Commit Graph
115931 Commits
Author SHA1 Message Date
Franz PletzandGitHub 406c7a0731 Merge pull request #29521 from aneeshusa/ease-radicale-upgrade
Ease radicale upgrade
2017-09-18 23:13:53 +02:00
Franz PletzandGitHub 8a401881fe Merge pull request #29534 from etu/update-gocode
gocode: 20170530 -> 20170903
2017-09-18 23:10:51 +02:00
volthandFranz Pletz 9efe27ee3b haxe: 3.4.2 -> 3.4.3 2017-09-18 23:09:07 +02:00
Kranium Gikos MendozaandFranz Pletz caa79ba50c xmlsec: enable deprecated headers required by lasso 2017-09-18 23:07:43 +02:00
gwitmondandFranz Pletz bd52618c9d nixos: add option for bind to not resolve local queries (#29503)
When the user specifies the networking.nameservers setting in the
configuration file, it must take precedence over automatically
derived settings.

The culprit was services.bind that made the resolver set to
127.0.0.1 and ignore the nameserver setting.

This patch adds a flag to services.bind to override the nameserver
to localhost. It defaults to true. Setting this to false prevents the
service.bind and dnsmasq.resolveLocalQueries settings from
overriding the users' settings.

Also, when the user specifies a domain to search, it must be set in
the resolver configuration, even if the user does not specify any
nameservers.

(cherry picked from commit 670b4e29adc16e0a29aa5b4c126703dcca56aeb6)

This commit was accidentally merged to 17.09 but was intended for
master. This is the cherry-pick to master.
2017-09-18 22:54:29 +02:00
Franz Pletz 38c14d7132 newsbeuter: fix CVE-2017-14500 2017-09-18 22:45:30 +02:00
Franz Pletz 0653abc07a gd: 2.2.4 -> 2.2.5 for multiple CVEs
Fixes:
  * CVE-2017-6362
  * CVE-2017-7890
2017-09-18 22:45:30 +02:00
Daiderd Jordan 69bf06ad6c gperftools: fix darwin build 2017-09-18 22:20:57 +02:00
Daiderd Jordan 6b7e103870 nmap: patch vendored libz for darwin 2017-09-18 22:02:58 +02:00
Franz Pletz c7ed26b6a9 geolite-legacy: 2017-05-26 -> 2017-09-17 2017-09-18 21:55:41 +02:00
Franz Pletz ad13618c9b mirrorbits: init at 0.4 2017-09-18 21:55:41 +02:00
Franz Pletz 316858466a mercurial: 4.3.1 -> 4.3.2 2017-09-18 21:52:07 +02:00
Franz Pletz dc08dcf6e7 ssh service: add sftpFlags option 2017-09-18 21:52:07 +02:00
Franz Pletz a796d692c4 clawsMail: 3.15.0 -> 3.15.1 2017-09-18 21:52:07 +02:00
Franz Pletz 05b1e514bc matterircd: 0.11.4 -> 0.12.0
This version is compatible with our current Mattermost.
2017-09-18 21:52:06 +02:00
Franz Pletz 94bbe7db22 bluez4: remove, unused and probably vulnerable 2017-09-18 21:19:15 +02:00
Franz Pletz dadb16a57f bluez: 5.43 -> 5.47 for CVE-2017-1000250
Fixes #29289.
2017-09-18 21:19:15 +02:00
John EricsonandGitHub e1372646aa Merge pull request #29517 from obsidiansystems/cctools-cross
darwin stdenv: cctools override needs to go away when targetPlatform changes
2017-09-18 14:41:09 -04:00
John EricsonandJohn Ericson 77bd6313bb darwin stdenv: cctools override needs to go away when targetPlatform changes 2017-09-18 14:39:38 -04:00
WilliButzandRobin Gloster 9198ad65ef tests: add initrd-network-ssh test
starts two VMs:
- one with dropbear listening from initrd,
  waiting for a file
- another connecting via ssh, creating the file
2017-09-18 19:51:46 +02:00
Aneesh Agrawal 28c2cea847 radicale: Test migration functionality
This also provides an example of how to migrate.
2017-09-18 09:11:36 -07:00
Elis Hirwing 0eb1fdc50a gocode: 20170530 -> 20170903 2017-09-18 17:53:25 +02:00
Franz Pletz ede0ecdc69 potrace: 1.14 -> 1.15
Fixes CVE-2017-12067 and other security issues.

Fixes NixOS/security#107.
2017-09-18 17:24:09 +02:00
Franz Pletz 0e550fd51c cdo: 1.7.2 -> 1.9.0 2017-09-18 17:24:08 +02:00
WilliButzandFranz Pletz 0b2d9bbbd2 nixos/tests: add grafana test (#29531) 2017-09-18 16:59:50 +02:00
Franz PletzandGitHub 4850bc7080 Merge pull request #29530 from WilliButz/grafanaUpdate
grafana: 4.5.0 -> 4.5.1
2017-09-18 16:58:32 +02:00
Maximilian KönigandFranz Pletz 460cd80729 palemoon: 27.4.1 -> 27.4.2 2017-09-18 16:57:02 +02:00
WilliButz 8eb3e45f37 grafana: 4.5.0 -> 4.5.1 2017-09-18 16:28:26 +02:00
Franz Pletz c9d11b8a1d apacheHttpd: fix CVE-2017-9798 (Optionsbleed)
https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html
2017-09-18 16:04:03 +02:00
Samuel LeathersandFranz Pletz 2f9cb45bd4 mpi4py: disabling tests 2017-09-18 15:11:14 +02:00
Bastian KöcherandFranz Pletz 34b1e4c3db teamspeak_client: Adds missing dependency 2017-09-18 15:04:37 +02:00
Robert KlotznerandFranz Pletz a9f60224f8 coturn service: Fix coturn to properly come up (#29415)
properly also in case dhcpcd being used.

Without network-online.target, coturn will fail to listen on addresses that
come up with dhcpcd.
2017-09-18 14:54:32 +02:00
Franz Pletz b179908414 nixos/networking: network is online if default gw set
Previously services depending on network-online.target would wait until
dhcpcd times out if it was enabled and a static network address
configuration was used. Setting the default gateway statically is enough
for the networking to be considered online.

This also adjusts the relevant networking tests to wait for
network-online.target instead of just network.target.
2017-09-18 14:51:38 +02:00
Jörg ThalheimandGitHub a40533f70a Merge pull request #29516 from adisbladis/redis401
redis: 3.2.9 -> 4.0.1
2017-09-18 13:24:20 +01:00
Franz PletzandGitHub decaa2e7bf Merge pull request #29133 from elitak/ipfs
ipfs: workaround for upstream bug; other small fixes
2017-09-18 13:26:39 +02:00
Florian JacobandFranz Pletz 839e3c7666 nixos/mysql: declarative users & databases
using Unix socket authentication, ensured on every rebuild.
2017-09-18 13:10:26 +02:00
Peter Hoeg 971eb19dbc ifstat-legacy: init at 1.1 2017-09-18 18:25:54 +08:00
Russell O'ConnorandFranz Pletz 08824d7ae0 bitcoin: 0.14.0 -> 0.15.0 2017-09-18 12:02:38 +02:00
Samuel LeathersandFranz Pletz 3a33ed7c46 trollius: fix tests 2017-09-18 12:00:46 +02:00
Samuel LeathersandFranz Pletz 28a9f74769 discogs_client: 2.0.2 -> 2.2.0 2017-09-18 11:59:21 +02:00
Kranium GikosandFranz Pletz 662b409b72 influxdb service: fixup postStart script to handle TLS 2017-09-18 11:56:30 +02:00
Justin HummandFranz Pletz b5a5d0ba84 gollum service: init 2017-09-18 11:55:00 +02:00
Aneesh Agrawal 61de150aa8 radicale: 2.1.2 -> 2.1.6
Radicale 2.1.5 is the first to support the `--verify-storage` option.
2017-09-18 00:29:01 -07:00
Aneesh Agrawal fcd590d116 radicale: Add extraArgs option to assist in data migration 2017-09-18 00:29:01 -07:00
Maximilian GüntnerandEric Litak 44475cae27 tests: ipfs: enable autoMount tests 2017-09-18 00:05:35 -07:00
Eric Litak 1a15c5d8c6 ipfs: autoMount working without root 2017-09-17 23:57:25 -07:00
Eric Litak 6324317c76 ipfs: workaround for upstream bug; doc fixes 2017-09-17 23:57:25 -07:00
Samuel LeathersandFranz Pletz 700b0945b1 marionette-harness: disable for python 3 2017-09-18 07:35:18 +02:00
Samuel LeathersandFranz Pletz cbea57b9c7 marionette-driver: disable for python 3 2017-09-18 07:35:18 +02:00
Samuel LeathersandFranz Pletz d355b55e82 interruptingcow: 0.6 -> 0.7 2017-09-18 07:32:57 +02:00