Commit Graph
222959 Commits
Author SHA1 Message Date
Benjamin HippleandGitHub e005a48799 Merge pull request #86014 from marsam/update-awsweeper
awsweeper: 0.6.0 -> 0.7.0
2020-04-25 19:57:46 -04:00
Michael WeissandGitHub 4f17832abf msmtp: 1.8.8 -> 1.8.10 (#86027)
This update contains the full fix for the unfortunate and very annoying
msmtpq regression [0]. #YAY
This successfully reduces the amount of spam my setup generates :)
(Note: SCNR)

Relevant patches:
- https://github.com/marlam/msmtp-mirror/commit/c78f24347ec996c7a3830b48403bf3736afca071
- https://github.com/marlam/msmtp-mirror/commit/dfb39595a5cdf048db4dfc438333a2b8948c5296

[0]: https://marlam.de/msmtp/news/
2020-04-26 01:08:31 +02:00
Graham ChristensenandGitHub a2e9965d74 Merge pull request #82414 from AmineChikhaoui/update-ec2-amis-19-09
ec2 amis: update 19.09 AMIs
2020-04-25 18:15:41 -04:00
Florian KlinkandGitHub 02b57e72bb Merge pull request #86010 from flokli/nscd-disable
nixos/nscd: be more specific in the nscd.enable description on what breaks
2020-04-26 00:05:25 +02:00
Daniel FullmerandGitHub d13a19cfba snes9x-gtk: 1.57 -> 1.60 (#85910) 2020-04-25 16:10:38 -04:00
Michael Weiss c5e8985fd7 androidStudioPackages.beta: 4.0.0.13 -> 4.0.0.14 2020-04-25 21:38:54 +02:00
Michael Weiss 170c2b1954 androidStudioPackages.{dev,canary}: 4.1.0.6 -> 4.1.0.7 2020-04-25 21:38:53 +02:00
Benjamin HippleandGitHub ef4a5456a4 Merge pull request #85981 from renatoGarcia/asttokens
asttokens: 1.1.13 -> 2.0.4
2020-04-25 15:35:08 -04:00
Benjamin HippleandGitHub d761d9ce47 Merge pull request #85988 from bbigras/httplz
httplz: 1.8.0 -> 1.9.2
2020-04-25 15:34:52 -04:00
Benjamin HippleandGitHub 2dd156b75a Merge pull request #86018 from marsam/update-tflint
tflint: 0.15.4 -> 0.15.5
2020-04-25 15:28:26 -04:00
Benjamin HippleandGitHub 86283d9da7 Merge pull request #85977 from bhipple/cleanup/aspell
aspell, tla: use pname
2020-04-25 15:24:56 -04:00
Mario Rodas 2933063455 tflint: 0.15.4 -> 0.15.5 2020-04-25 12:52:00 -05:00
Peter Simons 6a627c416f haskell-policeman: jailbreak to fix the build with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons 4bff4d692d haskell-xmobar: jailbreak to fix the build with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons ea37fe1f1c haskell-singletons: use latest versions when building with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons d3ae5625ff haskell-dbus: apply patch to fix the build
Taken from https://github.com/rblaze/haskell-dbus/pull/48.
2020-04-25 19:45:08 +02:00
Peter Simons d28e92d5aa haskell-weeder: jailbreak to fix the build with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons 53865f5f71 haskell-hlint: fix build with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons ceab66bf6e haskell-lens: use latest version when building with ghc-8.10.1 2020-04-25 19:45:08 +02:00
Peter Simons daf3b0868a configuration-ghc-8.10.x.nix: cosmetic 2020-04-25 19:45:08 +02:00
chknoandGitHub 3f472552c4 gnucash: 3.9 -> 3.10 (#85978) 2020-04-25 12:54:07 -04:00
Jörg ThalheimandGitHub 083ea0abbe Merge pull request #85220 from Mic92/home-assistant 2020-04-25 17:45:38 +01:00
Peter Simons 21a354b6dd haskell-cabal-install-parsers: re-factor overrides to fix build with ghc-8.10.1 2020-04-25 18:22:55 +02:00
Peter Simons 7b7764287c haskell-cabal-plan: apply patch to fix the build with ghc-8.10.1 2020-04-25 18:16:57 +02:00
Florian Klink 2ececf1ed9 nixos/nscd: be more specific in the nscd.enable description on what breaks 2020-04-25 18:11:10 +02:00
Peter Simons 6a6d0174ed haskell-pandoc: jailbreak out of haddock-library 1.8.x constraint 2020-04-25 18:06:43 +02:00
Peter Simons 125ada17b0 haskell-dhall: use the latest version when building with ghc-8.10.x 2020-04-25 18:06:42 +02:00
Peter Simons b24d2a90dd configuration-ghc-8.10.x.nix: cosmetic 2020-04-25 18:06:42 +02:00
Peter Simons f2aa6b44d4 haskell-system-fileio: jailbreak out of dependency on chell 0.4.x 2020-04-25 18:06:42 +02:00
Peter Simons c970de4586 haskell-dhall: disable the test suite
Dhall 1.31.x still attempts to access the network during its
test suite run, i.e. it attempts to connect to github.com.
2020-04-25 18:06:42 +02:00
worldofpeaceandGitHub 9d0b4c05ed Merge pull request #85837 from romildo/upd.xfce4-whiskermenu-plugin
xfce.xfce4-whiskermenu-plugin: 2.4.3 -> 2.4.4
2020-04-25 11:58:25 -04:00
worldofpeaceandGitHub 882d124b60 Merge pull request #85940 from ceedubs/unison-M1j
unison-ucm: 1.0.M1h-alpha -> 1.0.M1j-alpha
2020-04-25 11:53:15 -04:00
worldofpeaceandGitHub bef95ff573 Merge pull request #85948 from mkg20001/pkg/tartube
tartube: init at 2.0.016
2020-04-25 11:52:29 -04:00
Maximilian Bosch f5f85d16d1 epson-escpr2: 1.1.1 -> 1.1.11 2020-04-25 17:49:11 +02:00
worldofpeaceandGitHub 82853324a9 Merge pull request #85967 from worldofpeace/mutter334-update
gnome3.mutter334: 3.34.4 -> 3.34.5, backports
2020-04-25 11:46:23 -04:00
worldofpeaceandGitHub 8f25c2f4ef Merge pull request #85999 from mweinelt/hostapd/cve-2019-16275
hostapd: apply patch for CVE-2019-16275
2020-04-25 11:43:54 -04:00
Robert ScottandAustin Seipp 1985c6b9d5 afl: fix afl-clang-fast++ by making it a copy of afl-clang-fast, not a symlink
a symlink gets skipped by wrapProgram and this ends up confusing the nix
cc wrapper's cpp mode detection
2020-04-25 10:04:06 -05:00
adisbladisandGitHub 1ca6909514 Merge pull request #74378 from ttuegel/lxc-container
docker-container: Remove /etc symlink
2020-04-25 16:25:15 +02:00
Jacek GalowiczandGitHub 002b553b14 Merge pull request #85781 from blitz/spike-test
Add spike integration test to nixosTests
2020-04-25 15:50:38 +02:00
Cody Allen 982c6fc68f unison-ucm: 1.0.M1h-alpha -> 1.0.M1j-alpha
Replaces #84235
2020-04-25 06:33:06 -07:00
Jan Tojnar 4239bf17ec gnome3.updateScript: optimize unfrozen updates
When the updates are not frozen, there is no need to try to extract versions from attributes.
2020-04-25 15:32:20 +02:00
Jan Tojnar f544c293ec gnome3.updateScript: fix tarball eval on nonexisting attrpaths
As reported in https://github.com/NixOS/nixpkgs/commit/974f11cb2972f470ab4b7a71fdf8f09dfdff562b#commitcomment-38735081,
the tarball will fail to evaluate when updateScript is given a non-existing attrPath because getAttrFromPath
uses abort, which terminates the evaluation.
2020-04-25 15:26:09 +02:00
Renato GarciaandGitHub 22133c6bf3 snakemake: 5.13.0 -> 5.15.0 (#85913) 2020-04-25 09:19:54 -04:00
Jan Tojnar 03c0ab3857 goocanvasmm2: fix update script attrPath 2020-04-25 15:18:44 +02:00
Jan TojnarandGitHub 2dee6ad280 Merge pull request #85985 from Emantor/fix/pipewire 2020-04-25 15:14:03 +02:00
sternenseemannandVincent Laporte 0c4386bf0a ocamlPackages.dns(-client): 4.4.1 -> 4.5.0
jackline: 2020-03-22 -> 2020-04-24

Dependency mtime is no longer needed
2020-04-25 14:51:05 +02:00
sternenseemannandVincent Laporte b5f9eb06b5 ocamlPackages.mirage-time(-unix): init at 2.0.1 2020-04-25 14:50:57 +02:00
Martin Weinelt 3e9f3a3ebd hostapd: apply patch for CVE-2019-16275
AP mode PMF disconnection protection bypass

Published: September 11, 2019
Identifiers:
- CVE-2019-16275
Latest version available from: https://w1.fi/security/2019-7/

Vulnerability

hostapd (and wpa_supplicant when controlling AP mode) did not perform
sufficient source address validation for some received Management frames
and this could result in ending up sending a frame that caused
associated stations to incorrectly believe they were disconnected from
the network even if management frame protection (also known as PMF) was
negotiated for the association. This could be considered to be a denial
of service vulnerability since PMF is supposed to protect from this type
of issues. It should be noted that if PMF is not enabled, there would be
no protocol level protection against this type of denial service
attacks.

An attacker in radio range of the access point could inject a specially
constructed unauthenticated IEEE 802.11 frame to the access point to
cause associated stations to be disconnected and require a reconnection
to the network.

Vulnerable versions/configurations

All hostapd and wpa_supplicants versions with PMF support
(CONFIG_IEEE80211W=y) and a runtime configuration enabled AP mode with
PMF being enabled (optional or required). In addition, this would be
applicable only when using user space based MLME/SME in AP mode, i.e.,
when hostapd (or wpa_supplicant when controlling AP mode) would process
authentication and association management frames. This condition would
be applicable mainly with drivers that use mac80211.

Possible mitigation steps

- Merge the following commit to wpa_supplicant/hostapd and rebuild:

  AP: Silently ignore management frame from unexpected source address

  This patch is available from https://w1.fi/security/2019-7/

- Update to wpa_supplicant/hostapd v2.10 or newer, once available
2020-04-25 14:35:20 +02:00
markuskowaandGitHub bc675971da Merge pull request #85279 from r-ryantm/auto-update/pwsafe
pwsafe: 1.09.0 -> 3.52.0
2020-04-25 14:26:11 +02:00
Maximilian Bosch 61c95a2eec iwd: 1.6 -> 1.7 2020-04-25 12:13:01 +02:00