2016-1692: Limited cross-origin bypass in ServiceWorker. Credit
                          to Til Jasper Ullrich.
  * Low    CVE-2016-1693: HTTP Download of Software Removal Tool. Credit to
                          Khalil Zhani.
  * Low    CVE-2016-1694: HPKP pins removed on cache clearance. Credit to Ryan
                          Lester and Bryant Zadegan.

See: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html
2016-05-28 18:12:39 +02:00
Joachim Fasting bb4989529f
sipcmd: refactoring
- Use `fetchFromGitHub`
- meta cleanups
2016-05-28 15:25:31 +02:00
obadz 70286f1348 transmission: fix build with systemd 230 2016-05-28 13:49:19 +01:00
Vladimír Čunát e4832c7541 Merge branch 'staging'
Includes a security update of libxml2.
2016-05-27 15:58:40 +02:00
Arseniy Seroka 8479e0ad84
purple-telegram: fix hash 2016-05-26 22:51:23 +03:00
Vladimír Čunát 81039713fa Merge branch 'master' into staging
... to get the systemd update (rebuilding ~7k jobs).
2016-05-26 16:50:22 +02:00
Jascha Geerds c815844df9 hipchat: 4.0.1637 -> 4.0.1641 2016-05-26 08:10:02 +02:00
Eelco Dolstra fa1b9ec1e6 thunderbird: 45.0 -> 45.1.0 2016-05-25 18:04:26 +02:00
Rok Garbas bf2aaeb0f6 tdesktop: 0.9.48 -> 0.9.49 2016-05-25 17:59:08 +02:00
Michael Raskin 910744de98 baresip: 0.4.18 -> 0.4.19 2016-05-25 15:36:59 +02:00
Rok Garbas 1908c90412 firefox-bin: 47.0b7 -> 47.0b8 2016-05-25 11:42:40 +02:00
Rok Garbas 03f36a4141 firefox-bin: 47.0b5 -> 47.0b7 2016-05-24 12:36:23 +02:00
Vladimír Čunát 0b192a0976 Merge branch 'master' into staging
That's to get mesa rebuild from master, as it's nontrivial.
2016-05-23 09:02:10 +02:00
Bjørn Forsman d809ef47cb wireshark: 2.0.2 -> 2.0.3 2016-05-22 20:04:44 +02:00
Vladimír Čunát 73f1f5eb39 imagemagick: split dev output to fix #9604
Also fixup references to imagemagick.
2016-05-22 13:41:15 +02:00
Vladimír Čunát c4661e9643 Merge: make dev output references explicit
This is a rebase of most commits from #14766,
resolving conflicts and a few other evaluation problems.
2016-05-22 12:09:23 +02:00
ldesgoui 85789b5f2b discord: 0.0.3 -> 0.0.8 2016-05-21 18:33:57 +02:00
Tobias Geerinckx-Rice 5940056af6
utox: 0.7.0 -> 0.9.0
Upstream is weird.
2016-05-21 13:50:52 +02:00
Aycan iRiCAN 379559702e snort: 2.9.7.2 -> 2.9.8.2 2016-05-21 10:08:36 +03:00
Joachim Fasting 7c080c92b2 Merge pull request #15565 from bendlas/update-dropbox-master
dropbox: 3.18.1 -> 3.20.1
2016-05-20 06:21:42 +02:00
Nikolay Amiantov 131eb8406e tdesktop: 0.9.44 -> 0.9.48
This package requires a ridiculous amount of time to maintain, with
their build system changing from one completely ad-hoc way to
another. More hacks for the throne of hacks...
2016-05-20 03:47:42 +03:00
Tuomas Tynkkynen 05d8174b0e treewide: Make explicit that 'dev' output of subversion is used 2016-05-19 10:04:37 +02:00
Tuomas Tynkkynen 5a8ad2d7a8 treewide: Make explicit that 'dev' output of slang is used 2016-05-19 10:03:35 +02:00
Tuomas Tynkkynen 5152e01e87 treewide: Make explicit that 'dev' output of pango is used 2016-05-19 10:02:27 +02:00
Tuomas Tynkkynen 2a73de6e6c treewide: Make explicit that 'dev' output of openssl is used 2016-05-19 10:02:23 +02:00
Tuomas Tynkkynen 5eb01cd0ad treewide: Make explicit that 'dev' output of openldap is used 2016-05-19 10:00:50 +02:00
Tuomas Tynkkynen 99acb412ab treewide: Make explicit that 'dev' output of ncurses is used 2016-05-19 10:00:49 +02:00
Tuomas Tynkkynen 603dcd6263 treewide: Make explicit that 'dev' output of libnl is used 2016-05-19 10:00:43 +02:00
Tuomas Tynkkynen be00816cab treewide: Make explicit that 'dev' output of libjpeg is used 2016-05-19 10:00:42 +02:00
Tuomas Tynkkynen 674eb400ef treewide: Make explicit that 'dev' output of libevent is used 2016-05-19 10:00:40 +02:00
Tuomas Tynkkynen d1937cf11a treewide: Make explicit that 'dev' output of gtk2 is used 2016-05-19 10:00:38 +02:00
Tuomas Tynkkynen f81af4e6f0 treewide: Make explicit that 'dev' output of glib is used 2016-05-19 10:00:35 +02:00
Tuomas Tynkkynen a11b717ce4 treewide: Make explicit that 'dev' output of gdk_pixbuf is used 2016-05-19 10:00:35 +02:00
Tuomas Tynkkynen bb5a922c78 treewide: Make explicit that 'dev' output of ffmpeg is used 2016-05-19 10:00:31 +02:00
Tuomas Tynkkynen 4e0307dcfc treewide: Make explicit that 'dev' output of cyrus_sasl is used 2016-05-19 10:00:30 +02:00
Tuomas Tynkkynen 5e5c5382f6 treewide: Make explicit that 'dev' output of cairo is used 2016-05-19 10:00:28 +02:00
Tuomas Tynkkynen 825bd69b38 treewide: Make explicit that 'dev' output of boehmgc is used 2016-05-19 10:00:27 +02:00
Tuomas Tynkkynen 85a51074dc treewide: Make explicit that 'dev' output of atk is used 2016-05-19 10:00:25 +02:00
Tuomas Tynkkynen 29694b43b6 treewide: Make explicit that 'dev' output of apr is used 2016-05-19 10:00:24 +02:00
Nikolay Amiantov 5445e521b6 firefox: restore gstreamer support for older firefox releases 2016-05-19 00:28:49 +03:00
Franz Pletz f8d481754c
Merge remote-tracking branch 'origin/master' into hardened-stdenv 2016-05-18 17:10:02 +02:00
Jascha Geerds 31253b0c1b hipchat: 4.0.1631 -> 4.0.1637 2016-05-18 15:56:53 +02:00
Jascha Geerds 02d6680b5a hipchat: Add xdg_utils to rpath
This makes it possible to open links with a single click in your
preferrred browser via xdg-open.
2016-05-18 15:28:45 +02:00
Domen Kožar b49bf121b8 rename iElectric to domenkozar to match GitHub 2016-05-17 13:00:47 +01:00
Franz Pletz 2007e9b140
firefox: reenable libvpx as 1.5 is now available 2016-05-17 01:05:46 +02:00
Peter Simons 8e462995ba Bring my stdenv.lib.maintainers user name in line with my github nick. 2016-05-16 22:49:55 +02:00
Tobias Geerinckx-Rice e8db151fa3
firefox-bin: fix evaluation 2016-05-15 23:22:50 +02:00
Joachim Fasting 397b356383 Merge pull request #15323 from joachifm/libgd
gd: 2.0.35 -> 2.1.1
2016-05-15 14:12:28 +02:00
aszlig ad2c8d3510
chromium: Update to latest beta and dev channels
Overview of the updated versions:

beta: 50.0.2661.49 -> 51.0.2704.47
dev:  51.0.2693.2  -> 52.0.2729.3

It has been a while since we had a major Chromium update that compiled
and worked without troubles, but version 52 builds and the VM tests are
successful as well:

https://headcounter.org/hydra/eval/320335

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-05-15 05:17:51 +02:00
Rok Garbas d4fe0f522e firefox-bin: adding developer and beta channel 2016-05-15 03:00:44 +02:00
Arseniy Seroka ac54855b0b Merge pull request #15465 from seschwar/transmission-remote-cli
transmission_remote_cli: init at 1.7.1
2016-05-15 01:09:30 +03:00
Sebastian Schwarz d2ab0431df transmission_remote_cli: init at 1.7.1 2016-05-15 00:06:42 +02:00
Nikolay Amiantov e81c6c7768 firefox: upstream moved to ffmpeg from gstreamer
Sadly, they don't support using system library yet (or I was unattentive).
2016-05-15 01:06:39 +03:00
Arseniy Seroka 59dade074b Merge pull request #15463 from seschwar/mpop
mpop: init at 1.2.4
2016-05-15 01:00:26 +03:00
Sebastian Schwarz 97581e7458 mpop: init at 1.2.4 2016-05-14 22:27:07 +02:00
Scott R. Parish 5ebf20db0f
chromium: Update stable to 50.0.2661.102 for multiple security fixes
This addresses the following security fixes:

 * High   CVE-2016-1667: Same origin bypass in DOM. Credit to
                         Mariusz Mlynski.
 * High   CVE-2016-1668: Same origin bypass in Blink V8 bindings. Credit
                         to Mariusz Mlynski.
 * High   CVE-2016-1669: Buffer overflow in V8. Credit to Choongwoo Han.
 * Medium CVE-2016-1670: Race condition in loader. Credit to anonymous.
 * Medium CVE-2016-1671: Directory traversal using the file scheme on
                         Android. Credit to Jann Horn.

See: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html

Signed-off-by: Scott R. Parish <srparish@gmail.com>
Tested-by: aszlig <aszlig@redmoonstudios.org>
Closes: #15446
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-05-14 22:04:56 +02:00
Pascal Wittmann 34f4515051 filezilla: 3.17.0 -> 3.17.0.1 2016-05-14 19:48:30 +02:00
Joachim Fasting 2113b7389a
mldonkey: add libjpeg to build inputs
Possibly jpeg used to be propagated from gd but is no longer after
f8bdd7969d.
2016-05-14 07:43:05 +02:00
Vladimír Čunát 3e387c3e00 Merge branch 'staging'
Darwin isn't in a perfect state, in particular its bootstrap tools won't
build which will block nixpkgs channel. But on the whole it seems
acceptable.
2016-05-13 10:14:53 +02:00
Arseniy Seroka 21747ef768 Merge pull request #15407 from taku0/thunderbird-bin-45.1.0
thunderbird-bin: 45.0 -> 45.1.0
2016-05-13 01:27:13 +03:00
taku0 cade2f36e5 flashplayer: 11.2.202.616 -> 11.2.202.621 2016-05-12 21:58:26 +09:00
taku0 eb4e6b821b thunderbird-bin: 45.0 -> 45.1.0 2016-05-12 21:42:54 +09:00
Arseniy Seroka fd12b1149e Merge pull request #15398 from Shados/maintain-opensteamworks
Allow plugins to work for Finch (CLI Pidgin)
2016-05-12 15:00:37 +03:00
Joachim Fasting 639dcffa0b Merge pull request #15403 from Shados/maintain-teamspeak-server
teamspeak-server package & module maintenance
2016-05-12 13:01:38 +02:00
Domen Kožar 323cd39016 thunderbird: set requiredSystemFeatures to big-parallel 2016-05-12 10:11:03 +01:00
Alexei Robyn b874447eef teamspeak-server: 3.0.10.3 -> 3.0.12.4, also
tsdnsserver binary now in output
2016-05-12 15:46:45 +10:00
Vladimír Čunát 6c2fbfbd77 Merge branch 'master' into staging 2016-05-12 04:53:38 +02:00
Alexei Robyn 9d9a20e98b pidgin-opensteamworks: Change install location to work with Finch as well as Pidgin. 2016-05-12 10:22:52 +10:00
Alexei Robyn e634488cc3 pidgin-with-plugins: Add plugin support for Finch, the CLI version of Pidgin. 2016-05-12 10:22:52 +10:00
namore 13c2bd4d7c thunderbird: fix out-of-date hash (#15390) 2016-05-11 20:34:23 +01:00
Thomas Tuegel 6521529c23 quassel: fix SSL detection with Qt 5.6 2016-05-11 13:20:57 -05:00
Eelco Dolstra 86c45ba50d google-talk-plugin: 5.4.2.0 -> 5.41.0.0 2016-05-11 20:18:30 +02:00
Kranium Gikos Mendoza a36f721630 bluejeans: 2.125.24.5 -> 2.155.17.5 2016-05-11 21:47:12 +08:00
Joachim Fasting a0e8d542c7 Merge pull request #15377 from womfoo/sniproxy
sniproxy: init at 0.4.0 with dependency udns: init at 0.4
2016-05-11 15:14:33 +02:00