Commit Graph

2783 Commits

Author SHA1 Message Date
Léo Gaspard
68a609b059
redsocks: init at 0.5 2017-02-05 01:20:03 +01:00
Lancelot SIX
77b72ae355
wget: 1.18 -> 1.19
See http://lists.gnu.org/archive/html/info-gnu/2017-02/msg00000.html
for release announcement.
2017-02-03 18:41:57 +01:00
Robin Gloster
0e0f0d0478
radvd: 2.15 -> 2.16 2017-02-02 19:33:21 +01:00
Robin Gloster
1393d7158a
whois: 5.2.12 -> 5.2.14 2017-02-02 19:19:28 +01:00
Robin Gloster
944403a3fd
babeld: 1.7.1 -> 1.8.0 2017-02-02 19:19:28 +01:00
Robin Gloster
8821ef9dc5
redir: 2.2.1 -> 3.1 2017-02-02 18:59:07 +01:00
Michael Raskin
1561dcdc26 getmail: 4.52.0 -> 4.53.0 2017-02-01 19:28:45 +01:00
Franz Pletz
44cbb0f54d
tcpdump: 4.8.1 -> 4.9.0 for multiple CVEs
Temporarily use the Debian mirros for the sources because upstream hasn't
released the new version. See https://www.debian.org/security/2017/dsa-3775.

Fixes: CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925,
CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929, CVE-2016-7930,
CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935,
CVE-2016-7936, CVE-2016-7937, CVE-2016-7938, CVE-2016-7939, CVE-2016-7940,
CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984,
CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574,
CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5205,
CVE-2017-5341, CVE-2017-5342, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484,
CVE-2017-5485, CVE-2017-5486.
2017-01-31 17:17:12 +01:00
Damien Cassou
58dc8e3024
Remove myself from maintainers 2017-01-31 11:00:14 +01:00
Florian Jacob
97c3ee9525 tinc: 1.0.29 -> 1.0.31 2017-01-30 12:38:02 +01:00
Franz Pletz
083cadee45
offlineimap: 7.0.12 -> 7.0.13 2017-01-30 01:16:22 +01:00
Edward Tjörnhammar
92cb10a253
i2pd: 2.10.0 -> 2.11.0 2017-01-29 17:54:12 +01:00
Tim Steinbach
58dcda6b8c Merge pull request #22235 from aneeshusa/mosh-use-ssh-from-nixpkgs
mosh: use ssh from nixpkgs
2017-01-28 20:06:49 -05:00
Arseniy Seroka
d948e55c27 Merge pull request #22240 from pradeepchhetri/openconnect
openconnect: 7.06 -> 7.08
2017-01-29 02:13:14 +03:00
Pradeep Chhetri
56ed9f8b94 openconnect: 7.06 -> 7.08 2017-01-29 02:46:19 +05:30
Lluís Batlle i Rossell
57625514f4 Adding nuttcp. 2017-01-28 20:40:21 +01:00
Aneesh Agrawal
ad6b79fc97 mosh: use ssh from nixpkgs 2017-01-28 13:21:24 -05:00
Pradeep Chhetri
04b986cd2d haproxy: 1.6.6 -> 1.7.2 2017-01-26 14:07:51 +05:30
Franz Pletz
6a24c6dc32
stunnel: 5.38 -> 5.39 2017-01-26 03:52:50 +01:00
Franz Pletz
ceea7adfbb
aiccu: fix unavailable source url, use debian mirror 2017-01-26 03:52:46 +01:00
Franz Pletz
8f39095abb
biosdevname: 0.6.1 -> 0.7.2 2017-01-26 03:52:45 +01:00
Franz Pletz
1d251e268c
chrony: 2.4.1 -> 3.0, enable seccomp 2017-01-26 03:52:45 +01:00
Franz Pletz
9ac6297b79
ppp: add patch to fix CVE-2015-3310 2017-01-25 20:53:43 -05:00
Michael Raskin
47661c831e Merge pull request #22028 from MostAwesomeDude/tahoe
Tahoe-LAFS version bump
2017-01-24 17:49:00 +00:00
Eelco Dolstra
7bc801e282
curl: Apply upstream patch to fix https hangs
https://github.com/curl/curl/issues/1174

Fixes https://github.com/NixOS/nix/issues/1181.
2017-01-24 13:51:30 +01:00
Corbin
c90cab9d8a tahoelafs: 1.11.0 -> 1.12.1 2017-01-23 17:55:14 -08:00
Daiderd Jordan
a751959b9f Merge pull request #22075 from romildo/upd.aria2
aria2: 1.29.0 -> 1.31.0
2017-01-24 00:09:25 +01:00
romildo
69bbc78eee aria2: 1.29.0 -> 1.31.0 2017-01-23 19:16:05 -02:00
Joachim F
cc3ecce324 Merge pull request #22042 from rnhmjoj/dnscrypt-proxy
dnscrypt-proxy: 1.9.1 -> 1.9.4
2017-01-23 15:53:24 +01:00
rnhmjoj
a7b7d0fc3e
dnscrypt-proxy: 1.9.1 -> 1.9.4 2017-01-23 13:15:33 +01:00
Franz Pletz
dabedc40a9
ngrep: fix build due to new libpcap, use debian patches 2017-01-22 14:09:50 +01:00
Franz Pletz
9156d932b6
tcpdump: 4.7.4 -> 4.8.1 2017-01-22 13:01:00 +01:00
Vladimír Čunát
6b6553c768
Merge branch 'staging'
It contains security updates.  I somehow forgot to push this yesterday.
2017-01-20 16:33:59 +01:00
Jörg Thalheim
3fdde25b4c Merge pull request #21962 from Mic92/gemdir
bundleEnv: Used gemdir for most applications now
2017-01-19 09:34:14 +01:00
Vladimír Čunát
40003aa2ed
Merge branch 'master' into staging 2017-01-18 15:54:04 +01:00
Jörg Thalheim
246fd4c950
maphosts: use gemdir 2017-01-18 00:52:48 +01:00
Periklis Tsirakidis
513ce19fd0 offlineimap: 7.0.9 -> 7.0.12 2017-01-17 23:04:37 +01:00
Tristan Helmich
c7ea194b41 fping: 3.13 -> 3.15 (#21949) 2017-01-17 11:55:09 +01:00
Tristan Helmich
c885570944 fping: enable IPv6 (provides fping6 binary) (#21950) 2017-01-17 11:54:03 +01:00
Nikolay Amiantov
70a6628848 Merge pull request #21882 from abbradar/dhcp6
DHCPv6 improvements
2017-01-15 19:53:33 +03:00
Nikolay Amiantov
cb418318a0 radvd: 2.13 -> 2.15 2017-01-15 19:38:53 +03:00
Bas van Dijk
f0338024b9 strongswan: enable charon-systemd (#21872)
See: https://wiki.strongswan.org/projects/strongswan/wiki/Charon-systemd
2017-01-14 20:41:51 +01:00
Frederik Rietdijk
66d3b9a02d wicd: use python2 2017-01-11 18:25:10 +01:00
Pascal Wittmann
1738be8cd2
axel: 2.11 -> 2.12 2017-01-09 21:32:30 +01:00
Jörg Thalheim
188fcc1eb5
ferm: 2.3 -> 2.3.1 2017-01-08 23:40:40 +01:00
Joachim Fasting
0f24e56728
dnscrypt-proxy: 1.9.0 -> 1.9.1 2017-01-07 08:02:53 +01:00
Vladimír Čunát
07bf828bd9
Merge branch 'staging'; security /cc #21642 2017-01-06 16:32:47 +01:00
Gabriel Ebner
b0ccbb395c Merge pull request #21658 from acowley/mu-no-mug
mu: allow gtk-free builds
2017-01-06 00:22:30 -05:00
Anthony Cowley
8ca70e358d mu: allow gtk-free builds
The gtk components are enabled by default when stdenv.isLinux is true.
2017-01-05 17:55:54 -05:00
Franz Pletz
e94bfe55c4
mitmproxy: 0.17.1 -> 1.0.2, move to all-packages.nix 2017-01-05 06:25:26 +01:00
Matthias Beyer
b5c7ce015f http-prompt: 0.2.0 -> 0.8.0 2017-01-04 16:29:33 +01:00
Daiderd Jordan
27660cfdc0
Merge branch 'master' into staging 2017-01-04 01:42:26 +01:00
Eelco Dolstra
82b0ae1223 Merge pull request #21612 from NeQuissimus/curl_7_52_1
curl: 7.51.0 -> 7.52.1
2017-01-03 16:11:35 +01:00
Tim Steinbach
125fa1520d
curl: 7.51.1 -> 7.52.1 2017-01-03 08:42:59 -05:00
Michael Raskin
277e7119be openvpn: 2.3.13 -> 2.4.0 2017-01-02 15:38:46 +01:00
Michael Raskin
6151982f58 Merge pull request #21581 from bendlas/update-i2p
i2p: 0.9.26 -> 0.9.28
2017-01-02 14:15:10 +00:00
Michael Raskin
c882915351 Merge pull request #21548 from FPtje/patch-2
Strongswan: enable rdrand and aes-ni only on X86
2017-01-02 14:07:16 +00:00
Herwig Hochleitner
86a6083498 i2p: 0.9.26 -> 0.9.28
update patch
2017-01-02 13:14:42 +01:00
Daiderd Jordan
5a67b130b9
Merge branch 'master' into staging 2017-01-02 00:54:17 +01:00
Jörg Thalheim
d5f8652e6d Merge pull request #17364 from fmu/ndjbdns-fix
ndjbdns: build from latest sources which adds Darwin compatibility
2017-01-01 08:34:28 +01:00
volth
06b372f24f miredo: init at 1.2.6 2016-12-31 21:03:27 +01:00
Falco Peijnenburg
9c61571f1a Strongswan: enable rdrand and aes-ni only on X86
Strongswan fails to compile on armv7l-linux with `--enable-aesni` and  `--enable-rdrand` enabled. Errors are thrown about impossible constraints in asm (`--enable-rdrand`) or about gcc getting unknown command line parameters about aes (`--enable-aesni`). The options only makes sense on X86_64 processors.

The rdrand plugin is designed for Ivy Bridge processors:

> High quality / high performance random source using the Intel rdrand instruction found on Ivy Bridge processors

The aes-ni plugin also only exists on X86 processors (which have the AES instruction set)

Tested with a local override. The change triggers a (successful) rebuild on my X86_64 system. On armv7-linux this change fixes build errors.

See: 
https://wiki.strongswan.org/issues/337
2016-12-31 14:26:17 +01:00
Dhananjay Balan
cab497ee6d unbound 1.5.6 > 1.6.0 2016-12-30 18:13:10 +01:00
Joachim Fasting
64f45520b9
dnscrypt-proxy: 1.7.0 -> 1.9.0
Release notes at:
https://github.com/jedisct1/dnscrypt-proxy/releases/tag/1.9.0

Packaging tweaks:
- No longer split man page, kind of pointless ...
- No longer install libtool files, they are now optional
2016-12-30 05:33:58 +01:00
Vladimír Čunát
0163f0c427
openssh: update the gssapi patch
Only building was tested.
2016-12-29 17:04:58 -05:00
Graham Christensen
11e8ed5ff4
Revert "Revert "openssh: security 7.3p1 -> 7.4p1""
This reverts commit 661b5a9875.
2016-12-29 17:04:39 -05:00
Sophie Taylor
0e0fb196ca openntpd: v6+ requires libressl for constraints 2016-12-28 13:35:42 +10:00
zimbatm
12532879b0 zerotierone: 1.1.12 -> 1.1.14 2016-12-27 17:47:41 +00:00
Mitch Tishmack
b398665a4e wakelan: refactor allow builds on non linux 2016-12-26 15:04:45 -06:00
Vladimír Čunát
661b5a9875
Revert "openssh: security 7.3p1 -> 7.4p1"
This reverts commit 277080fea0.

I had tested the server on my physical machine before pushing,
but the openssh test got broken so something is clearly wrong.
http://hydra.nixos.org/build/45500080
2016-12-25 22:15:56 +01:00
Vladimír Čunát
277080fea0
openssh: security 7.3p1 -> 7.4p1
The two removed patches were for issues that should've been fixed.
Minor vulnerabilities addressed: CVE-2016-{10009,10010,10011,10012}.
https://www.openssh.com/txt/release-7.4
2016-12-25 18:42:55 +01:00
zimbatm
c38b4da994 strongswan: 5.5.0 -> 5.5.1 2016-12-24 15:57:56 +00:00
Joachim Fasting
a34eae0ecb
stun: gzip -9 -> gzip -9n
Note that it does not seem to make a difference to `nix-build --check`.
2016-12-20 15:32:14 +01:00
Joachim Fasting
8246a845b4
zerotierone: gzip -9 -> gzip -9n
Note that it does not seem to make a difference to `nix-build --check`.
2016-12-20 15:32:07 +01:00
Gabriel Ebner
182c735527 mu: 0.9.16 -> 0.9.18 2016-12-15 14:45:46 -05:00
Franz Pletz
dc0c7104ea
chrony: 2.4 -> 2.4.1 2016-12-15 15:35:22 +01:00
Tomas Hlavaty
d65ef03677 stunnel: 5.37 -> 5.38 2016-12-13 22:34:25 +01:00
schneefux
b6a4876258
httpie: 0.9.6 -> 0.9.8 2016-12-11 13:17:49 +01:00
Michael Raskin
64402bb9e0 getmail: 4.51.0 -> 4.52.0 2016-12-08 16:15:18 +01:00
Joachim Fasting
148ee2cba9
privoxy: homepage now reachable via https 2016-12-06 15:48:39 +01:00
Joachim Fasting
1a427cf625
privoxy: enable pie 2016-12-06 15:48:28 +01:00
Chris Martin
02ecd0f0f7 pssh: init at 2.3.1 2016-12-06 00:46:48 -05:00
Tristan Helmich
90292a8093 nzbget: 17.0-r1686 -> 17.1 2016-12-05 21:11:22 +01:00
Joachim Fasting
407537a4bc
privoxy: 3.0.24 -> 3.0.26
With some minor cosmetics
2016-12-05 13:20:51 +01:00
Franz Pletz
e3d54be387
dhcpcd: 6.11.3 -> 6.11.5 2016-12-04 01:40:26 +01:00
Eric Sagnes
813e5284cf urlwatch: 2.2 -> 2.5 2016-12-02 13:14:22 +09:00
Tuomas Tynkkynen
8a4d6516ee Merge remote-tracking branch 'upstream/staging' into master 2016-11-30 00:34:23 +02:00
Alexander Tsamutali
c9b8a6585d Add tools/networking/polysh 2016-11-29 17:32:21 +03:00
Franz Pletz
e394c305a8 Merge pull request #20620 from rnhmjoj/fakeroute
fakeroute: init at 0.3
2016-11-28 03:01:15 +01:00
Tuomas Tynkkynen
2d679dbe74 ntp: Don't use seccomp on non-x86
It only has the allowed system call numbers defined for i386 and x86_64
so it fails to build otherwise.
2016-11-26 20:38:17 +02:00
Franz Pletz
9007303001
curl: add upstream patch to fix HTTP2 performance issues
See #20639. Patch has to be in nixpkgs because fetchurl depends on curl.
2016-11-26 14:48:05 +01:00
Vladimír Čunát
925b335607
Merge branch 'master' into staging 2016-11-26 11:27:09 +01:00
roxma
78f81c5bac proxychains: fix build, add -ldl to LDFLAGS
Closes #20355
2016-11-25 12:17:11 +01:00
Frederik Rietdijk
3ebca4f4cf vde2: use python2 2016-11-24 22:28:03 +01:00
Frederik Rietdijk
c355a73e2c s3cmd: use python2 2016-11-24 22:28:02 +01:00
Jascha Geerds
79ea04c6c7 Merge pull request #20646 from romildo/upd.aria2
aria2: 1.28.0 -> 1.29.0
2016-11-23 23:48:22 +01:00
Nikolay Amiantov
e5167e8763 update-resolv-conf: 2016-04-24 -> 2016-09-30 2016-11-24 01:17:58 +03:00
Nikolay Amiantov
77a61cabe9 logmein-hamachi: 2.1.0.165 -> 2.1.0.174 2016-11-24 01:17:58 +03:00
Nikolay Amiantov
be95ceaff2 treewide: quote URLs in my packages 2016-11-24 01:17:52 +03:00
rnhmjoj
d753527bd4
fakeroute: init at 0.3 2016-11-23 15:22:55 +01:00