Joachim Fasting
e8007c0e89
linux_4_9: patch for CVE-2017-5986
...
Seems fairly low impact[1] but we might as well patch it until a new 4.9
version is released
[1]: https://bugzilla.redhat.com/show_bug.cgi?id=1420276
2017-02-17 19:11:30 +01:00
Joachim Fasting
73577a2b05
linux_4_9: 4.9.9 -> 4.9.10
2017-02-17 19:11:24 +01:00
Robin Gloster
643703366d
pam_ssh_agent_auth: 0.9.5 -> 0.10.3
2017-02-17 00:12:01 +01:00
Robin Gloster
96b4d69136
openisns: 0.95 -> 0.97
2017-02-17 00:11:58 +01:00
Robin Gloster
df58ed2f13
hostapd: 2.5 -> 2.6
2017-02-17 00:11:37 +01:00
Robin Gloster
31ff2ac057
systemd: add patch to fix docker
...
843d5baf6a
"don't use the unified hierarchy for the systemd cgroup yet"
fixes #22472
2017-02-16 23:56:27 +01:00
Joachim Fasting
bc2f53fd29
grsecurity: 4.9.8-201702071801 -> 4.9.10-201702152052
2017-02-16 14:51:25 +01:00
Jörg Thalheim
a674dea675
iputils: 20151218 -> 20161105
...
most notable change is the removal of tracepath6 and ping6
2017-02-15 11:26:17 +01:00
Joachim Fasting
9d8a0f8dd8
pax-utils: 1.1.7 -> 1.2.2
...
Fixes at least a few out-of-bounds reads[1][2]
[1]: http://seclists.org/oss-sec/2017/q1/256
[2]: http://seclists.org/oss-sec/2017/q1/308
2017-02-15 05:37:50 +01:00
Eelco Dolstra
314dd9215b
Merge pull request #16654 from awakenetworks/parnell/setcap-wrappers
...
Adding setcap-wrapper functionality to Nix
2017-02-14 16:25:06 +01:00
Graham Christensen
cc442cbdba
Merge pull request #22786 from zx2c4/patch-4
...
wireguard: 0.0.20170213 -> 0.0.20170214
2017-02-14 08:20:41 -05:00
Graham Christensen
1a9707de24
wireguard: update description to describe its current state
2017-02-14 08:20:19 -05:00
Jason A. Donenfeld
36d50978b2
wireguard: 0.0.20170213 -> 0.0.20170214
...
This has a quick fix for old bash.
2017-02-14 12:08:58 +01:00
Tim Steinbach
0ec9e695c8
linux: 3.10.104 -> 3.10.105
2017-02-13 18:47:01 -05:00
Parnell Springmeyer
9e36a58649
Merging against upstream master
2017-02-13 17:16:28 -06:00
Jason A. Donenfeld
2ad8face66
wireguard: 0.0.20170115 -> 0.0.20170213 ( #22759 )
2017-02-13 22:20:49 +01:00
Eelco Dolstra
c71a893334
Revert "Use looser 9pfs caching in VM tests/builds"
...
This reverts commit bbd03e236a
.
2017-02-13 14:38:19 +01:00
Eelco Dolstra
4af79a7331
Revert "linux: Apply 9p veryloose patch to 4.9"
...
This reverts commit a82810c7a7
.
Fixes #22695 .
2017-02-13 12:16:39 +01:00
Jude Taylor
c3e3b6a19a
nvidia-x11: fix parallel building variable name
2017-02-11 14:29:37 -08:00
Frederik Rietdijk
bab37c73ac
nvidia-x11: undo parallel building
...
In ffc498c490
-j$NIX_BUILD_JOBS was added.
Somehow this caused my machine to run many many more parallel jobs than
it was supposed to, freezing the system.
If you don't experience this, feel free to revert.
2017-02-11 15:50:22 +01:00
Matt McHenry
166464b5ad
patch ati-drivers for kernel 4.9
...
uses patch from https://github.com/imageguy/fglrx-for-Fedora/blob/master/fglrx_kernel_4.9.diff
2017-02-11 12:57:53 +02:00
Nikolay Amiantov
442b4d65c3
Merge pull request #22304 from abbradar/nvidia
...
Refactor NVidia drivers
2017-02-10 23:53:34 +03:00
Tuomas Tynkkynen
182a369ab9
sssd: Cleanup a bit
2017-02-10 20:12:00 +02:00
Jörg Thalheim
3455bd6f36
android-udev-rules: 20170202 -> 20170208
2017-02-09 22:23:52 +01:00
Franz Pletz
9dec33dc4f
linux: 4.9.8 -> 4.9.9
2017-02-09 16:27:29 +01:00
Franz Pletz
9d8248517e
linux: 4.4.47 -> 4.4.48
2017-02-09 16:27:16 +01:00
Tuomas Tynkkynen
05605b41d8
autofs: Some cleanup
...
The --with-openldap and --with-sasl flags passed here are actually wrong
as they don't point to the dev outputs of the packages. Anyway, autoconf
recognizes the packages as they are in buildInputs.
getBin is generally not needed - binaries can always be referred as
${foo}/bin/bar regardless of whether the package is multiple-output.
meta.version is unnecessary.
2017-02-09 02:50:48 +02:00
Franz Pletz
dced724c00
linux_3_18: remove due to EOL
2017-02-08 23:50:59 +01:00
Nikolay Amiantov
2fd2fcf54d
linuxPackages.nvidia_x11: refactor, build more from source
...
* Use libglvnd;
* Compile nvidia-settings, nvidia-persistenced from source;
* Generalize builder.
2017-02-08 16:57:46 +03:00
Joachim Fasting
bd46a375df
grsecurity: 4.9.8-201702060653 -> 201702071801
2017-02-08 01:31:18 +01:00
Vladimír Čunát
ce9d30e734
Merge #22241 : amdgpu-pro: 16.50 -> 16.60
2017-02-07 20:49:58 +01:00
Kier Davis
83865b2c6c
intel-ocl: init at r4.0-59481
2017-02-07 15:20:30 +03:00
aszlig
cf94e18627
linux-testing: 4.10-rc4 -> 4.10-rc7
...
Tested via building the linux_testing attribute only, not in production.
Verified unpacked tarball with GnuPG:
gpg: Signature made Mon 06 Feb 2017 12:21:50 AM CET
gpg: using RSA key 79BE3E4300411886
gpg: Good signature from "Linus Torvalds <torvalds@linux-foundation.org>" [unknown]
Primary key fingerprint: ABAF 11C6 5A29 70B1 30AB E3C4 79BE 3E43 0041 1886
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2017-02-07 10:23:50 +01:00
Joachim Fasting
9611a60708
jfbview: 0.5.2 -> 0.5.3, fixes build
...
Also convert tabs to spaces
2017-02-07 04:48:33 +01:00
David McFarland
47c166fe05
amdgpu-pro: 16.50 -> 16.60
2017-02-06 23:16:21 -04:00
Joachim Fasting
0d422c5db5
grsecurity: 4.8.17-201701151620 -> 4.9.8-201702060653
...
The first release in the 4.9 branch.
I've also migrated my update scripts to SHA-512 so that'll
be the hash of choice for grsec packages going forward.
2017-02-06 15:49:34 +01:00
Franz Pletz
01cf43a389
firmwareLinuxNonfree: 2016-07-12 -> 2017-02-06
2017-02-06 15:11:04 +01:00
Jörg Thalheim
2c96395272
android-udev-rules: 20170125 -> 20170202
2017-02-06 13:21:50 +01:00
Nikolay Amiantov
90bc1a8595
Merge pull request #22353 from abbradar/bluetooth
...
Bluetooth improvements
2017-02-05 13:18:48 +03:00
Joachim F
e480521c5b
Merge pull request #22443 from rnhmjoj/btfs
...
btfs: 2.12 -> 2.13
2017-02-05 01:28:51 +01:00
Vladimír Čunát
a2c867fd39
Merge branch 'staging'
2017-02-04 21:02:46 +01:00
Vladimír Čunát
73d798549f
protobuf, perf: fix my bad condition on gcc version
2017-02-04 20:58:47 +01:00
rnhmjoj
4ee66dbc7c
btfs: 2.12 -> 2.13
2017-02-04 18:51:44 +01:00
Franz Pletz
05152bd5b3
Merge pull request #22428 from Mic92/zfs
...
zfs: 0.6.5.8 -> 0.6.5.9 (linux 4.9 support)
2017-02-04 16:33:53 +01:00
Tim Steinbach
949f9aff1d
linux: 3.12.69 -> 3.12.70
2017-02-04 09:18:50 -05:00
Tim Steinbach
7f69dc48b9
linux: 4.9.7 -> 4.9.8
2017-02-04 09:09:19 -05:00
Tim Steinbach
17b5ae4fe4
linux: 4.4.46 -> 4.4.47
2017-02-04 09:09:02 -05:00
Jörg Thalheim
efd77e06c3
linuxPackages.zfs: 0.6.5.8 -> 0.6.5.9
2017-02-04 10:33:16 +01:00
Jörg Thalheim
0ca7e01bed
kernelPackages.spl: 0.6.5.8 -> 0.6.5.9
2017-02-04 10:33:11 +01:00
Tim Steinbach
26e5b42106
linux: 4.4.45 -> 4.4.46
2017-02-03 18:36:50 -05:00
Jörg Thalheim
a8e32d68b5
Merge pull request #22412 from makefu/exfat-nofuse
...
exfat-nofuse: init at 2017-01-03
2017-02-03 20:07:26 +01:00
makefu
26a27e4657
exfat-nofuse: init at 2017-01-03
2017-02-03 19:49:27 +01:00
Nikolay Amiantov
ede8adc441
tcp_wrappers: 7.6.q -> 7.6.q-26
...
I've accidentially taken old Debian patchset. Maybe this also helps with Darwin failures.
2017-02-03 21:13:36 +03:00
Nikolay Amiantov
230c97c944
Merge pull request #22303 from abbradar/nfs4
...
NFS improvements
2017-02-03 20:04:25 +03:00
Vladimír Čunát
2ba076e99c
Merge branch 'master' into staging
...
>11k more build jobs on master, just for Linux :-/
This way staging will never catch up.
2017-02-03 15:32:08 +01:00
Michael Raskin
d6710e3d66
shadow: 4.2.1 -> 4.4
2017-02-03 13:14:39 +01:00
Michael Raskin
4101f1fd18
iptables: 1.6.0 -> 1.6.1
2017-02-03 13:14:39 +01:00
Vladimír Čunát
e7c968fbf2
linuxPackages*.perf: fix build with default gcc
...
Broken since 9842a107
.
2017-02-03 12:38:18 +01:00
Vladimír Čunát
adab4cd58b
Merge branch 'master' into staging
2017-02-03 11:47:38 +01:00
Pascal Bach
d1738c19bb
kernel: 4.9.6 -> 4.9.7
2017-02-02 21:08:24 +01:00
Robin Gloster
a0aacdd199
lxc: 2.0.6 -> 2.0.7
2017-02-02 18:59:07 +01:00
Michael Raskin
2973d35b9a
sysdig: 0.13.0 -> 0.14.0
2017-02-02 11:12:16 +01:00
Robin Gloster
8a0d1bcf8b
systemd: add patches to fix i686 booting
2017-02-02 01:12:55 +01:00
Nikolay Amiantov
496476be4e
bluez4: reintroduce to nixpkgs
...
It's still needed by KDE4. It was there, just unreferenced from all-packages.
2017-02-02 00:52:54 +03:00
Daiderd Jordan
957ad8e3a1
Merge pull request #22301 from LnL7/khd
...
khd: 1.1.4 -> 2.0.0
2017-02-01 22:16:47 +01:00
Michael Raskin
a9e55a2a8e
firejail: 0.9.44.4 -> 0.9.44.8
2017-02-01 19:28:45 +01:00
Nikolay Amiantov
58d6b40893
nfs-utils: 1.3.3 -> 2.1.1
...
Use upstream systemd units, add kerberos support.
2017-02-01 19:47:33 +03:00
Nikolay Amiantov
469546f46e
tcp_wrappers: 7.6 -> 7.6.q
2017-02-01 02:45:44 +03:00
Nikolay Amiantov
6991e7930e
keyutils: split outputs
2017-02-01 02:45:28 +03:00
Daiderd Jordan
7bd49cded4
khd: 1.1.4 -> 2.0.0
2017-01-30 22:43:54 +01:00
Vladimír Čunát
9cd2dbc569
Merge branch 'master' into staging
...
Hopefully this will fix the mass abortion on Hydra;
restarting the jobs didn't help.
2017-01-30 18:39:36 +01:00
Eelco Dolstra
c20cc6d0b3
Excise use of importJSON
...
Putting information in external JSON files is IMHO not an improvement
over the idiomatic style of Nix expressions. The use of JSON doesn't
add anything over Nix expressions (in fact it removes expressive
power). And scattering package info over lots of little files makes
packages less readable over having the info in one file.
2017-01-30 11:44:08 +01:00
Parnell Springmeyer
6777e6f812
Merging with upstream
2017-01-29 05:54:01 -06:00
Parnell Springmeyer
4aa0923009
Getting rid of the var indirection and using a bin path instead
2017-01-29 04:11:01 -06:00
Parnell Springmeyer
e92b8402b0
Addressing PR feedback
2017-01-28 20:48:03 -08:00
Jude Taylor
ffc498c490
nvidia_x11: add missing vulkan files
2017-01-28 19:47:25 -08:00
Tuomas Tynkkynen
424cfe7686
Merge remote-tracking branch 'upstream/master' into staging
2017-01-29 02:16:29 +02:00
Tuomas Tynkkynen
2f38d1fd1f
kmscube: init at 2016-09-19
2017-01-29 02:08:04 +02:00
Kevin Cox
6dcc4623ac
libnl: 3.2.23 -> 2.3.29 to revert accidental downgrade.
...
libnl was accidentally downgrades to 2.3.29 in
8d342d20b5
instead of being upgraded to
2.3.29 so this fixes that.
2017-01-27 22:41:44 +00:00
Jörg Thalheim
c2a7c448da
android-udev-rules: 20170109 -> 20170125
2017-01-27 22:37:12 +01:00
Alexey Shmalko
e799e7b5d6
musl: build musl-gcc
...
The build of the wrapper was disabled in 93e44be (#21023 ) and is not
related to the CVE itself. (See comments in the mentioned PR.)
2017-01-27 21:54:27 +02:00
Tim Steinbach
99c9252e3f
kernel: 4.9.5 -> 4.9.6
2017-01-26 19:56:26 -05:00
Tim Steinbach
4345dfb5ba
kernel: 4.4.44 -> 4.4.45
2017-01-26 19:55:58 -05:00
Tuomas Tynkkynen
be0e48e48f
Merge remote-tracking branch 'upstream/master' into staging
2017-01-27 02:18:44 +02:00
Robin Gloster
972749f1d4
systemd: fix repository url
...
Left-over from testing, sorry..
2017-01-26 17:57:10 +01:00
Robin Gloster
a38f1911d3
systemd: 231 -> 232
...
Includes adding some more upstream units and removing obsolete (-.slice) ones.
2017-01-26 17:52:52 +01:00
Tuomas Tynkkynen
e2a2f6d595
Merge pull request #22117 from dezgeg/aarch64-for-merge
...
Aarch64 (ARM64) support
2017-01-26 17:52:28 +02:00
Vladimír Čunát
6973c7739e
Merge branch 'master' into staging
...
There were some larger rebuilds because of security.
2017-01-26 16:49:41 +01:00
Parnell Springmeyer
a26a796d5c
Merging against master - updating smokingpig, rebase was going to be messy
2017-01-26 02:00:04 -08:00
Parnell Springmeyer
025555d7f1
More fixes and improvements
2017-01-26 00:05:40 -08:00
Franz Pletz
4276844cb0
powerstat: 0.2.10 -> 0.2.11
2017-01-26 03:52:50 +01:00
Franz Pletz
f4833ed484
smemstat: 0.01.14 -> 0.01.16
2017-01-26 03:52:50 +01:00
Franz Pletz
d14c7bf046
eventstat: 0.03.02 -> 0.03.03
2017-01-26 03:52:48 +01:00
Franz Pletz
96c35ad06a
fnotifystat: 0.01.14 -> 0.01.16
2017-01-26 03:52:47 +01:00
Franz Pletz
243272cd2e
forkstat: 0.01.14 -> 0.01.16
2017-01-26 03:52:47 +01:00
Graham Christensen
8d342d20b5
libnl: 3.2.28 -> 3.2.29 for CVE-2017-0386
2017-01-25 20:53:18 -05:00
Robin Gloster
9842a107da
linuxPackages.perf: fix build with gcc6
2017-01-25 20:12:38 +01:00
Parnell Springmeyer
bae00e8aa8
setcap-wrapper: Merging with upstream master and resolving conflicts
2017-01-25 11:08:05 -08:00
Franz Pletz
b9b95aa4d4
Merge pull request #22034 from mayflower/conntrack-helpers
...
Disable conntrack helper autoloading by default
2017-01-25 14:18:41 +01:00
Tuomas Tynkkynen
2bfd83ab6d
platforms.nix: Add some aarch64-specific kernel config
...
This makes Raspberry Pi 3 and some Cavium ThunderX server hardware work.
2017-01-25 02:14:46 +02:00