Damien Cassou
54867b64b4
Merge pull request #17471 from DamienCassou/offlineimap-7.0.4
...
offlineimap: 7.0.2 -> 7.0.4
2016-08-04 08:33:05 +02:00
Robin Gloster
5268c44b0d
Merge pull request #17498 from aneeshusa/remove-boost-dependency-for-mosh
...
mosh: remove boost dependency
2016-08-04 08:02:14 +02:00
Aneesh Agrawal
942aad7489
mosh: remove boost dependency
...
boost was removed from the mosh dependency requirements in 2012.
(It was only used from February and April 2012.)
2016-08-03 22:07:19 -04:00
Al Zohali
6e1f80eb9d
networkmanager_l2tp: fixup ( #17490 )
2016-08-03 23:47:42 +01:00
Tobias Geerinckx-Rice
e696c48333
gandi-cli: 0.18 -> 0.19
2016-08-03 20:05:40 +02:00
Damien Cassou
c4f53918cb
offlineimap: 7.0.2 -> 7.0.4
2016-08-03 09:00:12 +02:00
Tuomas Tynkkynen
21f17d69f6
treewide: Add lots of meta.platforms
...
Build-tested on x86_64 Linux & Mac.
2016-08-02 21:42:43 +03:00
Tuomas Tynkkynen
2258b21e4b
treewide: Add lots of platforms to packages with no meta
...
Build-tested on x86_64 Linux and on Darwin.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen
1bf5ded193
treewide: Lots of meta.hydraPlatforms -> meta.platforms
...
In all of these files, there is no meta.platforms but only
meta.hydraPlatforms, which doesn't seem to have any purpose except being
inconsistent.
2016-08-02 21:17:44 +03:00
Tuomas Tynkkynen
b96fe03484
treewide: Fix meta.platforms related typos
2016-08-02 21:17:44 +03:00
Joachim Fasting
8d02a631be
dnscrypt-proxy: 1.6.1 -> 1.7.0
...
No user-facing changes of particular note.
Full changelog at https://github.com/jedisct1/dnscrypt-proxy/releases/tag/1.7.0
2016-08-02 09:35:08 +02:00
Michael Raskin
9c15bb7031
Revert "libreoffice: reinstante and use curl 7.48 before the removal of a required feature. CVE's not fixed because of that decision: a Windows-specific DLL substitution and a mbedSSL/PolarSSL specific insufficient certificate validation"
...
This reverts commit 8fd84fcb87
.
While I was testing my solution, @obadz have committed a different and
hopefully a better one.
2016-08-01 17:32:10 +02:00
Michael Raskin
8fd84fcb87
libreoffice: reinstante and use curl 7.48 before the removal of a required feature. CVE's not fixed because of that decision: a Windows-specific DLL substitution and a mbedSSL/PolarSSL specific insufficient certificate validation
2016-08-01 17:22:41 +02:00
Frederik Rietdijk
ea6bd8fa79
py-unbound: fix evaluation
2016-08-01 10:19:48 +02:00
Frederik Rietdijk
8f9326ffd8
Merge pull request #17323 from arpa2/hashslinger
...
Hash-slinger: init at 2.7.0
2016-08-01 09:57:12 +02:00
Michiel Leenaars
c8f2d8dae0
py-unbound: init at 1.5.9
2016-08-01 09:51:33 +02:00
Miguel Madrid
fa03b541b2
curl: 7.47.1 -> 7.50.0 ( #17152 )
2016-07-30 21:38:06 +01:00
Jinjing Wang
c8f535b452
shadowsocks-libev: 2.4.7 -> 2.4.8 ( #17366 )
2016-07-30 01:20:56 +01:00
Rob Vermaas
9494b764d2
dd-agent: support jmx, needs a separate daemon nowadays.
...
(cherry picked from commit 1425a1f964adc2e2eb668810f3f158089035cd3d)
2016-07-29 12:42:07 +00:00
Damien Cassou
86393cfc20
Merge pull request #17301 from DamienCassou/offlineimap-7.0.1
...
offlineimap: 7.0.0 -> 7.0.2
2016-07-27 16:51:32 +02:00
Damien Cassou
b43df7a225
offlineimap: 7.0.0 -> 7.0.2
2016-07-27 16:50:37 +02:00
Joachim Fasting
7646bea560
dnscrypt-proxy: fix faulty use of platforms.allBut
...
In 63b6498aa0
I added a faulty
use of `platforms.allBut` causing dnscrypt-proxy to continue
being built (and failing) on OS X. D'oh!
2016-07-26 23:10:46 +02:00
José Romildo Malaquias
f2cdd55412
cmst: 2016.01.28 -> 2016.04.03 ( #17134 )
2016-07-25 20:32:42 +01:00
Arseniy Seroka
88a89dedc6
Merge pull request #17211 from DamienCassou/offlineimap-7.0.0
...
offlineimap: 6.7.0.2 -> 7.0.0
2016-07-24 15:45:00 +04:00
Tobias Geerinckx-Rice
7c84bd121a
dropbear: 2016.73 -> 2016.74
...
Security fixes:
- Message printout was vulnerable to format string injection
- dropbearconvert import of OpenSSH keys could run arbitrary code
as the local dropbearconvert user when parsing malicious key
files
- dbclient could run arbitrary code as the local dbclient user if
particular -m or -c arguments are provided
- dbclient or dropbear server could expose process memory to the
running user if compiled with DEBUG_TRACE and running with -v
Fixes:
- Fix port forwarding failure when connecting to domains that have
both IPv4 and IPv6 addresses. The bug was introduced in 2015.68
- Fix 100% CPU use while waiting for rekey to complete
2016-07-23 21:29:51 +02:00
Damien Cassou
0f6b69b46e
offlineimap: 6.7.0.2 -> 7.0.0
2016-07-23 18:59:01 +02:00
Tuomas Tynkkynen
77a73115cd
chrony: Tweak meta
...
- "repository" -> "repositories"
- reflow longDescription
2016-07-23 13:36:37 +03:00
Daiderd Jordan
e8343fbb38
Merge pull request #17137 from romildo/new.connman-notify
...
connman-notify: init at 2014-06-23
2016-07-23 00:36:11 +02:00
Graham Christensen
0cbea742ab
Merge pull request #17175 from DamienCassou/offlineimap-6.7.0.2
...
offlineimap: 6.7.0.1 -> 6.7.0.2
2016-07-22 15:44:42 +00:00
Damien Cassou
24e632b242
offlineimap: 6.7.0.1 -> 6.7.0.2
2016-07-22 17:12:57 +02:00
Tobias Geerinckx-Rice
0d7da216be
Merge pull request #17166 from peterhoeg/bully
...
bully: new upstream
2016-07-22 07:45:10 +02:00
Peter Hoeg
729bc134ea
bully: new upstream
2016-07-22 13:08:16 +08:00
zimbatm
1018a00b89
Merge pull request #17149 from grahamc/k0001-weighttp-sha256
...
weighttp: 0.3 -> 0.4
2016-07-21 20:18:50 +01:00
Renzo Carbonara
8859fd948a
weighttp: 0.3 -> 0.4
...
cgit doesn't generate stable archives, so the SHA changed when there
was a commit earlier this year. Using fetchgit in hopes of stabilizing
the checked out sha.
2016-07-21 08:26:39 -05:00
Tuomas Tynkkynen
212dd434ec
atftp: 0.7 -> 0.7.1
2016-07-21 07:22:17 +03:00
Franz Pletz
2ce60ead60
zerotierone: fix evaluation
2016-07-21 04:56:19 +02:00
José Romildo Malaquias
38d896aeee
connman-notify: init at 2014-06-23
2016-07-20 22:44:55 -03:00
Rok Garbas
e2f6c6b9d2
Merge pull request #16620 from zimbatm/ronn-0.7.3
...
Ronn 0.7.3
2016-07-21 01:23:06 +02:00
cransom
4a9b640f37
smokeping: init at 2.6.11 ( #17090 )
...
Includes a module for service setup and a test
to verify functionality of both service and pkg.
2016-07-21 01:07:59 +02:00
Franz Pletz
eacabb9993
shncpd: init at 2016-06-22
2016-07-17 17:15:23 +02:00
Franz Pletz
8a6fce5431
ndjbdns: 1.05.9 -> 1.06
2016-07-17 17:15:23 +02:00
Eelco Dolstra
211bed46c4
Merge pull request #17004 from rickynils/openssh_privsep_dir
...
openssh: Use the default privilege separation dir (/var/empty)
2016-07-17 13:28:44 +02:00
Joachim F
5c837e952d
Merge pull request #17001 from womfoo/fix/vtun
...
vtun: add debian gcc5 fix
2016-07-16 21:26:50 +02:00
Kranium Gikos Mendoza
16cc4dd3a3
vtun: add debian gcc5 fix
2016-07-16 21:07:21 +08:00
Joachim F
0fdd630965
Merge pull request #16726 from womfoo/bump/proxychains-4.2.0
...
proxychains: 4.0.1-head -> 4.2.0
2016-07-16 13:19:26 +02:00
Rickard Nilsson
4f8f1c30cb
openssh: Use the default privilege separation dir (/var/empty)
...
(This is a rewritten version of the reverted commit
a927709a35
, that disables the creation of
/var/empty during build so that sandboxed builds also works. For more
context, see https://github.com/NixOS/nixpkgs/pull/16966 )
If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:
fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.
The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-16 10:15:58 +02:00
Frederik Rietdijk
2e986016d0
Merge pull request #16946 from phanimahesh/fix-16198
...
Fix typo: s/propogate/propagate/
2016-07-15 15:00:01 +02:00
Bjørn Forsman
2ad0a84751
Revert "openssh: Use the default privilege separation dir (/var/empty)"
...
This reverts commit a927709a35
because it
doesn't build:
$ nix-build -A openssh
...
mkdir /nix/store/yl2xap8n1by3dqxgc4rmrc4s753676a3-openssh-7.2p2/libexec
(umask 022 ; ./mkinstalldirs /var/empty)
mkdir /var
mkdir: cannot create directory '/var': Permission denied
mkdir /var/empty
mkdir: cannot create directory '/var/empty': No such file or directory
make: *** [Makefile:304: install-files] Error 1
builder for ‘/nix/store/ifygp4mqpv7l8cgp0njp8w7lmrl6brpp-openssh-7.2p2.drv’ failed with exit code 2
2016-07-15 12:42:37 +02:00
Rickard Nilsson
a927709a35
openssh: Use the default privilege separation dir (/var/empty)
...
If running NixOS inside a container where the host's root-owned files
and directories have been mapped to some other uid (like nobody), the
ssh daemon fails to start, producing this error message:
fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable.
The reason for this is that when openssh is built, we explicitly set
`--with-privsep-path=$out/empty`. This commit removes that flag which
causes the default directory /var/empty to be used instead. Since NixOS'
activation script correctly sets up that directory, the ssh daemon now
also works within containers that have a non-root-owned nix store.
2016-07-14 20:54:06 +02:00
zimbatm
dc6306a69d
zerotierone: 1.1.6 -> 1.1.12
2016-07-14 14:02:54 +01:00