Commit Graph
120818 Commits
Author SHA1 Message Date
Anthony CowleyandDomen Kožar 0744e0d829 ffmpeg-full: fix on darwin 2017-10-31 09:01:02 +01:00
Graham ChristensenandGitHub 2fa483eecf Merge pull request #31026 from andir/quagga-cve-16227
quagga: 1.2.1 -> 1.2.2 (CVE-2017-16227)
2017-10-31 03:49:44 -04:00
Domen Kožar ea6a4068cf darwin: build apple stuff in parallel 2017-10-31 07:47:58 +00:00
Andreas Rammhold d061c5c4ff quagga: 1.2.1 -> 1.2.2
fixes CVE-2017-16227 & several other issues see [1] for details

[1] https://download-mirror.savannah.gnu.org/releases/quagga/quagga-1.2.2.changelog.txt
2017-10-31 08:18:39 +01:00
Peter HoegandGitHub f8cbc642cd Merge pull request #30568 from kquick/theft
theft: init at 0.4.3
2017-10-31 15:15:17 +08:00
Yegor Timoshenko bd4c66886a xfce4-panel: patch gettext in xfce4-popup-* scripts, fixes #30033 2017-10-31 05:51:14 +00:00
Yegor Timoshenko c55a0cdeb3 xfce4-settings: build w/ xorg-libinput, make some dependencies optional
Closes #30148.
2017-10-31 05:17:59 +00:00
Orivej DeshandGitHub 324cf242a2 Merge pull request #31018 from paperdigits/hugin-2017.0.0
hugin: 2016.2.0 -> 2017.0.0
2017-10-31 03:35:13 +00:00
Mica Semrick 37f548e836 hugin: 2016.2.0 -> 2017.0.0 2017-10-30 20:13:27 -07:00
geistesk 1b918d1ad2 racket: 6.10.1 -> 6.11 2017-10-31 02:09:33 +01:00
Vincent Laporte 33c0dcacd0 ocamlPackages.alcotest: 0.7.2 -> 0.8.1 2017-10-31 01:06:17 +00:00
Vincent Laporte 54d1e1412b ocamlPackages.lablgtk: 2.18.5 -> 2.18.6 2017-10-31 01:02:59 +00:00
Vladimír Čunát 25515ce928 libav_11: security 11.10 -> 11.11
Fixes CVE-2017-7862.
2017-10-31 00:12:38 +01:00
Aaron Bull Schaefer 16e9541169 ansible: 2.4.0.0 -> 2.4.1.0 2017-10-30 16:09:40 -07:00
Michiel Leenaars d424bfe236 beamPackages.hex: 0.14.0 => 0.17.1 2017-10-30 23:21:22 +01:00
Vladimír Čunát 2d403e668c Merge #30851: util-linux: 2.30.2 -> 2.31
Includes a fix for CVE-2016-2779.
2017-10-30 23:01:19 +01:00
Yegor Timoshenko f2621d4ba8 nixos-generate-config: enforce umask 0022, fixes #30954 2017-10-30 21:59:37 +00:00
Vladimír Čunát ba7f3c9daf Merge #30990: libarchive: apply security patches
... for CVE-2017-14166 and CVE-2017-14502
2017-10-30 22:56:54 +01:00
Vladimír Čunát 949db2587a Merge #30927: sqlite: 3.20.1 -> 3.21.0
Includes a fix for CVE-2017-15286.
2017-10-30 22:54:25 +01:00
Joerg Thalheim cdf059f797 fetchbzr: do not write logs to non-existing home 2017-10-30 21:51:22 +00:00
Vladimír Čunát 41267f612f mesa: maintenance 17.2.2 -> 17.2.4 2017-10-30 22:35:54 +01:00
Vladimír Čunát 53c6b01a81 Merge #30979: gnumake: fix occasional hangs 2017-10-30 22:31:03 +01:00
Vladimír Čunát 9319019c17 Merge #30965: perl: security 5.24.2 -> 5.24.3 2017-10-30 22:30:47 +01:00
Vladimír Čunát 62ef08bc38 Merge #30963: pcre: security 8.40 -> 8.41 2017-10-30 22:30:27 +01:00
Vladimír Čunát 687943763c Merge branch 'master' into staging 2017-10-30 22:30:14 +01:00
Jörg ThalheimandGitHub e2edccae47 Merge pull request #31005 from sengaya/update-pwgen-2.08
pwgen: 2.07 -> 2.08
2017-10-30 21:25:29 +00:00
Jörg ThalheimandGitHub 7d04f9f8fd Merge pull request #31002 from yegortimoshenko/bchunk/CVE-2017-15953
bchunk: fix recent CVEs, simplify installPhase
2017-10-30 21:20:55 +00:00
Thilo Uttendorfer 61aeeb50ab pwgen: 2.07 -> 2.08 2017-10-30 22:19:11 +01:00
Jörg ThalheimandGitHub 9d74a615ce Merge pull request #31003 from Lassulus/gdm-fixx
gdm: don't start getty@tty1 if enabled
2017-10-30 21:06:32 +00:00
lassulus 440178d729 gdm: don't start getty@tty1 if enabled 2017-10-30 21:43:10 +01:00
Yegor Timoshenko 94b7368eef bchunk: fix recent CVEs, simplify installPhase
For details, see:

https://bugs.gentoo.org/635898

https://nvd.nist.gov/vuln/detail/CVE-2017-15953
https://nvd.nist.gov/vuln/detail/CVE-2017-15954
https://nvd.nist.gov/vuln/detail/CVE-2017-15955

https://github.com/extramaster/bchunk/issues/2
https://github.com/extramaster/bchunk/issues/3
https://github.com/extramaster/bchunk/issues/4
2017-10-30 20:20:01 +00:00
Bas van DijkandDomen Kožar 07e0c0e0a2 network-interfaces-scripted: fix NixOS/nixops#640
Reverse the PartOf dependency between network-setup and network-addresses-*

This was joint work of: @nh2, @domenkozar, @fpletz, @aszlig and @basvandijk
at the NixCon 2017 hackathon.
2017-10-30 20:45:32 +01:00
Frederik RietdijkandGitHub cd976095fe Merge pull request #30986 from nixos-docs/remove-fetchgitrevision
fetchgitrevision: removed
2017-10-30 20:05:43 +01:00
Orivej DeshandGitHub 3aa993bbad Merge pull request #30992 from wizeman/u/fix-python-netaddr
pythonPackages.netaddr: fix patch hash
2017-10-30 18:39:51 +00:00
Samuel LeathersandGitHub 1e2ba03519 Merge pull request #30989 from chris-martin/pr/acme-doc
nixos/acme: remove doc note about restarting nginx
2017-10-30 19:39:26 +01:00
Ricardo M. Correia 517a0723e4 pythonPackages.netaddr: fix patch hash 2017-10-30 19:18:59 +01:00
adisbladis d76572fa89 libarchive: Fixes for CVE-2017-14166 and CVE-2017-14502 2017-10-31 02:17:02 +08:00
Ricardo M. Correia 7bd64e3dee cjdns: fix hash
.. and switch to fetchFromGitHub to avoid future hash changes.
2017-10-30 19:05:18 +01:00
Nicolas B. Pierron 1d56d0c8a7 types.submodule: Fix the NixOS Manual, by escaping the <> symbols. 2017-10-30 17:52:00 +00:00
Chris Martin 0581038e8e nixos/acme: remove doc note about restarting nginx
Discussion from #30945 indicates that it is no longer true that you have
to restart nginx.
2017-10-30 13:51:35 -04:00
Ricardo M. Correia f7616c4f5e openntpd: fix constraints feature on NixOS
The OpenNTPD constraints feature requires a valid chain of SSL
certificates, but the default path in openntpd didn't match the one in
NixOS.

Unfortunately the configured certificate path becomes hardcoded into the
binary, so this feature will likely still fail on other
distributions/operating systems, unless the path coincides with the
NixOS path or the user sets up a symlink.
2017-10-30 18:42:02 +01:00
Falco Peijnenburg 3004b6f150 fetchgitrevision: removed
It doesn't work and was last referred to in 5553546c21
2017-10-30 18:37:20 +01:00
Tim Steinbach 25c8014a4b gradle: 4.2.1 -> 4.3 2017-10-30 13:35:12 -04:00
Daiderd JordanandDomen Kožar b93df24078 pari: enable darwin build 2017-10-30 18:24:22 +01:00
Rodney LorrimarandDomen Kožar 9ec640ec70 bower2nix: fix execution under nix-shell --pure
bower2nix needs nix to compute store hashes.

Fixes rvl/bower2nix#16
2017-10-30 18:23:45 +01:00
Rodney LorrimarandDomen Kožar 9b0d50e3d0 fetchbower: clean common uri characters from version string
Some bower.json files have URL dependencies missing a version.

Fixes rvl/bower2nix#18
2017-10-30 18:23:45 +01:00
Tim Steinbach 5d41dda02d cyrus_sasl: Fix CVE-2013-4122 2017-10-30 13:18:52 -04:00
Ricardo M. Correia bfbe560411 ibus: fix emoji hashes 2017-10-30 17:57:37 +01:00
Franz Pletz 0a5ecde808 linux: 4.4.80 -> 4.4.95 2017-10-30 17:57:00 +01:00
Franz Pletz 36be7d3e85 Revert parts of "linux: remove unused kernel patches"
This reverts commit 05b8cae9ec that
removed the cgroup v2 patch for the 4.4 kernel.
2017-10-30 17:57:00 +01:00