Commit Graph

6190 Commits

Author SHA1 Message Date
Joachim Fasting
e8007c0e89
linux_4_9: patch for CVE-2017-5986
Seems fairly low impact[1] but we might as well patch it until a new 4.9
version is released

[1]: https://bugzilla.redhat.com/show_bug.cgi?id=1420276
2017-02-17 19:11:30 +01:00
Joachim Fasting
73577a2b05
linux_4_9: 4.9.9 -> 4.9.10 2017-02-17 19:11:24 +01:00
Robin Gloster
643703366d
pam_ssh_agent_auth: 0.9.5 -> 0.10.3 2017-02-17 00:12:01 +01:00
Robin Gloster
96b4d69136
openisns: 0.95 -> 0.97 2017-02-17 00:11:58 +01:00
Robin Gloster
df58ed2f13
hostapd: 2.5 -> 2.6 2017-02-17 00:11:37 +01:00
Robin Gloster
31ff2ac057
systemd: add patch to fix docker
843d5baf6a

"don't use the unified hierarchy for the systemd cgroup yet"

fixes #22472
2017-02-16 23:56:27 +01:00
Joachim Fasting
bc2f53fd29
grsecurity: 4.9.8-201702071801 -> 4.9.10-201702152052 2017-02-16 14:51:25 +01:00
Jörg Thalheim
a674dea675
iputils: 20151218 -> 20161105
most notable change is the removal of tracepath6 and ping6
2017-02-15 11:26:17 +01:00
Joachim Fasting
9d8a0f8dd8
pax-utils: 1.1.7 -> 1.2.2
Fixes at least a few out-of-bounds reads[1][2]

[1]: http://seclists.org/oss-sec/2017/q1/256
[2]: http://seclists.org/oss-sec/2017/q1/308
2017-02-15 05:37:50 +01:00
Eelco Dolstra
314dd9215b Merge pull request #16654 from awakenetworks/parnell/setcap-wrappers
Adding setcap-wrapper functionality to Nix
2017-02-14 16:25:06 +01:00
Graham Christensen
cc442cbdba Merge pull request #22786 from zx2c4/patch-4
wireguard: 0.0.20170213 -> 0.0.20170214
2017-02-14 08:20:41 -05:00
Graham Christensen
1a9707de24
wireguard: update description to describe its current state 2017-02-14 08:20:19 -05:00
Jason A. Donenfeld
36d50978b2 wireguard: 0.0.20170213 -> 0.0.20170214
This has a quick fix for old bash.
2017-02-14 12:08:58 +01:00
Tim Steinbach
0ec9e695c8
linux: 3.10.104 -> 3.10.105 2017-02-13 18:47:01 -05:00
Parnell Springmeyer
9e36a58649
Merging against upstream master 2017-02-13 17:16:28 -06:00
Jason A. Donenfeld
2ad8face66 wireguard: 0.0.20170115 -> 0.0.20170213 (#22759) 2017-02-13 22:20:49 +01:00
Eelco Dolstra
c71a893334
Revert "Use looser 9pfs caching in VM tests/builds"
This reverts commit bbd03e236a.
2017-02-13 14:38:19 +01:00
Eelco Dolstra
4af79a7331
Revert "linux: Apply 9p veryloose patch to 4.9"
This reverts commit a82810c7a7.

Fixes #22695.
2017-02-13 12:16:39 +01:00
Jude Taylor
c3e3b6a19a
nvidia-x11: fix parallel building variable name 2017-02-11 14:29:37 -08:00
Frederik Rietdijk
bab37c73ac nvidia-x11: undo parallel building
In ffc498c490 -j$NIX_BUILD_JOBS was added.
Somehow this caused my machine to run many many more parallel jobs than
it was supposed to, freezing the system.

If you don't experience this, feel free to revert.
2017-02-11 15:50:22 +01:00
Matt McHenry
166464b5ad patch ati-drivers for kernel 4.9
uses patch from https://github.com/imageguy/fglrx-for-Fedora/blob/master/fglrx_kernel_4.9.diff
2017-02-11 12:57:53 +02:00
Nikolay Amiantov
442b4d65c3 Merge pull request #22304 from abbradar/nvidia
Refactor NVidia drivers
2017-02-10 23:53:34 +03:00
Tuomas Tynkkynen
182a369ab9 sssd: Cleanup a bit 2017-02-10 20:12:00 +02:00
Jörg Thalheim
3455bd6f36
android-udev-rules: 20170202 -> 20170208 2017-02-09 22:23:52 +01:00
Franz Pletz
9dec33dc4f
linux: 4.9.8 -> 4.9.9 2017-02-09 16:27:29 +01:00
Franz Pletz
9d8248517e
linux: 4.4.47 -> 4.4.48 2017-02-09 16:27:16 +01:00
Tuomas Tynkkynen
05605b41d8 autofs: Some cleanup
The --with-openldap and --with-sasl flags passed here are actually wrong
as they don't point to the dev outputs of the packages. Anyway, autoconf
recognizes the packages as they are in buildInputs.

getBin is generally not needed - binaries can always be referred as
${foo}/bin/bar regardless of whether the package is multiple-output.

meta.version is unnecessary.
2017-02-09 02:50:48 +02:00
Franz Pletz
dced724c00
linux_3_18: remove due to EOL 2017-02-08 23:50:59 +01:00
Nikolay Amiantov
2fd2fcf54d linuxPackages.nvidia_x11: refactor, build more from source
* Use libglvnd;
* Compile nvidia-settings, nvidia-persistenced from source;
* Generalize builder.
2017-02-08 16:57:46 +03:00
Joachim Fasting
bd46a375df
grsecurity: 4.9.8-201702060653 -> 201702071801 2017-02-08 01:31:18 +01:00
Vladimír Čunát
ce9d30e734
Merge #22241: amdgpu-pro: 16.50 -> 16.60 2017-02-07 20:49:58 +01:00
Kier Davis
83865b2c6c intel-ocl: init at r4.0-59481 2017-02-07 15:20:30 +03:00
aszlig
cf94e18627
linux-testing: 4.10-rc4 -> 4.10-rc7
Tested via building the linux_testing attribute only, not in production.

Verified unpacked tarball with GnuPG:

gpg: Signature made Mon 06 Feb 2017 12:21:50 AM CET
gpg:                using RSA key 79BE3E4300411886
gpg: Good signature from "Linus Torvalds <torvalds@linux-foundation.org>" [unknown]
Primary key fingerprint: ABAF 11C6 5A29 70B1 30AB  E3C4 79BE 3E43 0041 1886

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2017-02-07 10:23:50 +01:00
Joachim Fasting
9611a60708
jfbview: 0.5.2 -> 0.5.3, fixes build
Also convert tabs to spaces
2017-02-07 04:48:33 +01:00
David McFarland
47c166fe05 amdgpu-pro: 16.50 -> 16.60 2017-02-06 23:16:21 -04:00
Joachim Fasting
0d422c5db5
grsecurity: 4.8.17-201701151620 -> 4.9.8-201702060653
The first release in the 4.9 branch.

I've also migrated my update scripts to SHA-512 so that'll
be the hash of choice for grsec packages going forward.
2017-02-06 15:49:34 +01:00
Franz Pletz
01cf43a389
firmwareLinuxNonfree: 2016-07-12 -> 2017-02-06 2017-02-06 15:11:04 +01:00
Jörg Thalheim
2c96395272
android-udev-rules: 20170125 -> 20170202 2017-02-06 13:21:50 +01:00
Nikolay Amiantov
90bc1a8595 Merge pull request #22353 from abbradar/bluetooth
Bluetooth improvements
2017-02-05 13:18:48 +03:00
Joachim F
e480521c5b Merge pull request #22443 from rnhmjoj/btfs
btfs: 2.12 -> 2.13
2017-02-05 01:28:51 +01:00
Vladimír Čunát
a2c867fd39
Merge branch 'staging' 2017-02-04 21:02:46 +01:00
Vladimír Čunát
73d798549f
protobuf, perf: fix my bad condition on gcc version 2017-02-04 20:58:47 +01:00
rnhmjoj
4ee66dbc7c
btfs: 2.12 -> 2.13 2017-02-04 18:51:44 +01:00
Franz Pletz
05152bd5b3 Merge pull request #22428 from Mic92/zfs
zfs: 0.6.5.8 -> 0.6.5.9 (linux 4.9 support)
2017-02-04 16:33:53 +01:00
Tim Steinbach
949f9aff1d
linux: 3.12.69 -> 3.12.70 2017-02-04 09:18:50 -05:00
Tim Steinbach
7f69dc48b9
linux: 4.9.7 -> 4.9.8 2017-02-04 09:09:19 -05:00
Tim Steinbach
17b5ae4fe4
linux: 4.4.46 -> 4.4.47 2017-02-04 09:09:02 -05:00
Jörg Thalheim
efd77e06c3
linuxPackages.zfs: 0.6.5.8 -> 0.6.5.9 2017-02-04 10:33:16 +01:00
Jörg Thalheim
0ca7e01bed
kernelPackages.spl: 0.6.5.8 -> 0.6.5.9 2017-02-04 10:33:11 +01:00
Tim Steinbach
26e5b42106
linux: 4.4.45 -> 4.4.46 2017-02-03 18:36:50 -05:00
Jörg Thalheim
a8e32d68b5 Merge pull request #22412 from makefu/exfat-nofuse
exfat-nofuse: init at 2017-01-03
2017-02-03 20:07:26 +01:00
makefu
26a27e4657
exfat-nofuse: init at 2017-01-03 2017-02-03 19:49:27 +01:00
Nikolay Amiantov
ede8adc441 tcp_wrappers: 7.6.q -> 7.6.q-26
I've accidentially taken old Debian patchset. Maybe this also helps with Darwin failures.
2017-02-03 21:13:36 +03:00
Nikolay Amiantov
230c97c944 Merge pull request #22303 from abbradar/nfs4
NFS improvements
2017-02-03 20:04:25 +03:00
Vladimír Čunát
2ba076e99c
Merge branch 'master' into staging
>11k more build jobs on master, just for Linux :-/
This way staging will never catch up.
2017-02-03 15:32:08 +01:00
Michael Raskin
d6710e3d66 shadow: 4.2.1 -> 4.4 2017-02-03 13:14:39 +01:00
Michael Raskin
4101f1fd18 iptables: 1.6.0 -> 1.6.1 2017-02-03 13:14:39 +01:00
Vladimír Čunát
e7c968fbf2
linuxPackages*.perf: fix build with default gcc
Broken since 9842a107.
2017-02-03 12:38:18 +01:00
Vladimír Čunát
adab4cd58b
Merge branch 'master' into staging 2017-02-03 11:47:38 +01:00
Pascal Bach
d1738c19bb kernel: 4.9.6 -> 4.9.7 2017-02-02 21:08:24 +01:00
Robin Gloster
a0aacdd199
lxc: 2.0.6 -> 2.0.7 2017-02-02 18:59:07 +01:00
Michael Raskin
2973d35b9a sysdig: 0.13.0 -> 0.14.0 2017-02-02 11:12:16 +01:00
Robin Gloster
8a0d1bcf8b
systemd: add patches to fix i686 booting 2017-02-02 01:12:55 +01:00
Nikolay Amiantov
496476be4e bluez4: reintroduce to nixpkgs
It's still needed by KDE4. It was there, just unreferenced from all-packages.
2017-02-02 00:52:54 +03:00
Daiderd Jordan
957ad8e3a1 Merge pull request #22301 from LnL7/khd
khd: 1.1.4 -> 2.0.0
2017-02-01 22:16:47 +01:00
Michael Raskin
a9e55a2a8e firejail: 0.9.44.4 -> 0.9.44.8 2017-02-01 19:28:45 +01:00
Nikolay Amiantov
58d6b40893 nfs-utils: 1.3.3 -> 2.1.1
Use upstream systemd units, add kerberos support.
2017-02-01 19:47:33 +03:00
Nikolay Amiantov
469546f46e tcp_wrappers: 7.6 -> 7.6.q 2017-02-01 02:45:44 +03:00
Nikolay Amiantov
6991e7930e keyutils: split outputs 2017-02-01 02:45:28 +03:00
Daiderd Jordan
7bd49cded4
khd: 1.1.4 -> 2.0.0 2017-01-30 22:43:54 +01:00
Vladimír Čunát
9cd2dbc569
Merge branch 'master' into staging
Hopefully this will fix the mass abortion on Hydra;
restarting the jobs didn't help.
2017-01-30 18:39:36 +01:00
Eelco Dolstra
c20cc6d0b3
Excise use of importJSON
Putting information in external JSON files is IMHO not an improvement
over the idiomatic style of Nix expressions. The use of JSON doesn't
add anything over Nix expressions (in fact it removes expressive
power). And scattering package info over lots of little files makes
packages less readable over having the info in one file.
2017-01-30 11:44:08 +01:00
Parnell Springmeyer
6777e6f812
Merging with upstream 2017-01-29 05:54:01 -06:00
Parnell Springmeyer
4aa0923009
Getting rid of the var indirection and using a bin path instead 2017-01-29 04:11:01 -06:00
Parnell Springmeyer
e92b8402b0
Addressing PR feedback 2017-01-28 20:48:03 -08:00
Jude Taylor
ffc498c490
nvidia_x11: add missing vulkan files 2017-01-28 19:47:25 -08:00
Tuomas Tynkkynen
424cfe7686 Merge remote-tracking branch 'upstream/master' into staging 2017-01-29 02:16:29 +02:00
Tuomas Tynkkynen
2f38d1fd1f kmscube: init at 2016-09-19 2017-01-29 02:08:04 +02:00
Kevin Cox
6dcc4623ac
libnl: 3.2.23 -> 2.3.29 to revert accidental downgrade.
libnl was accidentally downgrades to 2.3.29 in
8d342d20b5 instead of being upgraded to
2.3.29 so this fixes that.
2017-01-27 22:41:44 +00:00
Jörg Thalheim
c2a7c448da
android-udev-rules: 20170109 -> 20170125 2017-01-27 22:37:12 +01:00
Alexey Shmalko
e799e7b5d6
musl: build musl-gcc
The build of the wrapper was disabled in 93e44be (#21023) and is not
related to the CVE itself. (See comments in the mentioned PR.)
2017-01-27 21:54:27 +02:00
Tim Steinbach
99c9252e3f
kernel: 4.9.5 -> 4.9.6 2017-01-26 19:56:26 -05:00
Tim Steinbach
4345dfb5ba
kernel: 4.4.44 -> 4.4.45 2017-01-26 19:55:58 -05:00
Tuomas Tynkkynen
be0e48e48f Merge remote-tracking branch 'upstream/master' into staging 2017-01-27 02:18:44 +02:00
Robin Gloster
972749f1d4
systemd: fix repository url
Left-over from testing, sorry..
2017-01-26 17:57:10 +01:00
Robin Gloster
a38f1911d3
systemd: 231 -> 232
Includes adding some more upstream units and removing obsolete (-.slice) ones.
2017-01-26 17:52:52 +01:00
Tuomas Tynkkynen
e2a2f6d595 Merge pull request #22117 from dezgeg/aarch64-for-merge
Aarch64 (ARM64) support
2017-01-26 17:52:28 +02:00
Vladimír Čunát
6973c7739e
Merge branch 'master' into staging
There were some larger rebuilds because of security.
2017-01-26 16:49:41 +01:00
Parnell Springmeyer
a26a796d5c
Merging against master - updating smokingpig, rebase was going to be messy 2017-01-26 02:00:04 -08:00
Parnell Springmeyer
025555d7f1
More fixes and improvements 2017-01-26 00:05:40 -08:00
Franz Pletz
4276844cb0
powerstat: 0.2.10 -> 0.2.11 2017-01-26 03:52:50 +01:00
Franz Pletz
f4833ed484
smemstat: 0.01.14 -> 0.01.16 2017-01-26 03:52:50 +01:00
Franz Pletz
d14c7bf046
eventstat: 0.03.02 -> 0.03.03 2017-01-26 03:52:48 +01:00
Franz Pletz
96c35ad06a
fnotifystat: 0.01.14 -> 0.01.16 2017-01-26 03:52:47 +01:00
Franz Pletz
243272cd2e
forkstat: 0.01.14 -> 0.01.16 2017-01-26 03:52:47 +01:00
Graham Christensen
8d342d20b5
libnl: 3.2.28 -> 3.2.29 for CVE-2017-0386 2017-01-25 20:53:18 -05:00
Robin Gloster
9842a107da
linuxPackages.perf: fix build with gcc6 2017-01-25 20:12:38 +01:00
Parnell Springmeyer
bae00e8aa8
setcap-wrapper: Merging with upstream master and resolving conflicts 2017-01-25 11:08:05 -08:00
Franz Pletz
b9b95aa4d4 Merge pull request #22034 from mayflower/conntrack-helpers
Disable conntrack helper autoloading by default
2017-01-25 14:18:41 +01:00
Tuomas Tynkkynen
2bfd83ab6d platforms.nix: Add some aarch64-specific kernel config
This makes Raspberry Pi 3 and some Cavium ThunderX server hardware work.
2017-01-25 02:14:46 +02:00