Commit Graph

2542 Commits

Author SHA1 Message Date
Patrick Mahoney
e0c225857f update skarnet.org packages
skalibs:           2.4.7.0 -> 2.3.9.0
execline:          2.1.4.0 -> 2.1.4.5
s6:                2.2.1.0 -> 2.2.4.3
s6-rc:             0.0.1.0 -> 0.0.2.1
s6-portable-utils: 2.0.5.2 -> 2.0.5.3
s6-linux-utils:    2.0.2.0 -> 2.0.2.3
s6-dns:            2.0.0.4 -> 2.0.0.7
s6-networking:     2.1.0.1 -> 2.1.0.4
2016-04-01 10:38:58 -05:00
Eelco Dolstra
3fb1708427 ssh: Fix support for ssh-dss host keys 2016-04-01 15:54:52 +02:00
Vladimír Čunát
ab15a62c68 Merge branch 'master' into closure-size
Beware that stdenv doesn't build. It seems something more will be needed
than just resolution of merge conflicts.
2016-04-01 10:06:01 +02:00
Edward Tjörnhammar
29f5b917ea
i2pd: 2.5.1 -> 2.6.0 2016-03-31 22:07:35 +02:00
Franz Pletz
2e08d8234e Merge remote-tracking branch 'origin/master' 2016-03-31 10:06:30 +02:00
Franz Pletz
6dc2337b94 Merge pull request #14313 from mayflower/pkg/dhcpcd/6.10.1
dhcpcd: 6.9.4 -> 6.10.1 (security)
2016-03-30 13:06:12 +02:00
Robin Gloster
a4e65c3639 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-30 09:01:20 +00:00
Franz Pletz
e498a645c1 ncat: Remove old package, available in nmap 2016-03-30 08:53:22 +02:00
Franz Pletz
5aa986fba2 dhcpcd: 6.9.4 -> 6.10.1 (security)
Fixes CVE-2016-1503 & CVE-2016-1504.

Changelog:
  - http://roy.marples.name/archives/dhcpcd-discuss/2016/1143.html
  - http://roy.marples.name/archives/dhcpcd-discuss/2016/1146.html
2016-03-30 06:57:59 +02:00
Robin Gloster
0fc7905db3 dhcpcd: do not enable pie hardening 2016-03-29 00:26:35 +00:00
Joachim Fasting
8bd72dfaa4 lsh: fix gcc5 build
The build fails with c11 (also tested c99), but works with gnu90.
2016-03-28 19:01:58 +02:00
joachifm
a66a64cedc Merge pull request #14182 from NeQuissimus/pppscripts
ppp: Include convenience scripts
2016-03-28 15:19:44 +00:00
Robin Gloster
f60c9df0ba Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-28 15:16:29 +00:00
Eelco Dolstra
38afa836b3 openvpn: 2.3.8 -> 2.3.10
In particular, this fixes the systemd-ask-password regression
re-introduced by cb1c818491.
2016-03-27 23:29:53 +02:00
Domen Kožar
b07e7bfc7b Merge remote-tracking branch 'origin/staging' 2016-03-27 13:19:04 +01:00
Peter Hoeg
8857774f91 network-manager: use ping/ping6 from the nix store
NM upstream has a hardcoded path to /usr/bin/ping.

This patch changes:

 - ping/ping6 are now from the nix store
 - we no longer try to make substitutions on a missing file
 - we use file from the nix store
2016-03-27 15:15:16 +08:00
Joachim Fasting
1f78d14028 curl3: mark as broken
This is an ancient version of curl, that currently has 19 known vulnerabilities.
It is used by and was added to support only one package.
2016-03-26 13:18:48 +01:00
Pascal Wittmann
0d84a3fde2 eggdrop: fix build with gcc5 2016-03-25 19:57:07 +01:00
Marius Bakke
8afda7e421 s3cmd: 1.5.2 -> 1.6.1 2016-03-25 05:19:35 +00:00
Tobias Geerinckx-Rice
bcb030a5a4 minissdpd: 1.5.20160301 -> 1.5.20160301 2016-03-24 21:33:18 +01:00
Tim Steinbach
a4d741ef9d ppp: Include convenience scripts 2016-03-24 19:26:00 +00:00
Tobias Geerinckx-Rice
6db204b7d9 netsniff-ng: 0.6.0 -> 0.6.1 2016-03-24 20:23:59 +01:00
Joachim Fasting
db6ae35bd9 cadaver: fix build against newer versions of openssl
Apply patch from Arch Linux.

See https://hydra.nixos.org/build/33258957/nixlog/1/raw
2016-03-24 19:05:14 +01:00
Nikolay Amiantov
0c6db0ca48 cc-wrapper: add option to skip flags for native optimizations 2016-03-24 20:16:17 +03:00
Joachim Fasting
63b6498aa0 dnscrypt-proxy: disable darwin build
The darwin build has been broken for a long time and I'm unable to
properly debug the issue.

What appears to be happening is that the symbol `HAVE_SANDBOX_INIT` ends
up being defined as 1 while `HAVE_SANDBOX_H` ends up being 0, resulting in
undefined reference errors when `sandbox_init()` is called (because
`<sandbox.h>` is not included first).
This is a regression from dnscrypt-proxy 1.6.0 to 1.6.1.

For context, sandbox.h is a deprecated OSX mechanism for sandboxing.

The build failure is at
https://hydra.nixos.org/build/32705849/nixlog/1/raw

This patch closes NixOS/nixpkgs#14064
2016-03-24 17:14:22 +01:00
joachifm
96af7c6dcb Merge pull request #14171 from NeQuissimus/pptp180
pptp: 1.7.2 -> 1.8.0
2016-03-24 12:58:54 +00:00
Pascal Wittmann
fcc0bf2d05 axel: 2.5 -> 2.6 2016-03-24 00:07:40 +01:00
Tim Steinbach
3fc2f99907 pptp: 1.7.2 -> 1.8.0 2016-03-23 23:01:39 +00:00
Pascal Wittmann
2bb151f91b atftp: fix build by using gcc49
See #13559
2016-03-22 16:42:07 +01:00
Franz Pletz
bf9f211ae3 whois: 5.2.10 -> 5.2.11 2016-03-22 00:52:40 +01:00
Franz Pletz
fbdcbaf25c horst: 2015-07-22 -> 2016-03-15 2016-03-21 22:07:25 +01:00
Pascal Wittmann
806f71370c amuleGui: fix build
See #13559
2016-03-21 21:29:39 +01:00
Tobias Geerinckx-Rice
a685456213 dropbear: 2016.72 -> 2016.73
Changes: https://matt.ucc.asn.au/dropbear/CHANGES.
2016-03-20 23:20:56 +01:00
Teo Klestrup Röijezon
ab29cfefab haproxy: 1.5.14 -> 1.6.4 2016-03-17 16:04:03 +01:00
Sheena Artrip
0cae22a370 meta: Add sheenobu as maintainer for relevant packages.
freeradius: add sheenobu as maintainer

sipsak: add sheenobu as maintainer
2016-03-15 21:45:49 -04:00
Robin Gloster
3f45f0948d Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-15 01:44:24 +00:00
Edward Tjörnhammar
e433a3015a i2pd: 2.4.0 -> 2.5.1 2016-03-13 21:36:29 +01:00
zimbatm
099d7dc1b8 Merge pull request #13878 from DamienCassou/offlineimap-6.7.0
offlineimap: 6.6.1 -> 6.7.0
2016-03-13 18:29:04 +00:00
Damien Cassou
8c660e0301 offlineimap: 6.6.1 -> 6.7.0 2016-03-13 08:44:53 +01:00
Joachim Fasting
6da91e9e4a dnscrypt-wrapper: refactorings
- use fetchFromGitHub
- move build deps to nativeBuildInputs
- use https for meta.homepage
2016-03-12 19:06:57 +01:00
Joachim Fasting
b3592d0b20 dnscrypt-proxy: refactorings
- move build deps to nativeBuildInputs
- use https urls
2016-03-12 18:53:28 +01:00
José Romildo Malaquias
607ea3ef76 uget: init at 2.0.5 2016-03-12 10:05:49 -03:00
Thomas Tuegel
1fae9a36aa ppp: fix evaluation error on Darwin 2016-03-11 09:12:39 -06:00
Eelco Dolstra
b7fe9712dd Merge pull request #13824 from aneeshusa/update-openssh-to-7.2p2
openssh: 7.2p1 -> 7.2p2 for OSA x11fwd.adv
2016-03-11 10:52:14 +01:00
Tobias Geerinckx-Rice
e834a7c05b dropbear: 2015.71 -> 2016.72
Bugfix release:
- Validate X11 forwarding input. Could allow bypass of
  authorized_keys command= restrictions.
2016-03-11 03:08:02 +01:00
Aneesh Agrawal
2dd09b634e openssh: update homepage link
Unfortunately, the site is not available over HTTPS.
2016-03-10 18:40:00 -05:00
Aneesh Agrawal
e5ca25eb7a openssh: 7.2p1 -> 7.2p2 for OSA x11fwd.adv
Fixes OpenSSH Security Advisory x11fwd.adv, which is available at
http://www.openssh.com/txt/x11fwd.adv.
2016-03-10 18:01:33 -05:00
Domen Kožar
83766949c1 speedtest-cli: 0.3.1 -> 0.3.4 (fix runtime) 2016-03-10 20:42:37 +00:00
Aneesh Agrawal
ce74aac132 openssh: update GSSAPI patch to openssh 7.2 2016-03-08 16:11:56 -05:00
Aneesh Agrawal
9e86984fe0 openssh: decouple gssapi patch from kerberos
The GSSAPI patch is useful but maintained by Debian, not upstream, and
can be slow to update. To avoid breaking openssh_with_kerberos when
the openssh version is bumped but the GSSAPI patch has not been updated,
don't enable the GSSAPI patch implicitly but require it to be explicitly
enabled.
2016-03-08 15:14:25 -05:00
Vladimír Čunát
09af15654f Merge master into closure-size
The kde-5 stuff still didn't merge well.
I hand-fixed what I saw, but there may be more problems.
2016-03-08 09:58:19 +01:00
Franz Pletz
ac73835b54 quicktun: Remove custom hardening, now enabled by default 2016-03-08 00:39:39 +01:00
Franz Pletz
e9fc4e7db6 Merge remote-tracking branch 'origin/master' into hardened-stdenv 2016-03-07 22:08:27 +01:00
joachifm
453686a24a Merge pull request #13705 from aneeshusa/use-bin-instead-of-sbin-for-openssh
openssh: use bin instead of sbin folder
2016-03-07 12:03:37 +00:00
joachifm
884627a6ef Merge pull request #13720 from aneeshusa/allow-compiling-openssh-without-linking-openssl
openssh: allow building without linking openssl
2016-03-07 11:55:36 +00:00
Aneesh Agrawal
14201da332 openssh: allow building without linking openssl
http://undeadly.org/cgi?action=article&sid=20140430045723 has the
original announcement of this option. Note, openssl headers are still
required at build time, see this comment:
http://www.gossamer-threads.com/lists/openssh/dev/61125#61125
2016-03-06 16:36:55 -05:00
Marius Bakke
7135553cf1 unbound: drop sbin directory 2016-03-06 12:50:41 +00:00
Marius Bakke
14e6b7aeb9 unbound: 1.5.7 -> 1.5.8 2016-03-06 12:11:40 +00:00
Vladimír Čunát
a458a9f78f curl: use an official download link
It works now that we have e6f61b4cf3.
2016-03-06 11:12:23 +01:00
Aneesh Agrawal
bb39304ce6 openssh: use bin instead of sbin folder
References #11939.
2016-03-05 23:56:32 -05:00
Franz Pletz
1fb09c1e7d dhcpcd: enable PIE hardening 2016-03-06 00:15:49 +01:00
Franz Pletz
aff1f4ab94 Use general hardening flag toggle lists
The following parameters are now available:

  * hardeningDisable
    To disable specific hardening flags
  * hardeningEnable
    To enable specific hardening flags

Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.

cc-wrapper supports the following flags:

  * fortify
  * stackprotector
  * pie (disabled by default)
  * pic
  * strictoverflow
  * format
  * relro
  * bindnow
2016-03-05 18:55:26 +01:00
Robin Gloster
fed49425c5 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-03 16:11:55 +00:00
joachifm
1b1379a68d Merge pull request #13531 from magnetophon/connman-dmenu-master
connman-dmenu: init at git-29-9-2015
2016-03-03 13:07:44 +00:00
Nikolay Amiantov
f442830c55 libreswan: specify that we don't support parallel building 2016-03-02 18:56:32 +03:00
Nikolay Amiantov
23dd97ee88 Merge commit 'refs/pull/13412/head' of git://github.com/NixOS/nixpkgs 2016-03-02 18:56:24 +03:00
Marius Bakke
c5f177cb5d dnscrypt-proxy: 1.6.0 -> 1.6.1 2016-03-02 15:12:06 +00:00
Alex Franchuk
69d8cb4a6b libreswan: add package and service to nixos 2016-03-02 09:44:30 -05:00
Robin Gloster
33f7d0b3f6 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-01 22:46:39 +00:00
Eelco Dolstra
cc71804ab0 openssh: Fix build 2016-03-01 22:25:17 +01:00
Aneesh Agrawal
7f8d50b443 openssh: 7.1p2 -> 7.2p1 2016-03-01 22:25:16 +01:00
Robin Gloster
3b4765c9e5 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-28 16:32:57 +00:00
zimbatm
69ce5cb656 use the sourceforge mirrors everywhere
find pkgs -name "*.nix" -exec sed -r \
    "s|https?://downloads.sourceforge.net/|mirror://sourceforge/|g" -i {} \;
2016-02-28 12:07:42 +00:00
Franz Pletz
b871649530 quicktun: init at 2.2.4 2016-02-28 12:23:12 +01:00
Domen Kožar
67b9053d29 Merge pull request #13530 from danielfullmer/zerotier-fix
zerotierone: hardcoded path fix
2016-02-28 10:20:04 +00:00
Bart Brouns
8fa1fb4920 connman-dmenu: init at git-29-9-2015
fix indentation
2016-02-28 05:18:35 +01:00
Daniel Fullmer
110dfca988 zerotierone: hardcoded path fix
New code in zerotier broke the previous substitution where we refer to
the correct path for "ip".
2016-02-27 22:13:41 -05:00
Arseniy Seroka
824a1fb5b9 Merge pull request #13496 from zimbatm/no-dots-at-end-of-description
Remove all dots at end of descriptions
2016-02-27 21:34:06 +03:00
Franz Pletz
0a9076b5f8 socat: 2.0.0-b8 -> 2.0.0-b9 (CVE-2016-2217)
https://lwn.net/Vulnerabilities/674840/

http://www.dest-unreach.org/socat/contrib/socat-secadv7.html
http://www.dest-unreach.org/socat/contrib/socat-secadv8.html
2016-02-27 19:10:38 +01:00
Franz Pletz
88d1564985 socat: 1.7.3.0 -> 1.7.3.1 (CVE-2016-2217)
https://lwn.net/Vulnerabilities/674840/

http://www.dest-unreach.org/socat/contrib/socat-secadv7.html
http://www.dest-unreach.org/socat/contrib/socat-secadv8.html
2016-02-27 19:10:38 +01:00
zimbatm
17348dc094 Remove all dots at end of descriptions
Specially crafted for @JagaJaga

    find pkgs -name "*.nix" -exec \
      sed -e 's|\(description.*\)\.";|\1";|g' -i {} \;
2016-02-27 17:30:29 +00:00
Franz Pletz
158ff99ae4 chrony: 2.2 -> 2.3 2016-02-27 18:00:07 +01:00
Christoph Hrdinka
0c0312d342 Merge pull request #13048 from bendlas/update-i2p
i2p: 0.9.23 -> 0.9.24
2016-02-27 17:49:20 +01:00
Franz Pletz
c691b6a858 ntp: 4.2.8p4 -> 4.2.8p6 (multiple CVEs)
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
2016-02-27 16:34:02 +01:00
Robin Gloster
08893722ba Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-27 08:23:17 +00:00
Robin Gloster
3477e662e6 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-27 00:08:08 +00:00
zimbatm
2f38c1be69 Merge pull request #11142 from cresh/darwin-sshpass
sshpass: Enable on OS X.
2016-02-27 00:00:01 +00:00
Arseniy Seroka
766ad682f1 Merge pull request #13471 from Profpatsch/networkmanager-link-local
networkmanager: fix link-local ip addresses
2016-02-27 02:55:31 +03:00
Robin Gloster
8b9eccbf2d radvd: enable pie hardening 2016-02-26 23:03:00 +00:00
zimbatm
35ab3d301f Merge remote-tracking branch 'upstream/staging' 2016-02-26 22:37:04 +00:00
Robin Gloster
e392824fb3 dnsmasq: enable pie hardening 2016-02-26 17:55:51 +00:00
Robin Gloster
62f65d15ca chrony: enable pie hardening 2016-02-26 17:54:46 +00:00
Robin Gloster
631c09bbe5 checksec: clean up 2016-02-26 17:26:03 +00:00
Robin Gloster
a73762200d socat: enable pie hardening 2016-02-26 16:45:49 +00:00
Robin Gloster
b6279950bd openssh: enable pie hardening 2016-02-26 16:30:26 +00:00
Robin Gloster
351173c2dd stunnel: 5.29 -> 5.30 2016-02-26 15:51:08 +00:00
Domen Kožar
fe9f5dbbbc Merge pull request #6600 from 4z3/tlsdate
tlsdate doesn't build on x86_64-darwin
2016-02-26 10:59:00 +00:00
Profpatsch
70c02402c8 networkmanager: fix link-local ip addresses
NetworkManager needs an additional avahi-user to use link-local
IPv4 (and probably IPv6) addresses. avahi-autoipd also needs to be
patched to the right path.
2016-02-26 03:28:56 +01:00
zimbatm
853a213698 Merge pull request #13323 from rycee/ddclient/platform
ddclient: add meta.platforms
2016-02-26 00:02:06 +00:00
Franz Pletz
c459ba8f85 ratools: init at 0.6.2 2016-02-25 16:56:48 +01:00
Franz Pletz
6a27fc57b7 radvd: 2.11 -> 2.12 2016-02-25 16:56:48 +01:00
Tobias Geerinckx-Rice
818263ce46 miniupnpd: 1.9.20160216 -> 1.9.20160222
- set IPv6 Hop limit to 10
- fix HOST: header of event notifications in IPv6
- be more compliant on 64bit machines : ui4 in [0;2^32-1]
2016-02-25 16:19:42 +01:00
Vladimír Čunát
93f6af1071 Merge branch 'master' into staging 2016-02-25 09:01:48 +01:00
Arseniy Seroka
e3aa635e68 Merge pull request #13419 from k0ral/nixos-unstable
aria2: 1.19.3 -> 1.20.0
2016-02-24 19:02:38 +03:00
koral
29809666cb aria2: 1.19.3 -> 1.20.0 2016-02-24 12:56:15 +01:00
Frederik Rietdijk
40ca841c5c Merge pull request #13124 from FRidh/buildPythonApplication
buildPythonApplication: use new function for Python applications
2016-02-23 16:02:10 +01:00
Tobias Geerinckx-Rice
3675366f81 miniupnpd: 1.9.20160212 -> 1.9.20160216
Changes:
- minor changes to follow UDA 1.1 more closely.
- more argument checking in Soap methods.

Log: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-02-22 19:42:27 +01:00
Eelco Dolstra
389d04cbe7 curl: 7.47.0 -> 7.47.1 2016-02-22 11:41:34 +01:00
Franz Pletz
d31f58c688 tinc_pre: 2015-11-07 -> 2016-01-27
Also fixes `--version` parameter in exectuables.
2016-02-22 04:59:59 +01:00
Robin Gloster
eb93a9ca0a Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-22 01:22:05 +00:00
Robin Gloster
60290c69e4 Merge pull request #13357 from zimbatm/curl-7.15-fixup
curl: fixes installation of 7.15
2016-02-22 01:19:17 +00:00
Robin Gloster
bb2639aafc Merge branch 'curl-7.15-fixup' of https://github.com/zimbatm/nixpkgs into hardened-stdenv 2016-02-22 01:14:22 +00:00
zimbatm
6908e75441 curl: fixes installation of 7.15
It was trying to install /etc/ssl/cert/ca-certificates.pem

See https://hydra.nixos.org/build/32167398/nixlog/1
2016-02-21 23:57:20 +00:00
Robin Gloster
e0fa05f662 telnet: turn off format hardening 2016-02-21 22:53:24 +00:00
Robert Helgesson
5d8c4443f1 ddclient: add meta.platforms 2016-02-21 20:24:20 +01:00
Robin Gloster
99087d9216 trickle: turn off format hardening 2016-02-21 09:44:40 +00:00
Benjamin Staffin
29711967a2 openssh: update gssapi patch to match openssh version
Should fix the openssh_with_kerberos build.

Fixes #13140

(cherry picked from commit 3dae6c7e1e1eb64b3ceb2796eea1ad0ae1596688)
2016-02-20 22:22:01 -08:00
Robin Gloster
4036e9ba8c Merge branch 'up' into hardened-stdenv 2016-02-20 22:27:33 +00:00
Arseniy Seroka
7d22996df0 Merge pull request #13146 from rycee/bump/ddclient
ddclient: 3.8.2 -> 3.8.3
2016-02-21 00:40:51 +03:00
Robert Helgesson
113106df1b ddclient: 3.8.2 -> 3.8.3
Also remove patch for issue that has been fixed upstream, add simple
meta section, and minor other cleanups.
2016-02-20 18:30:36 +01:00
Arseniy Seroka
cbb06df02f Merge pull request #13142 from zimbatm/zerotierone-1.1.4
Zerotierone 1.1.4
2016-02-20 17:09:59 +03:00
zimbatm
99910d97c2 zerotierone: 1.1.0 -> 1.1.4 2016-02-19 23:01:30 +00:00
Robin Gloster
bc21db3692 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-19 21:16:14 +00:00
Jinjing Wang
6f466c9dad shadowsocks-libev: init at 2.4.5 2016-02-19 20:58:12 +08:00
Frederik Rietdijk
4d06bf70f4 buildPythonApplication: use new function for Python applications 2016-02-19 13:16:41 +01:00
Eelco Dolstra
1ab14aad7a glibc: Drop hurd support
This hasn't been maintained since 2012.

Also, renamed glibc's kernelHeaders argument to linuxHeaders.
2016-02-18 21:11:15 +01:00
Vladimír Čunát
e9520e81b3 Merge branch 'master' into staging 2016-02-17 10:06:31 +01:00
Vladimír Čunát
ee994dfae6 bootstrap tools: have curl without http2 support
I assume there's not much use for it during bootstrapping.
This fixes them as well, as curl was compiled against libnghttp2 but the
lib wasn't copied to the bootstrap tools.
2016-02-17 10:04:32 +01:00
Arseniy Seroka
ef4ea6d673 Merge pull request #12901 from sheenobu/pkgs/new/sipsak
sipsak - init at 4.1.2.1
2016-02-17 02:19:36 +03:00
Herwig Hochleitner
8e0bc53f94 i2p: 0.9.23 -> 0.9.24 2016-02-16 21:13:51 +01:00
Nikolay Amiantov
1c8a21dfad Merge branch 'pdnsd-service' of https://github.com/nfjinjing/nixpkgs
Closes #12932
2016-02-16 20:35:01 +03:00
Franz Pletz
32eeb8658f babeld: 1.6.1 -> 1.7.1 2016-02-16 05:12:56 +01:00
Franz Pletz
932d2cbd2c Merge pull request #13000 from mayflower/feat/unbound-dnssec
unbound: 1.5.3 -> 1.5.7, hardening, DNSSEC support & cleanup
2016-02-16 02:13:35 +01:00
Rok Garbas
443072799d tahoelafs: 1.10.0 -> 1.10.2 and refractor expression, fixes #12004 2016-02-15 21:58:23 +01:00
Franz Pletz
41698c9efa Merge branch 'master' into hardened-stdenv 2016-02-15 20:05:29 +01:00
Alexander V. Nikolaev
745a11fad5 connman: 1.30 -> 1.31 2016-02-15 08:34:15 +02:00
Franz Pletz
f415c07703 unbound: enable compilation with PIE & relro/now 2016-02-15 04:29:25 +01:00
Franz Pletz
7bf80c9875 unbound: 1.5.3 -> 1.5.7 2016-02-15 04:29:03 +01:00
Tobias Geerinckx-Rice
54e82445cb miniupnpd: 1.9.20160209 -> 1.9.20160212
Changes:
- return error 729 - ConflictWithOtherMechanisms if IGD v2 is enabled.
- add iptc_init() check in iptcrdr.c/init_redirect()
- add update_portmapping() / update_portmapping_desc_timestamp() functions
- use Linux libuuid uuid_generate() / BSD uuid_create() API

Changes: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-02-15 03:33:44 +01:00
Michael Raskin
4715783d2e getmail: 4.48.0 -> 4.49.0 2016-02-14 21:17:07 +01:00
Vladimír Čunát
d039c87984 Merge branch 'master' into closure-size 2016-02-14 08:33:51 +01:00
Robin Gloster
7e01cafa4b openfortivpn: turn off format hardening and use autoreconfHook 2016-02-12 13:46:50 +00:00
Robin Gloster
663ec96a9a netboot: turn off format hardening 2016-02-12 13:07:20 +00:00
Jinjing Wang
1d6f590844 pdnsd: enable IPv6 by default 2016-02-12 19:32:29 +08:00
Edward Tjörnhammar
5bb195bda2 i2pd: 2.3.0 -> 2.4.0 2016-02-12 07:00:37 +01:00
Robin Gloster
7e644980cc mailutils: turn off format hardening 2016-02-12 03:58:56 +00:00
Robin Gloster
162982544a dhcpdump: turn off fortify hardening 2016-02-12 00:40:58 +00:00
Tobias Geerinckx-Rice
be0abb32f6 miniupnpd: 1.9.20160113 -> 1.9.20160209
Changes: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-02-11 21:37:41 +01:00
Eelco Dolstra
e2eca0c24c Fix misspelled meta.maintainers attributes 2016-02-10 23:27:34 +00:00
Eric Sagnes
ff58b07fc8 cmst: 2014.12.05 -> 2016.01.28 2016-02-10 23:27:30 +00:00
Eelco Dolstra
aea262f654 Fix misspelled meta.maintainers attributes 2016-02-10 14:59:50 +01:00
Matej Cotman
06ce6ba757 Merge pull request #12862 from ericsagnes/pkg/cmst
cmst: 2014.12.05 -> 2016.01.28
2016-02-10 01:17:05 +01:00
Sheena Artrip
8993b65225 sipsak - init at 4.1.2.1 2016-02-09 16:48:08 -05:00
Robin Gloster
0c5b86b607 eggdrop: use git rev to fix compiling with gcc5 2016-02-07 23:07:12 +00:00
Robin Gloster
65e6aa4a31 uwimap: turn off format hardening 2016-02-07 22:28:15 +00:00
Robin Gloster
9492e06315 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-07 14:44:27 +00:00
Vladimír Čunát
a115bff08c Merge branch 'master' into staging 2016-02-07 13:52:42 +01:00
Tony White
98ffc61e2f curl: Change default src url (close #12851)
- Changes the default src url away from http://curl.haxx.se
to an official mirror because haxx.se resolves to https and
bootstrap curl doesn't have https support.
Please see https://github.com/NixOS/nixpkgs/issues/12816
for more info.
2016-02-07 13:39:45 +01:00
Robin Gloster
9229e9c656 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-07 11:17:57 +00:00
Eric Sagnes
20bb296be6 cmst: 2014.12.05 -> 2016.01.28 2016-02-07 18:51:28 +09:00
Vladimír Čunát
54299b60c4 Merge #12779: Mass replace pkg}/bin-style strings
... to refer to correct outputs
2016-02-03 17:25:22 +01:00
Vladimír Čunát
ae74c356d9 Merge recent 'staging' into closure-size
Let's get rid of those merge conflicts.
2016-02-03 16:57:19 +01:00
Guillaume Maudoux
9f358f809d Configure a default trust store for openssl 2016-02-03 12:42:01 +01:00
Robin Gloster
0876a44169 curl: 7.45 -> 7.47 and enable HTTP/2 (close #12723)
This fixes CVE-2016-0755:
https://curl.haxx.se/docs/adv_20160127A.html

vcunat removed *propagation* of pkgconfig and perl.
2016-02-03 10:50:24 +01:00
Eelco Dolstra
a5d5736692 Typo 2016-02-02 19:59:27 +01:00
Luca Bruno
a7d2947e33 Merge pull request #12708 from jerith666/email-init
email: init at d9fd259f
2016-02-01 23:50:55 +01:00
Domen Kožar
0b3becb269 Merge pull request #12701 from mayflower/builder-def-cleanup
builderDefsPackage cleanup
2016-02-01 21:09:34 +00:00
Tuomas Tynkkynen
13b3f3f246 treewide: Mass replace 'openssl}/bin' to refer the 'bin' output 2016-02-01 20:46:16 +02:00
Eelco Dolstra
a7b7ac8bfb openssh: Enable DSA host/client keys
This applies a patch from Fedora to make HostKeyAlgorithms do the
right thing, fixing the issue described in
401782cb67.
2016-02-01 16:31:43 +01:00
koral
a7f09e9773 openssh: 6.9p1 -> 7.1p2 2016-02-01 16:31:43 +01:00
Matt McHenry
23d1aa8516 email: init at d9fd259f 2016-01-31 17:36:26 -05:00
Gabriel Ebner
bca9042663 mu: 0.9.13 -> 0.9.16 2016-01-31 11:19:35 +01:00
Robin Gloster
ea9c2fad54 altermime: use mkDerivation 2016-01-30 20:31:05 +00:00
Franz Pletz
73f4c2bdf8 Remove lsh, broken & unmaintained 2016-01-30 16:36:57 +00:00
Franz Pletz
aacc390769 ncat: Remove old package, available in nmap 2016-01-30 16:36:57 +00:00
Robin Gloster
f6d3b7a2ae switch hardening flags 2016-01-30 16:36:57 +00:00
Franz Pletz
954e9903ad Use a hardened stdenv by default 2016-01-30 16:36:57 +00:00
Tony White
627f7bf6a5 privoxy: 3.0.22 - > 3.0.24
- Security fixes
- Bug fixes
- General improvements
- Action file improvements
- Documentation improvements

Please see http://www.privoxy.org/announce.txt
for more detail.
2016-01-30 14:21:20 +00:00
Tobias Geerinckx-Rice
ac33b4724a More version attribute tidying where maintainers |= nckx 2016-01-25 20:08:34 +01:00
Tobias Geerinckx-Rice
9fb8020e4e Add version attribute where maintainers |= nckx
This will probably be mandatory soon, and is a step in the right
direction. Removes the deprecated meta.version, and move some meta
sections to the end of the file where I should have put them in
the first place.
2016-01-25 17:35:21 +01:00
Nikolay Amiantov
3622038d20 easyrsa2: init at 2.2.0 2016-01-25 12:14:01 +03:00
Tuomas Tynkkynen
ed7dbb46a8 treewide: Mass replace 'zlib}/lib' to refer the 'out' output 2016-01-24 10:03:39 +02:00
Tobias Geerinckx-Rice
32d40f0f98 Remove no longer (or never) referenced patches
55 files changed, 6041 deletions. Tested with `nix-build -A tarball`.
2016-01-24 02:02:21 +01:00
Vladimír Čunát
0957359568 Merge branch 'staging' 2016-01-22 13:48:35 +01:00
Tobias Geerinckx-Rice
8da914cad4 minissdpd: 1.5 -> 1.5.20160119 2016-01-20 02:00:15 +01:00
Vladimír Čunát
716aac2519 Merge branch 'staging' into closure-size 2016-01-19 09:55:31 +01:00
Robin Gloster
53b389327e refactor to use autoreconfHook where possible
Close #12446.
2016-01-18 10:45:31 +01:00
Vladimír Čunát
620c147cce Merge branch 'master' into staging 2016-01-18 09:48:49 +01:00
tv
180655290d urlwatch: 1.18 -> 2.0 2016-01-17 22:00:39 +01:00
koral
2077895251 aria2: 1.19.2 -> 1.19.3 2016-01-16 15:34:29 +01:00
Lluís Batlle i Rossell
5b20713041 inadyn: update to 1.99.15
It fixes a big bug about IP not getting updated.
https://github.com/troglobit/inadyn/issues/107
2016-01-15 16:14:40 +01:00
Vladimír Čunát
2d0893088f Merge branch 'master' into staging 2016-01-15 13:43:57 +01:00
Franz Pletz
a25fc6e54d Merge pull request #12391 from rycee/bump/nethogs
nethogs: 0.8.1-git -> 0.8.1
2016-01-15 12:20:25 +01:00
Tobias Geerinckx-Rice
d8fa7f7b06 miniupnpd 1.9.20151212 -> 1.9.20160113
Changes: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-01-14 23:55:47 +01:00
Robert Helgesson
b4f03263ec nethogs: 0.8.1-git -> 0.8.1
Also use fetchFromGitHub, use make flags instead of patching Makefile,
and add myself as maintainer since the package is unmaintained.
2016-01-14 20:49:20 +01:00
Franz Pletz
2d65772950 openssh: Disable roaming (security fix)
Fixes CVE-2016-0777 and CVE-0216-0778.

Closes #12385.
2016-01-14 16:40:27 +01:00
Tobias Geerinckx-Rice
f290a6d026 aircrack-ng: fix description typo; co-maintain 2016-01-14 03:09:51 +01:00
Tobias Geerinckx-Rice
db658a6eb5 aircrack-ng: 1.2-beta3 -> 1.2-rc3 2016-01-14 03:09:51 +01:00
Tobias Geerinckx-Rice
00b06e6d45 minissdpd: 1.4 -> 1.5 2016-01-13 19:16:14 +01:00
Tobias Geerinckx-Rice
9888fbd8d2 gtk-gnutella: 1.0.1 -> 1.1.5
Still broken, though.
2016-01-13 03:30:56 +01:00
Tobias Geerinckx-Rice
f85b5c4c07 ntop: remove dead package
Broken since 2013. Discontinued. Use ntopng.
2016-01-13 03:30:56 +01:00
Edward Tjörnhammar
3a6c354094 i2pd: 2.2.0 -> 2.3.0 2016-01-12 22:09:31 +01:00
Nikolay Amiantov
4a9ad20a95 Revert "vde2: support static build"
This reverts commit fda6c0d3c7.
See ee6ca494d2
for related discussion.
2016-01-12 17:15:14 +03:00
Nikolay Amiantov
fda6c0d3c7 vde2: support static build 2016-01-12 15:06:23 +03:00
Nikolay Amiantov
c2b70e6147 easyrsa: 2.2.0 -> 3.0.0 2016-01-10 07:28:55 +03:00
Arseniy Seroka
6cd71e5c91 Merge pull request #12268 from sigma/version/stunnel
stunnel: 5.26 -> 5.29
2016-01-09 23:52:19 +03:00
Allan Espinosa
d0e1ee6e55 axel: mark as buildable on darwin 2016-01-09 12:37:16 -06:00
Yann Hodique
a4c3b433ee stunnel: 5.26 -> 5.29 2016-01-09 09:02:54 -08:00
Matthew O'Gorman
e11004cdf3
zap: init at 2.4.3 2016-01-08 23:46:45 -05:00
Robin Gloster
af50b03f50 fuppes: remove obsolete broken package and service 2016-01-07 06:39:05 +00:00
Benjamin Staffin
67f4c2a779 openssh: Add gssapi patch used by other major distros
This patch is borrowed verbatim from Debian, where it is actively
maintained for each openssh update.  It's also included in Fedora's
openssh package, in Arch linux as openssh-gssapi in the AUR, in MacOS
X, and presumably various other platforms and linux distros.

The main relevant parts of this patch:
- Adds several ssh_config options:
  GSSAPIKeyExchange, GSSAPITrustDNS,
  GSSAPIClientIdentity, GSSAPIServerIdentity
  GSSAPIRenewalForcesRekey
- Optionally use an in-memory credentials cache api for security

My primary motivation for wanting the patch is the GSSAPIKeyExchange
and GSSAPITrustDNS features. My user ssh_config is shared across
several OSes, and it's a lot easier to manage if they all support the
same options.
2016-01-05 14:50:05 -08:00
Moritz Ulrich
24e0868763 isync: Add unstable variant. 2016-01-05 12:21:10 +01:00
Vladimír Čunát
b1acaffe67 Merge branch 'master' into staging 2016-01-05 10:28:58 +01:00
Tobias Geerinckx-Rice
bb288f43af pingtcp: install README.md 2016-01-04 21:13:46 +01:00
Tobias Geerinckx-Rice
3a9c863150 pcapc: init at 2015-03-06 2016-01-04 21:13:05 +01:00
Pascal Wittmann
192fda79e0 Merge pull request #11832 from ktosiek/gupnp-tools-fixes
gupnp-tools: add required icons, rename from gupnptools
2016-01-04 17:16:41 +01:00
Tobias Geerinckx-Rice
517d8c8846 pingtcp: init at 0.0.3 2016-01-04 16:09:46 +01:00
Tomasz Kontusz
62d2a91b2b gupnp-tools: add required icons, rename from gupnptools 2016-01-04 09:34:51 +01:00
Mateusz Kowalczyk
8a5421da50 babeld: update from 1.5.1 to 1.6.1 2016-01-03 20:51:14 +00:00
Tobias Geerinckx-Rice
6862e5c636 dhcping: init at 1.2 2016-01-03 20:38:52 +01:00
Tobias Geerinckx-Rice
4943e41347 wget: make libpsl attribute properly optional 2016-01-03 00:24:28 +01:00
Robert Helgesson
a596f7dcb9 netcat: add meta data 2016-01-02 22:49:57 +01:00
Fabian Schmitthenner
28b3ecac07 networkmanager: fix path /sbin/modprobe 2016-01-02 18:23:59 +01:00
Bjørn Forsman
b1570d4f57 offlineimap: don't depend on 'pkgs' attrset
It's considered bad style to depend on "everything". In this case, all
that was needed from 'pkgs' was 'stdenv'.
2016-01-02 18:17:22 +01:00
Damien Cassou
fc83959704 offlineimap: 6.6.0 → 6.6.1 2016-01-02 18:07:14 +01:00
Vladimír Čunát
1878ac9335 tree-wide: various cleanups
It's mainly refactoring and mass-rebuild simplifications without any
real impact (besides better readability).
2016-01-02 11:29:45 +01:00
Vladimír Čunát
b7658f3f8b connman: drop policykit dependency, refactor meta
PolicyKit is long obsoleted by PolKit and it didn't seem used here.
/cc maintainer @matejc.
2016-01-02 09:02:05 +01:00
janus
c01dbc4932 FreeBSD patches for GNU m4, stdenv, miniupnpc 2016-01-01 17:01:13 +00:00
janus
3cb831d2bc FreeBSD patches for miniupnpc, boost, bitcoin 2016-01-01 16:59:48 +00:00
janus
a1ade02cdc FreeBSD support 2016-01-01 16:59:48 +00:00
Michael Raskin
8431b84d9a tcpflow: 1.4.4 -> 1.4.5 2016-01-01 12:30:17 +03:00
Vladimír Čunát
f9f6f41bff Merge branch 'master' into closure-size
TODO: there was more significant refactoring of qtbase and plasma 5.5
on master, and I'm deferring pointing to correct outputs to later.
2015-12-31 09:53:02 +01:00
Vladimír Čunát
08dd527cc7 Merge branch 'staging'
http://hydra.nixos.org/eval/1234895
The mass errors on Hydra seem transient; I verified ghc on i686-linux.
Only darwin jobs are queued ATM. There's a libpng security update
included in this merge, so I don't want to wait too long.
2015-12-29 17:14:35 +01:00
Arseniy Seroka
efce163164 Merge pull request #11988 from mayflower/update-dhcpcd
dhcpcd: 6.9.3 -> 6.9.4
2015-12-29 15:00:40 +03:00
Edward Tjörnhammar
2c9369dc43 i2pd: 2.1.0 -> 2.2.0 2015-12-29 09:17:35 +01:00
Peter Simons
f3aa927b70 Merge pull request #11991 from dezgeg/pr-openssh-purity
openssh: Compile with '--with-pid-dir' to improve build purity
2015-12-28 21:49:36 +01:00
Tuomas Tynkkynen
919d44d29f openssh: Compile with '--with-pid-dir' to improve build purity
The configure script tries to probe whether /var/run exists when
determining the location for the pid file, which is not very nice when
doing chroot builds. Just set it explicitly to avoid the problem.

For reference, the culprit in configure.ac:
````
piddir=/var/run
if test ! -d $piddir ; then
        piddir=`eval echo ${sysconfdir}`
        case $piddir in
                NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
        esac
fi

AC_ARG_WITH([pid-dir],
        [  --with-pid-dir=PATH     Specify location of ssh.pid file],
...

````

Also, use the `install-nokeys` target in installPhase so we avoid
installing useless host keys into $out/etc/ssh and improve built purity
as well.
2015-12-28 18:40:21 +02:00
Robin Gloster
a219778acc dhcpcd: 6.9.3 -> 6.9.4 2015-12-27 21:40:09 +00:00
Benjamin Staffin
bb3a2aa8eb autossh: build on darwin too
Tested it out just now - seems like it works fine.
2015-12-26 13:46:34 -08:00
Dan Peebles
50a00101c1 dnsmasq: get it working on darwin again 2015-12-24 23:27:31 -05:00
Nathan Zadoks
0fda4ff715 tahoelafs: mock is required at runtime for some reason 2015-12-24 11:08:16 +01:00
Robin Gloster
8613060425 socat: add patch to fix build with libressl
This fixes the build for libressl >= 2.3 as some legacy openssl code has
been removed.
2015-12-23 22:08:33 +00:00
Thomas Tuegel
17e17ea649 cmst: Qt 5 infrastructure update 2015-12-20 07:56:51 -06:00
Nikolay Amiantov
13548530a6 networkmanager: fix udev rules file, fixes #11744 2015-12-16 22:55:03 +01:00
Yann Hodique
9a40af11c3 corkscrew: fix darwin build
corkscrew ships outdated versions of config.{sub,guess}. Point to
automake version instead.
2015-12-13 14:31:00 -08:00
Tobias Geerinckx-Rice
492541c378 miniupnpd 1.9.20150721 -> 1.9.20151212
Changes: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2015-12-12 17:02:08 +01:00
Lancelot SIX
069b1891d3 pkgs.wget: 1.17 -> 1.17.1
1.17.1 is a bugfix release. See
https://lists.gnu.org/archive/html/info-gnu/2015-12/msg00007.html for
announcement.
2015-12-12 12:41:46 +01:00
Pascal Wittmann
d0fbac6358 nzbget: 16.3 -> 16.4 2015-12-12 12:05:19 +01:00
goibhniu
5a4be85b3a Merge pull request #11579 from mayflower/pkg/redir
redir: init at 2.2.1
2015-12-12 12:04:02 +01:00
Luca Bruno
5b0352a6a4 Merge branch 'master' into closure-size 2015-12-11 18:31:00 +01:00
Robin Gloster
171d622fcd redir: init at 2.2.1 2015-12-10 16:09:32 +00:00
Domen Kožar
05c12a337d snabbswitch: add missing diffutils dependency 2015-12-10 15:38:06 +01:00
Domen Kožar
c879a6eed5 snabbswitch: add missing dependencies 2015-12-10 12:47:32 +01:00
Pascal Wittmann
83c22f9c8f Merge pull request #11547 from sigma/corkscrew
add corkscrew networking tool
2015-12-08 17:47:46 +01:00
Yann Hodique
e0fe879562 corkscrew: init at 2.0 2015-12-08 07:28:56 -08:00
Domen Kožar
27bea9a3aa Merge pull request #11536 from bendlas/update-i2p
i2p: 0.9.22 -> 0.9.23
2015-12-08 10:34:11 +01:00
Pascal Wittmann
b843e7c50a libtorrent: fix evaluation 2015-12-07 22:39:39 +01:00
Peter Simons
a0cdd48171 rtorrent: fix meta.homepage attribute 2015-12-07 22:30:55 +01:00
Herwig Hochleitner
ca659e0e89 i2p: 0.9.22 -> 0.9.23 2015-12-07 21:45:09 +01:00
Peter Simons
8dd80d7055 Merge pull request #11531 from oxij/rtorrent-merge-and-cleanup
libtorrent, rtorrent: merge *-git into default, drop outdated *-git versions, cleanup
2015-12-07 19:01:52 +01:00
Jan Malakhovski
7afce99e61 libtorrent, rtorrent: merge *-git into default, drop outdated *-git versions, cleanup
This also gives the man page (it is outdated, though).
2015-12-07 17:56:03 +00:00
Emery Hemingway
2b6dcdfcd0 Rename 'emery' maintainer handle to 'ehmry', fixes #11493
Communication happens on Github so names should be consistent.
2015-12-05 23:06:20 +01:00
Vladimír Čunát
e2f5ba1937 treewide: fix invocations of installBin command
I've removed the trivial command in 4e72b61de.
I think `install -Dt "$out/bin"` is a better replacement anyway,
as it can be easily used to other directories than $out/bin.

/cc @ehmry who seems to maintain many packages with this usage.
(BTW, it would be better to have maintainer attribute same as github
username, as it makes pinging maintainers much easier.)
2015-12-05 13:59:05 +01:00
Vladimír Čunát
9054ddefeb kde4.plasma-nm: fix build with multiple outputs 2015-12-05 13:27:24 +01:00
Damien Cassou
97ccbb9498 offlineimap: 6.5.7 → 6.6.0, fixes #11481 2015-12-05 11:54:41 +01:00
Vladimír Čunát
263fd55d4b Merge recent staging built on Hydra
http://hydra.nixos.org/eval/1231884
Only Darwin jobs seem to be queued now,
but we can't afford to wait for that single build slave.
2015-12-05 11:11:51 +01:00
Jan Malakhovski
83f46ec4d6 rtorrent: build with fallocate support
This doesn't actually turn it on unless you say

    system.file_allocate.set = yes

in the rtorrent config.
2015-12-04 17:51:14 +00:00
Tobias Geerinckx-Rice
889944af2c dropbear 2015.70 -> 2015.71
Another bugfix release.
2015-12-04 17:07:05 +01:00
Domen Kožar
eca191f92c snabbswitch: 2015.11 -> 2015.12 2015-12-04 16:25:52 +01:00
John Wiegley
31e5abf788 openvpn: Enable building on Darwin 2015-12-03 13:12:49 -05:00
Domen Kožar
29befbeb95 dnsmasq: install dhcp_* tools 2015-12-03 11:09:40 +01:00
Eelco Dolstra
cae5bfb991 statsd: Don't use <nixpkgs>
This was preventing the Nixpkgs channel from updating, since the
program indexer barfed on:

  error: anonymous function at /nix/store/wdnwbh3kmf68nhqqp0khcyxbdbp43vg5-nixos-14.12.626.b0d594c/nixos/nixpkgs/pkgs/top-level/node-packages.nix:1:1 called without required argument ‘neededNatives’, at /data/releases/nixos/unstable-small/.tmp-nixos-16.03pre72946.c50d013-787/unpack/nixos-16.03pre72946.c50d013/lib/customisation.nix:56:12

because Nixpkgs 16.03 was importing files from Nixpkgs 14.12.

Also added some half-assed checks to detect this issue in the future.
2015-12-02 15:58:30 +01:00
Luca Bruno
e289717414 rename moveToOutput and propagatedBuildInputs 2015-12-02 10:05:36 +01:00
Arseniy Seroka
f628b757a9 Merge pull request #11337 from markWot/cntlm_update_from_035_to_0923
cntlm: 0.35.1 -> 0.92.3
2015-12-01 22:59:36 +03:00
Domen Kožar
68dd644458 snabbswitch: 2015.10 -> 2015.11 2015-11-30 10:08:45 +01:00
Luca Bruno
920b1d3591 Merge branch 'master' into closure-size 2015-11-29 16:50:26 +01:00
Markus Wotringer
1ba100c9ef cntlm: 0.35.1 -> 0.92.3 2015-11-28 23:46:52 +01:00
Rok Garbas
2de0dc1a18 statsd: updated package and nixos service
* package statsd node packages separatly since they actually require
  nodejs-0.10 or nodejs-0.12 to work (which is ... well old)

* remove statsd packages and its backends from "global" node-packages.json.
  i did not rebuild it since for some reason npm2nix command fails. next time
  somebody will rerun npm2nix statsd packages are going to be removed.

* statsd service: backends are now provided as strings and not anymore as
  packages.
2015-11-27 21:42:21 +01:00
Tobias Geerinckx-Rice
d118e51943 dropbear 2015.69 -> 2015.70
Fix server password authentication on Linux, broken in 2015.69.
2015-11-27 01:45:53 +01:00
Tobias Geerinckx-Rice
2798b02ad0 Convert some *Flags from strings to lists 2015-11-26 23:45:31 +01:00
Domen Kožar
67e03d0c50 Merge branch 'buildPythonPackage+wheels' 2015-11-26 17:38:35 +01:00
goibhniu
cc63832981 Merge pull request #8758 from fpletz/package/chrony
chrony: 2.1.1 -> 2.2 & service improvements
2015-11-26 13:22:33 +01:00
Tobias Geerinckx-Rice
da29db5d41 dropbear 2015.68 -> 2015.69
Known changes:
- Fix crash when forwarded TCP connections fail to connect
  (bug introduced in 2015.68)
- Avoid hang on session close when multiple sessions are started,
  affects Qt Creator
- Reduce per-channel memory consumption in common case, increase default
  channel limit from 100 to 1000 which should improve SOCKS forwarding
  for modern webpages
- Handle multiple command line arguments in a single flag
- Manpage improvements
- Build fixes for Android
- Don't display the MOTD when an explicit command is run
- Check curve25519 shared secret isn't zero
2015-11-26 08:00:02 +01:00
Pascal Wittmann
6d25c0f1b3 Remove unneeded 'with's from meta.platforms 2015-11-25 23:06:09 +01:00
John Wiegley
cb1c818491 openvpn: 2.3.7 -> 2.3.8 2015-11-25 12:54:02 -08:00
John Wiegley
baa24bc1a2 stunnel: 5.22 -> 5.26 2015-11-25 12:46:28 -08:00
Luca Bruno
a412927924 Merge remote-tracking branch 'origin/master' into closure-size 2015-11-25 21:37:30 +01:00
zimbatm
e7cd9077a8 s3sync: delete dead project
According to http://s3sync.net/wiki.html, https://github.com/ms4720/s3sync was
supposed to take over the development but nothing has happened in 4 years.

The project is unfortunately dead and is our only dependency to ruby 1.8.
2015-11-25 11:51:09 +01:00
Joachim Fasting
6857170916 gvpe: reimpleemnt using mkDerivation 2015-11-24 14:45:15 +01:00
Joachim Fasting
6812c1eedc tftp-hpa: reimplement using mkDerivation
Also rename top-level name to tftp-hpa.
2015-11-24 14:45:15 +01:00
Joachim Fasting
e532271089 ripmime: reimplement using mkDerivation 2015-11-24 14:45:15 +01:00
Joachim Fasting
931eaa341c philter: reimplement using mkDerivation 2015-11-24 14:45:15 +01:00
Vladimír Čunát
13eca6f79a Merge #11067: SmartOS updates
I amended some commits slightly.
2015-11-23 14:45:44 +01:00
michael bishop
0421745924 rp-pppoe: 3.11 -> 3.12 2015-11-23 11:56:03 +00:00
Pascal Wittmann
831aa518fd Merge pull request #11213 from mitchty/ncftp-manpages-prefix-fix
Ncftp manpage /usr/local workaround
2015-11-22 22:07:11 +01:00
Mitch Tishmack
d66e4c71fc Ncftp manpage /usr/local workaround
ncftp appears to not properly honor PREFIX in its manpage target and
tries to install them to /usr/local

Work around this by adding --mandir to its configure flags.
2015-11-22 14:16:35 -06:00
Edward Tjörnhammar
bfcde5cc38 i2pd: patch to enable tunnelcfg usage
nixos: i2pd service, use tunnelscfg to pass nix tunnel specifications
2015-11-22 20:35:59 +01:00
Domen Kožar
704c8bab41 buildPythonPackage: fix standalone applications using it 2015-11-21 21:44:12 +01:00
Edward Tjörnhammar
071bcf356e i2pd: disable AESNI by default since we want portable executables 2015-11-20 18:59:13 +01:00
Pascal Wittmann
0e793e8ea4 axel: 2.4 -> 2.5 2015-11-20 17:03:06 +01:00
Vladimír Čunát
333d69a5f0 Merge staging into closure-size
The most complex problems were from dealing with switches reverted in
the meantime (gcc5, gmp6, ncurses6).
It's likely that darwin is (still) broken nontrivially.
2015-11-20 14:32:58 +01:00
Edward Tjörnhammar
de7d60dcfa i2pd: unintended rename corrected 2015-11-20 08:44:54 +01:00
Edward Tjörnhammar
7d6c46f7e3 i2pd: 0.10.0 -> 2.1.0 2015-11-20 08:28:35 +01:00
Anders Lundstedt
1c15a77a5d zerotierone: 1.0.5 -> 1.1.0 2015-11-19 21:19:15 +01:00
Marcus Crestani
fb9a2f6c12 sshpass: Enable on OS X. 2015-11-19 08:45:54 +01:00
William A. Kennington III
933316c310 tinc_pre: 2015-09-25 -> 2015-11-07 2015-11-17 21:16:42 -08:00
Pascal Wittmann
7fd2796e99 Replace 'with plaforms; platform' with 'platforms.platform' 2015-11-17 21:30:43 +01:00
Arseniy Seroka
57ee05af86 Merge pull request #11095 from DamienCassou/isync-1.2.1
isync: 1.2.0 → 1.2.1
2015-11-17 20:29:55 +03:00
Jaka Hudoklin
b04ba13ee0 Merge pull request #11050 from offlinehacker/pkgs/dd-agent/update_5.5.2
dd-agent: 5.4.3 -> 5.5.2, add docker support
2015-11-17 17:19:00 +01:00
Damien Cassou
2088e147b9 isync: 1.2.0 → 1.2.1 2015-11-17 11:00:42 -03:00
Lancelot SIX
fd1ffbf806 pkgs.wget: 1.16.3 -> 1.17 (close #11092)
See http://lists.gnu.org/archive/html/info-gnu/2015-11/msg00008.html
for release announcement.
2015-11-17 14:56:13 +01:00
John Wiegley
17044e0e71 openvpn: Allow building on non-Linux systems 2015-11-16 20:34:56 -08:00
Danny Wilson
2c80e12e96 Add support for gzip compression 2015-11-16 17:20:14 +01:00
Danny Wilson
bb3d083d63 Fix hardcoded target platform. 2015-11-16 17:20:13 +01:00
Danny Wilson
e9d6da77cd Fix non-chrooted (stdenv-native) builds that have man on path enabling
building of built-in manual, while chrooted builds (hydra) will not…
2015-11-16 17:20:13 +01:00
Jaka Hudoklin
4acbfe7d9a dd-agent: add docker support 2015-11-16 13:46:19 +01:00
Jaka Hudoklin
b4ece28aac dd-agent: 5.4.3 -> 5.5.2 2015-11-16 13:46:06 +01:00
Domen Kožar
15913feb97 networkmanager098: add libgudev 2015-11-14 16:50:23 +01:00
William A. Kennington III
9579c9ec7f Merge commit 'cb21b77' into master.upstream
This is a partial merge of staging for builds which are working
2015-11-13 15:53:10 -08:00
Franz Pletz
03959d4616 whois: init at 5.2.10 and share with mkpasswd
Close #7979.
This commit adds a much more usable whois tool compared to the ones in
busybox and inetutils.

The sources for whois and mkpasswd from Debian are both located in the whois
git repository for historical reasons.
2015-11-11 15:26:10 +01:00
William A. Kennington III
383e41188b nbd: 3.11 -> 3.12.1 2015-11-10 16:44:52 -08:00
Nikolay Amiantov
d4c27381dc Merge pull request #10460 from abbradar/remote-askpass
Support network in initrd and entering LUKS passphrase via SSH
2015-11-10 16:41:34 +03:00
Tobias Geerinckx-Rice
7db3b90df6 netsniff-ng 0.5.9-130-ga81b515 -> 0.6.0 2015-11-09 17:30:14 +01:00
Arseniy Seroka
9a97849987 Merge pull request #10886 from k0ral/ntp
ntp: 4.2.8p3 -> 4.2.8p4
2015-11-08 17:10:33 +03:00
koral
f510253de3 ntp: 4.2.8p3 -> 4.2.8p4 2015-11-08 13:44:11 +00:00
William A. Kennington III
a26c8e9b83 Merge branch 'master.upstream' into staging.upstream 2015-11-07 15:51:51 -08:00
Domen Kožar
07405ee187 Merge pull request #9463 from khumba/nm-connection-sharing
Fix NetworkManager connection sharing
2015-11-06 11:16:50 +01:00
William A. Kennington III
1e7aa4f17d Merge branch 'master.upstream' into staging.upstream 2015-11-05 18:30:11 -08:00
William A. Kennington III
123a3c5484 iperf: 3.0.11 -> 3.1 2015-11-05 18:23:00 -08:00
William A. Kennington III
2837a5e091 Merge branch 'master.upstream' into staging.upstream 2015-11-05 10:07:28 -08:00
Jude Taylor
d2e6b9f3ae Revert "darwin purity: mosh"
This reverts commit 772960bcb7.
2015-11-04 10:49:19 -08:00
Eelco Dolstra
3e44182487 Merge remote-tracking branch 'origin/systemd-219' into staging 2015-11-04 15:37:28 +01:00
William A. Kennington III
4251612faa Merge branch 'master.upstream' into staging.upstream 2015-11-04 01:00:48 -08:00
Jude Taylor
772960bcb7 darwin purity: mosh 2015-11-03 14:32:14 -08:00
Franz Pletz
d89f269b26 chrony service: Members of group chrony can use chronyc 2015-11-03 15:07:18 +01:00
Franz Pletz
1a79058a81 chrony: Add fpletz to maintainers 2015-11-03 15:07:18 +01:00
Franz Pletz
596b06bd1c chrony: Build with NSS for secure hash support 2015-11-03 15:07:18 +01:00
Franz Pletz
a639e51760 chrony: 2.1.1 -> 2.2 2015-11-03 15:06:45 +01:00
Pascal Wittmann
248560e593 nzbget: 16.2 -> 16.3 2015-11-02 21:26:56 +01:00
Tobias Geerinckx-Rice
d973931c9a netsniff-ng 0.5.9-{121-gd91abbd -> 130-ga81b515}
For new --no-geoip option.
2015-11-02 01:46:50 +01:00
Jude Taylor
42fffee9da darwin purity: aria2 2015-10-31 17:03:13 -07:00
William A. Kennington III
dd2de66d61 Merge branch 'master.upstream' into staging.upstream 2015-10-30 17:16:07 -07:00
Eelco Dolstra
81f6c62004 Merge remote-tracking branch 'origin/master' into systemd-219 2015-10-30 15:47:37 +01:00
Herwig Hochleitner
6c961ee810 i2p: 0.9.21 -> 0.9.22 2015-10-29 16:54:56 +01:00
Pascal Wittmann
6efc697224 Merge pull request #10668 from shdpl/ntopng2
ntopng: 1.2.1 -> 2.0.0
2015-10-29 12:15:58 +01:00
Vladimír Čunát
787f322540 $docdev fixups: mostly to avoid empty output
... after auto-removing some kinds of files by default.
In some cases I let them be removed and in others I let them be put into
$docdev. That was more due to general indecisiveness on this question
than any reasons in the particular cases.
2015-10-28 18:58:06 +01:00
Pascal Wittmann
e2cdc35989 nzbget: 15.0 -> 16.2 2015-10-28 17:43:41 +01:00
Mariusz `shd` Gliwiński
6783f8dd7b ntopng: 1.2.1 -> 2.0.0 2015-10-28 13:35:09 +01:00
Tuomas Tynkkynen
d100218bd2 uwimap: Avoid reference to OpenSSL headers
Default value of SSLCERTS was ${openssl.dev}/certs.
Adjust SSLLIB as well for good measure.
2015-10-28 10:17:09 +01:00
Tuomas Tynkkynen
0eadc53b4b wget: Remove runtime dependency on OpenSSL headers
It collects compilation and linking flags that are displayed on
`wget --version`. Setting to 0 (NULL) is safe.
2015-10-28 10:17:08 +01:00
Vladimír Čunát
dd915f82e7 expat: split dev output 2015-10-28 10:09:34 +01:00
Michael Raskin
95437b7c53 Update wavemon to git version, which has some nl80211 support 2015-10-27 14:21:08 +03:00
Tobias Geerinckx-Rice
4a1a5e7ed6 netsniff-ng 0.5.9-{110-gfc4646b -> 121-gd91abbd} 2015-10-27 03:17:16 +01:00
Domen Kožar
7477a7cdda kde: add glib include paths to NIX_CFLAGS_COMPILE
(cherry picked from commit 350ffdcc8434f668f49e06eaf4d5cd685d42965d)
Signed-off-by: Domen Kožar <domen@dev.si>
2015-10-25 20:03:09 +01:00
Cillian de Róiste
0ad7855e4a cutter: update from 1.03 to 1.04 2015-10-25 19:06:05 +01:00
Tuomas Tynkkynen
14c41aa745 iftop: 0.17 -> 1.0pre4
Even though this is a pre-release version, both Debian and Arch have
this version as well.
2015-10-25 02:44:46 +03:00
Domen Kožar
d85ae6138e Merge pull request #10116 from ikervagyok/nm-1.0.6
network-manager 1.0.2 -> 1.0.6
2015-10-24 15:48:37 +02:00
Jascha Geerds
9e7e51aece aria2: 1.19.0 -> 1.19.2 2015-10-23 15:10:05 +02:00
Jascha Geerds
f63755bbbc plasma-nm: Remove myself from maintainer list 2015-10-23 14:29:46 +02:00
Vladimír Čunát
4917a4f8b3 Merge master into staging 2015-10-23 01:57:14 +02:00
Nikolay Amiantov
1c48e74a33 Merge pull request #8299 from abbradar/steam-native
Steam: use native NixOS libraries instead of Steam Runtime
2015-10-20 17:07:29 +03:00
Tobias Geerinckx-Rice
15c964bf2e netsniff-ng 0.5.9-{106-g895377c -> 110-gfc4646b} 2015-10-19 18:19:00 +02:00
Nikolay Amiantov
cdc7e23e38 dropbear: pass LD_LIBRARY_PATH through 2015-10-18 18:41:11 +03:00
Nikolay Amiantov
919762e4bd dropbear: adopt 2015-10-18 18:41:03 +03:00
William A. Kennington III
50842f5ec1 curl: 7.44.0 -> 7.45.0 2015-10-17 11:54:13 -07:00
Anders Lundstedt
7fcad28102 zerotierone: 1.0.4 -> 1.0.5 2015-10-16 00:16:21 +02:00
Petar Bogdanovic
07372d04a2 install ripmime manual into share/man instead of man 2015-10-15 22:32:48 +02:00
William A. Kennington III
8a44a36ca4 Merge branch 'master.upstream' into staging.upstream 2015-10-15 10:22:28 -07:00
Nikolay Amiantov
25033c50e8 update-resolv-conf: 2014-10-03 -> 20141003 2015-10-15 17:07:39 +03:00
Vladimír Čunát
86cc3d32ac libsodium: split dev output, enableParallelBuilding 2015-10-14 14:27:08 +02:00
Vladimír Čunát
8e381b89a1 glib-networking: split the dev output
That's done to get rid of propagatedBuildInputs from regular closure.
Also references were fixed, mainly to its gio modules.
2015-10-13 20:18:56 +02:00
Vladimír Čunát
99e4371526 curl: split into multiple outputs
Also use pkgconfig to be safer and fix (some) referrers.
2015-10-13 20:18:48 +02:00
Vladimír Čunát
a6e4c87391 gtk3: split into multiple outputs
All references OK, hopefully. Seems surprisingly smooth.
2015-10-13 20:18:45 +02:00
Vladimír Čunát
91407a8bdf ncurses: split into multiple outputs
Some programs (e.g. tput) might better be moved somewhere else than
$dev/bin, but that can be improved later if need be.
2015-10-13 20:18:44 +02:00
Tobias Geerinckx-Rice
b36ac2c44a netsniff-ng 0.5.9-{98-gb3a9f17 -> 106-g895377c} 2015-10-13 20:07:18 +02:00
Domen Kožar
8567c5883b reaver-wps: set platforms 2015-10-13 14:45:52 +02:00
Pascal Wittmann
804d019c6a smbldap-tools: mark as broken
The build fails with the following error

  pod2man: unable to format smbldap-config.cmd
2015-10-12 13:11:12 +02:00
Pascal Wittmann
53a132a3a4 tgt: fix build
xsltproc tried to download docbook.xsl
2015-10-12 12:27:54 +02:00
Nikolay Amiantov
6cb8e04a5c networkmanager-0.9.8: add package 2015-10-10 14:26:41 +03:00
Pascal Wittmann
877c668e77 snabb: make meta.maintainers a list 2015-10-10 11:13:20 +02:00
Luke Gorrie
6c36809a89 snabb: Added Snabb Switch (v2015.10) in tools/networking
I have tested this manually with nix-env.
2015-10-08 10:11:06 +00:00
Eelco Dolstra
741bf840da Revert "Merge pull request #9543 from NixOS/staging.post-15.06"
This reverts commit f61176c539, reversing
changes made to a27ca029ee.

Conflicts:
	pkgs/development/libraries/ncurses/default.nix
2015-10-06 15:24:20 +02:00
Vladimír Čunát
bf7403f030 unbound: purge runtime dependency on python 2015-10-05 16:05:40 +02:00
Vladimír Čunát
6d86a93c43 libevent: split into multiple outputs
Hopefully all references are fixed.
2015-10-05 15:58:37 +02:00
Vladimír Čunát
38313d5d87 libxml2,libxslt: split into multiple outputs
Fixed all references, hopefully.
libxml2Python is slightly hacky now, but it seems to work.
2015-10-05 13:44:16 +02:00
Vladimír Čunát
252b3dcc87 unbound: split into multiple outputs 2015-10-05 10:53:30 +02:00
William A. Kennington III
86b5cecaae tinc_pre: 2015-07-22 -> 2015-09-25 2015-10-04 15:03:22 -07:00
Vladimír Čunát
551cce01ff network-manager: fix build after udev changes
It's missing libsystemd-login but only `udev` was in inputs...
2015-10-04 13:13:46 +02:00
Vladimír Čunát
f361938b21 Merge staging into closure-size
This makes gcc5 the default builder, etc.
2015-10-03 15:23:13 +02:00
Vladimír Čunát
5227fb1dd5 Merge commit staging+systemd into closure-size
Many non-conflict problems weren't (fully) resolved in this commit yet.
2015-10-03 13:33:37 +02:00
William A. Kennington III
ed71860928 Merge branch 'staging.upstream' into staging.post-15.06 2015-10-02 12:41:04 -07:00
Vladimír Čunát
33373d939a Merge: staging with systemd 2015-10-02 10:24:41 +02:00
Eelco Dolstra
b23038dd80 Merge remote-tracking branch 'origin/master' into systemd-219 2015-10-01 14:17:46 +02:00
Jude Taylor
333ed12c70 darwin purity: aria2 2015-09-30 00:36:35 -07:00
Eelco Dolstra
9e38b81af8 wget: Reduce closure size
This reduces the wget closure from 377 MiB to 49 MiB, which is in
particular good for EC2 images, since they include wget. The main
changes:

* Disable libpsl - this isn't very big itself, but it pulls in libicu,
  which is 36 MiB. It also adds build-time dependencies on packages
  like gtk-doc, dblatex, tetex etc.

* Replace gnutls with openssl. The former pulls in runtime
  dependencies like guile, python, binutils, gcc, ncurses, etc.
2015-09-28 22:29:50 +02:00
Lengyel Balázs
ee70a5654d network-manager 1.0.2 -> 1.0.6
Updated everything except network-manager-openconnect, as there is no newer version
2015-09-28 14:04:42 +02:00
Thomas Tuegel
3d6110d221 deprecate kde414.networkmanagement 2015-09-27 15:08:49 -05:00
Thomas Tuegel
2e0589b4ca kde414: build with kdelibs-4.14.12
Upstream changes to the build system required adjusting many packages'
dependencies. On the Nixpkgs side, we no longer propagate the dependency
on cmake (to reduce closure size), so downstream dependencies had to be
adjusted for most packages that depend on kdelibs.
2015-09-27 15:08:12 -05:00
Edward Tjörnhammar
4dda511ec3 Merge pull request #10060 from matthiasbeyer/update-bwm_ng
bwm_ng: 0.6 -> 0.6.1
2015-09-26 08:56:41 +02:00
Matthias Beyer
8ca7e4c2d1 bwm_ng: Move version to own variable 2015-09-25 15:33:42 +02:00