Commit Graph

7421 Commits

Author SHA1 Message Date
Tim Steinbach
bd9b124f2a
linux: 4.13.12 -> 4.13.13 2017-11-15 07:32:24 -05:00
Orivej Desh
a7f4d977a7
Merge pull request #31678 from flokli/fix-iwlwifi-linux-4.14
linux_4_14: fix iwlwifi fw reset
2017-11-15 11:32:53 +00:00
Florian Klink
f919c7faec linux_4_14: fix iwlwifi fw reset
Currently, moving to kernel_4_14 breaks at least Intel Wireless 8260 and
8265 cards due to a API change in the firmware, which is not yet honored
in the driver.
2017-11-15 11:30:24 +00:00
Daiderd Jordan
dadcca3f40 frameworks-coremedia: add impure dependnecy on CoreImage
Fixes ffmpeg sandbox build on darwin
2017-11-14 21:51:40 -05:00
Dan Peebles
49a5791bc4 darwin.stdenv: fix up to allow sandboxing 2017-11-14 10:36:04 -05:00
Dan Peebles
762a05cbb6 cctools-port: add a couple of (temporary) impure dependencies 2017-11-14 10:35:18 -05:00
Dan Peebles
b2f8185695 configd: remove unsupported sandbox profile 2017-11-14 10:34:28 -05:00
Franz Pletz
172d346ff1
Merge pull request #31628 from lheckemann/fbterm-arm
fbterm: fix build on non-x86
2017-11-14 12:39:51 +01:00
Linus Heckemann
e50745712c fbterm: fix build on non-x86 2017-11-14 09:01:13 +00:00
Cray Elliott
3c0c18792d mwprocapture: forgot to include a file 2017-11-13 20:26:24 -08:00
Cray Elliott
7f473fa506 mwprocapture: minor correctness fix to 4.14 patch 2017-11-13 20:21:56 -08:00
Cray Elliott
ce8dea6bdd mwprocapture: patch to fix build for linux 4.14 2017-11-13 19:54:57 -08:00
Graham Christensen
c886b170b1
Merge pull request #31629 from lheckemann/jfbview-mujs
jfbview: remove mujs and no-longer-necessary patch
2017-11-13 17:10:44 -05:00
Linus Heckemann
2c4e1e975c jfbview: remove mujs and no-longer-necessary patch
mujs is only required when older versions of mupdf are used, but
we have a more recent one in nixpkgs.
2017-11-13 21:08:01 +00:00
Joerg Thalheim
b22f75748e android-udev-rules: 20171107 -> 20171113 2017-11-13 21:04:33 +00:00
Orivej Desh
fab6760e75 devmem2: provide a better mirror
lartmaker.nl fails to respond to IPv6 queries.
2017-11-13 19:37:11 +00:00
Joerg Thalheim
7f7aa08332 linuxPackages_latest.spl: fix evaluation 2017-11-13 19:13:35 +00:00
adisbladis
8e2bd255e1
spl: Broken with 4.14 kernels 2017-11-14 01:37:52 +08:00
Tim Steinbach
53730c5a92
linux: Add 4.14 2017-11-13 08:34:36 -05:00
Jörg Thalheim
be86b91d27
Merge pull request #31594 from sjau/master
zfsUnstable: 2017-10-16 -> 2017-11-12
2017-11-13 13:02:19 +00:00
Matthieu Coudron
38737386d5 linux_mptcp: makes linux_mptcp.override works
I needed to override some parameters because of an error I had:
"Error: modDirVersion specified in the Nix expression is wrong, it should be: 4.9.60+"

but the following override would not be taken into account
  pkg.override ({
    modDirVersion="4.9.60+";
    src=pkgs.lib.cleanSource /home/teto/mptcp;
  })

because the override would be overriden by the nixpkgs parameters
because of concatenation order:
https://nixos.org/nix/manual/#sec-language-operators
2017-11-13 11:19:26 +01:00
sjau
8ccaa882a1 zfsUnstable: 2017-10-16 -> 2017-11-12 2017-11-13 10:06:57 +01:00
tv
9f4a461278 update skarnet.org packages
execline:          2.2.0.0 -> 2.3.0.3
s6:                2.4.0.0 -> 2.6.1.1
s6-dns:            2.1.0.0 -> 2.2.0.1
s6-linux-utils:    2.2.0.0 -> 2.4.0.2
s6-networking:     2.2.1.0 -> 2.3.0.2
s6-portable-utils: 2.1.0.0 -> 2.2.1.1
s6-rc:             0.1.0.0 -> 0.3.0.0
skalibs:           2.4.0.1 -> 2.6.0.1
2017-11-13 00:09:32 +01:00
Vladimír Čunát
ab1859e027
Merge branch 'staging'
Hydra looks very good: https://hydra.nixos.org/eval/1409475?compare=1409440
There's mainly some fallout from aarch64-linux not building `go`
on the first attempt.
2017-11-12 19:08:05 +01:00
Luke Adams
6ead149ff9 prl-tools: remove user services using .desktop files 2017-11-11 17:05:08 -06:00
Luke Adams
029b44db9d prl-tools: hardeningDisable: +"format" 2017-11-11 17:05:08 -06:00
Luke Adams
019cbdaa6a prl-tools: unpackPhase: extract prl-tools-lin.iso from dmg; add undmg, fetchurl inputs; update sourceRoot 2017-11-11 17:05:08 -06:00
Luke Adams
0b845abd22 prl-tools: 10.0.2.27712 -> 12.2.1-41615; src: download parallels dmg 2017-11-11 17:05:07 -06:00
Luke Adams
e58b67ab2b prl-tools: Update platforms and url 2017-11-11 17:05:07 -06:00
Luke Adams
1aef116e41 prl-tools: ignore patchelf errors 2017-11-11 17:05:07 -06:00
Vladimír Čunát
cbfb586151
Merge security fixes adapted from #31437 2017-11-11 13:33:25 +01:00
Andreas Rammhold
17fae2499a
busybox: fix CVE-2017-1587{34} 2017-11-11 13:32:29 +01:00
Vladimír Čunát
8559b6db82
Merge branch 'master' into staging
A couple thousand rebuilds from master.
2017-11-11 09:25:07 +01:00
Pascal Wittmann
24e87b49b6
Change many homepage urls from http to https #30636 2017-11-10 22:13:46 +01:00
Herwig Hochleitner
8ba0b7bc3b firmware-linux-nonfree: 2017-07-05 -> 2017-10-09-iwlwifi-fw-2017-11-03
- update and automate merging

The automated merging process should eliminate the need for keeping a
nixos-specific merged repository around

fixes #29806
2017-11-10 21:54:15 +01:00
Daiderd Jordan
63bac2c23e
cf-private: overwrite headers from CF 2017-11-09 23:29:41 +01:00
Vladimír Čunát
304259bdb1
Merge branch 'master' into staging
Mass rebuild, mainly on Darwin.
2017-11-09 22:37:01 +01:00
Drew Hess
67ba83a934 kernel: add beagleboard.org kernel
And update the existing platform variant to use it
2017-11-09 18:28:14 +02:00
Tuomas Tynkkynen
d209612496 trinity: 1.6 -> 1.8 2017-11-09 10:53:33 +02:00
Dan Peebles
bb863378d3 adv_cmds: remove custom sandbox profile (not allowed in recent Nix) 2017-11-08 22:32:44 -05:00
Dan Peebles
48a34be41c Support frameworks properly in sandbox 2017-11-08 22:06:52 -05:00
aszlig
2a894cd2d1
lxc: Fix build error with glibc 2.26
This issue doesn't necessarily have to do with glibc 2.26 and it could
have been fixed if we'd replace -Werror with -Wall.

The error in question was:

storage/overlay.c:808:13: error: 'dirlen' may be used uninitialized in
this function [-Werror=maybe-uninitialized]

After looking at the code in overlay.c it indeed might use dirlen
unitialized.

Unrelated to the glibc upgrade which brought the problem to the surface,
this also has been fixed upstream at lxc/lxc@180c477a32.

The reason however, that led to the upstream fix was a segfault which
has been reported at lxc/lxc#1802.

Signed-off-by: aszlig <aszlig@nix.build>
Cc: @wkennington, @globin, @fpletz
2017-11-09 02:21:00 +01:00
Vladimír Čunát
94efde5119
Merge #31402: mlt, ffado: fix includeds with glibc-2.26 2017-11-08 23:01:47 +01:00
Joerg Thalheim
55e6a5a4da android-udev-rules: 20171031 -> 20171107 2017-11-08 20:24:00 +00:00
Tim Steinbach
4cb8c5dc3c
linux-copperhead: 4.13.11.a -> 4.13.12.a 2017-11-08 14:34:31 -05:00
Tim Steinbach
087d1e8d36
linux: 4.13.11 -> 4.13.12 2017-11-08 14:34:31 -05:00
Tim Steinbach
db1e2444a5
linux: 4.9.60 -> 4.9.61 2017-11-08 14:34:31 -05:00
Tim Steinbach
bd4b9062ea
linux: 4.4.96 -> 4.4.97 2017-11-08 14:34:31 -05:00
Piotr Bogdan
1e78b48666 ffado: fix build with glibc-2.26
see https://sourceforge.net/p/ffado/mailman/message/36008067/
2017-11-08 17:35:51 +00:00
makefu
292f60504c linux.kernel: enable build of stk1160 modules 2017-11-08 12:41:54 +02:00
Vladimír Čunát
c2b9ab578d
nfs-utils: fixup includes with glibc-2.26 2017-11-08 10:27:39 +01:00
Tuomas Tynkkynen
34f3ef2c4d tcp_wrappers: Use libnsl to fix build after new glibc
https://hydra.nixos.org/build/63759192

https://sourceware.org/ml/libc-alpha/2017-02/msg00478.html
2017-11-07 20:38:41 +02:00
Vladimír Čunát
d51f9b364e
checkpolicy: fixup includes with glibc-2.26 2017-11-07 15:27:53 +01:00
Jörg Thalheim
84f40186b2 lxcfs: do not inherit enableDebugBuild from global namespace 2017-11-07 11:04:05 +00:00
Domen Kožar
2b995c544d osx_private_sdk: reduce output size and remove it from runtime closures 2017-11-07 11:06:10 +01:00
Vladimír Čunát
9aa37b159b
Merge branch 'master' into staging 2017-11-07 06:41:23 +01:00
Vladimír Čunát
1ac1581253
libselinux: fix missing include after glibc-2.26 2017-11-06 20:18:43 +01:00
Tuomas Tynkkynen
bf585f2881 linux_rpi: 1.20170811 -> 1.20171029 2017-11-06 20:49:48 +02:00
Tuomas Tynkkynen
967ecb802e raspberrypifw: 1.20170811 -> 1.20171029 2017-11-06 20:49:48 +02:00
Tim Steinbach
a9bf922bb7
Merge pull request #31308 from adisbladis/firejail-0_9_50
firejail: 0.9.48 -> 0.9.50
2017-11-06 12:47:57 +00:00
Vladimír Čunát
bc90fe1fbb
Merge #30371: update misc. gnome3-related libraries 2017-11-06 13:00:15 +01:00
adisbladis
0af15f6f45
firejail: 0.9.48 -> 0.9.50 2017-11-06 17:21:03 +08:00
Tim Steinbach
30f6d630f1
linux: 4.14.0-rc7 -> 4.14.0-rc8 2017-11-05 16:47:03 -05:00
Jan Tojnar
3f12993f3a
xf86_input_wacom: 0.34 → 0.35 2017-11-05 20:44:11 +01:00
Orivej Desh
0a8d30c3b1
Merge pull request #31279 from rnhmjoj/rewritefs
rewritefs: 2016-07-27 -> 2017-08-14
2017-11-05 17:08:02 +00:00
Tuomas Tynkkynen
0d9f2f0bb4 platforms.nix: Clean up more 'uboot' legacy
For a while now, the only thing the 'uboot' attribute does is to tell
whether to add ubootTools to kernel/initrd builds. That can be
determined with platform.kernelTarget == "uImage" just as well.
2017-11-05 17:06:59 +02:00
rnhmjoj
896ec47a39
rewritefs: 2016-07-27 -> 2017-08-14 2017-11-05 15:52:37 +01:00
Franz Pletz
b032b3544f
linux_mptcp: 0.92.1 -> 0.93 2017-11-05 14:56:06 +01:00
Tuomas Tynkkynen
b50693d16c kernel, initrd: Remove legacy ubootChooser 2017-11-05 15:11:12 +02:00
Michael Raskin
d715c087b1
Merge pull request #20423 from DerTim1/add-service-wrapper
service-wrapper: init at 16.04.0
2017-11-04 22:16:59 +00:00
Vladimír Čunát
bb87d2c81a
drbd: fix evaluation after #30872 2017-11-04 10:20:39 +01:00
Frederik Rietdijk
decaeb3040
Merge pull request #30872 from FRidh/udev
systemd: remove udev attributes
2017-11-04 10:02:01 +01:00
Joerg Thalheim
6ec3bf3a77 bcc: add myself as maintainer 2017-11-04 08:58:04 +00:00
Joerg Thalheim
292f23c4b5 bcc: fix module installation
BCC_KERNEL_MODULES_DIR should have not been removed
2017-11-04 08:57:20 +00:00
Franz Pletz
94043f511a
zfs: 0.7.2 -> 0.7.3
Bugfix release.
2017-11-03 21:39:05 +01:00
c0bw3b
525380b472 treewide: abandon Google Code homepages 2017-11-03 18:52:28 +00:00
Tuomas Tynkkynen
b2093d4611 linuxPackages.bcc: Fix quoting for older Nix versions
Issue #31179.
2017-11-03 13:11:36 +02:00
Tim Steinbach
449a053152
linux-copperhead: 4.13.10.a -> 4.13.11.a 2017-11-02 19:54:31 -04:00
Orivej Desh
a41342ba58
Merge pull request #30103 from dtzWill/fix/lsb-release-PATH
lsb-release: wrap to ensure needed utilities are available
2017-11-02 21:22:33 +00:00
Jörg Thalheim
5cfd049a03
Merge pull request #31057 from dtzWill/update/musl-1.1.18
musl: 1.1.17 -> 1.1.18
2017-11-02 18:53:11 +00:00
Orivej Desh
672efa467d
Merge pull request #31132 from pbogdan/sourceroot-fixes
fix source root locations after c3255fe8ec
2017-11-02 15:18:25 +00:00
Joerg Thalheim
7c8ec77db2 android-udev-rules: 20171014 -> 20171031 2017-11-02 15:12:43 +00:00
Piotr Bogdan
8904ce343a fix source root locations.
These have changed following commit
c3255fe8ec.

See also:

- https://github.com/NixOS/nixpkgs/pull/31004
- https://github.com/NixOS/nixpkgs/pull/31106
2017-11-02 13:53:36 +00:00
Matthieu Coudron
7dce131b86 kernelmptcp: 0.91.3 -> 0.92.1 2017-11-02 13:14:57 +01:00
Richard Marko
22beeeab76
criu: 2.0 -> 2.12.1 2017-11-02 12:45:51 +01:00
zimbatm
c34c737172
Merge pull request #31100 from zimbatm/hashcat4
Hashcat4
2017-11-02 11:23:07 +00:00
Franz Pletz
68b5ec06b9
linux: 4.9.59 -> 4.9.60 2017-11-02 11:28:40 +01:00
Franz Pletz
6021ca25db
linux: 4.4.95 -> 4.4.96 2017-11-02 11:28:27 +01:00
Franz Pletz
c37c896ee0
linux: 4.13.10 -> 4.13.11 2017-11-02 11:28:14 +01:00
Richard Marko
c75c99f42e lxcfs: 2.0.7 -> 2.0.8, add debugBuild option 2017-11-02 03:56:59 +01:00
Franz Pletz
2df0fe91d4
Merge pull request #31038 from orivej/autofs
autofs: do not strip needed symbols
2017-11-01 22:10:15 +01:00
zimbatm
309373ea68 intel-ocl: r4.0-59481 -> 5.0-63503 2017-11-01 17:59:49 +00:00
zimbatm
8a59ef7354 wireguard: 0.0.20171017 -> 0.0.20171101 2017-11-01 11:00:20 +00:00
Will Dietz
399020d2f5 musl: 1.1.17 -> 1.1.18
Use this as an opportunity to remove
empty patches array.
2017-10-31 15:45:24 -05:00
Orivej Desh
2ad3933dca autofs: do not strip needed symbols
Fixes #28282 after #27415
2017-10-31 14:38:30 +00:00
Daniel Peebles
dc1ef6ce8c
Merge pull request #31013 from NixOS/darwin-parallel
darwin: build applle stuff in parallel
2017-10-31 11:16:38 +01:00
Domen Kožar
ea6a4068cf
darwin: build apple stuff in parallel 2017-10-31 07:47:58 +00:00
Vladimír Čunát
2d403e668c
Merge #30851: util-linux: 2.30.2 -> 2.31
Includes a fix for CVE-2016-2779.
2017-10-30 23:01:19 +01:00
Vladimír Čunát
687943763c
Merge branch 'master' into staging 2017-10-30 22:30:14 +01:00
Franz Pletz
0a5ecde808
linux: 4.4.80 -> 4.4.95 2017-10-30 17:57:00 +01:00
Franz Pletz
36be7d3e85
Revert parts of "linux: remove unused kernel patches"
This reverts commit 05b8cae9ec that
removed the cgroup v2 patch for the 4.4 kernel.
2017-10-30 17:57:00 +01:00
Franz Pletz
517606d1d4
Revert "linux_4_4: remove"
This reverts commit 9f3f575ab3.

Support from upstream has been extended to Feb 2022.
2017-10-30 17:57:00 +01:00
Tim Steinbach
70f35a99a4
linux: 4.14-rc6 -> 4.14-rc7 2017-10-30 08:30:29 -04:00
Frederik Rietdijk
6d41ae55dd Merge remote-tracking branch 'upstream/master' into HEAD 2017-10-30 07:51:09 +01:00
Shea Levy
9e37df185c
fwupd: Remove manual rpath settings now that meson is fixed.
Thanks @yegortimoshenko!
2017-10-29 14:42:55 -04:00
Frederik Rietdijk
d0d0308876 Merge remote-tracking branch 'upstream/master' into HEAD 2017-10-29 14:08:20 +01:00
Tim Steinbach
e76d8af375
linux-copperhead: 4.13.9.a -> 4.13.10.a 2017-10-28 13:42:32 -04:00
Frederik Rietdijk
97c7b69e25 systemd: remove udev attributes 2017-10-27 22:20:20 +02:00
Frederik Rietdijk
8634a2e2c5 Merge remote-tracking branch 'upstream/master' into HEAD 2017-10-27 21:35:58 +02:00
adisbladis
7b64943e8b
util-linux: 2.30.2 -> 2.31 2017-10-27 22:01:07 +08:00
Tim Steinbach
2c373d818d
linux: 4.13.9 -> 4.13.10 2017-10-27 07:48:05 -04:00
Tim Steinbach
85e79da31b
linux: 4.9.58 -> 4.9.59 2017-10-27 07:47:56 -04:00
Brian McKenna
ed0f558fb0 uvcdynctrl: init at 0.2 (#30806)
* uvcdynctrl: init at 0.3.0

* uvcdynctrl: nitpicks
2017-10-26 11:10:28 +01:00
Tuomas Tynkkynen
2351947c57 sssd: 1.14.2 -> 1.16.0 2017-10-25 19:36:30 +03:00
Jörg Thalheim
f3a2570ba4 Merge pull request #30695 from flokli/libcap-pkgconfig
libcap: already patch Make.Rules in prePatch
2017-10-25 09:00:28 +01:00
Joerg Thalheim
59382564ff bcc: fix install 2017-10-24 22:24:08 +01:00
Joerg Thalheim
8ee94216d3 bcc: 0.3.0 -> 0.4.0 2017-10-24 22:14:50 +01:00
Tuomas Tynkkynen
681c8006f5 read-edid: Only depend on libx86 on x86 2017-10-23 16:37:22 +03:00
Tim Steinbach
4ea79d3f36
linux: 4.14-rc5 -> 4.14-rc6 2017-10-23 08:49:39 -04:00
Florian Klink
a505abc948 libcap: already patch Make.Rules in prePatch
Make.Rules gets already included during compilation, so set paths before
invoking make. This fixes wrong paths in libcap.pc.
2017-10-22 21:21:27 +02:00
Tim Steinbach
e9aa686d3b
linux-copperhead: 4.13.8.a -> 4.13.9.a 2017-10-22 14:41:01 -04:00
Tim Steinbach
69ebd73571
linux: 4.13.8 -> 4.13.9 2017-10-22 14:35:49 -04:00
Tim Steinbach
c529454c60
linux: 4.9.57 -> 4.9.58 2017-10-22 14:35:32 -04:00
Tuomas Tynkkynen
7b4db5da18 utillinux: 2.30 -> 2.30.2 2017-10-22 01:40:58 +03:00
Tuomas Tynkkynen
89e5c3b700 devicemapper: 2.02.173 -> 2.02.175 2017-10-22 01:40:58 +03:00
Tuomas Tynkkynen
cc048f0b45 audit: 2.7.7 -> 2.8.1 2017-10-22 01:40:58 +03:00
Michael Weiss
a0221824fb nvme-cli: 0.9 -> 1.4 2017-10-21 21:37:26 +02:00
Daniel Kuehn
eafcfaf62c sssd: Add optional bindings for building sssd library that sudo can use to fetch sudoers rules from SSSD 2017-10-21 20:21:27 +02:00
Jörg Thalheim
3219511469 Merge pull request #30407 from sorki/lxc_2.1.0
lxc: 2.0.8 -> 2.1.0
2017-10-20 21:54:02 +01:00
Michael Raskin
83fdd2699c eudev: 3.2.1 -> 3.2.4 2017-10-20 18:37:39 +02:00
Will Dietz
4eb090efc8 musl: 1.1.16 -> 1.1.17, build with stack protector 2017-10-19 15:57:19 -05:00
Joerg Thalheim
485fe61657 zfsUnstable: 2017-09-26 -> 2017-10-16 2017-10-19 16:06:21 +01:00
Joerg Thalheim
d8842199cb splUnstable: 2017-09-26 -> 2017-10-16 2017-10-19 16:06:13 +01:00
Tim Steinbach
0b409b37d4
linux-copperhead: 4.13.7.a -> 4.13.8.a 2017-10-19 08:02:26 -04:00
Nikolay Amiantov
0bc4216bf0 Merge branch 'staging' 2017-10-19 12:46:38 +03:00
Joerg Thalheim
65256b7f26 wireguard: 0.0.20171011 -> 0.0.20171017 2017-10-19 09:40:51 +01:00
Tim Steinbach
67343e2f30
linux: 4.13.7 -> 4.13.8 2017-10-18 08:38:39 -04:00
Tim Steinbach
1b0e69966b
linux: 4.9.56 -> 4.9.57 2017-10-18 08:38:27 -04:00
Vladimír Čunát
3d1dee3692
Merge branch 'master' into staging
Thousands of rebuilds from master.
2017-10-16 20:12:06 +02:00
Tim Steinbach
00669df0c1
linux: 4.14-rc4 -> 4.14-rc5 2017-10-16 09:26:36 -04:00
Joerg Thalheim
3f4a6754ef wireguard: 0.0.20171005 -> 0.0.20171011 2017-10-16 13:50:40 +01:00
Graham Christensen
ea50efcc67
wpa_supplicant: patch for KRACKAttack
CVE-2017-13077: Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake.
    CVE-2017-13078: Reinstallation of the group key (GTK) in the 4-way handshake.
    CVE-2017-13079: Reinstallation of the integrity group key (IGTK) in the 4-way handshake.
    CVE-2017-13080: Reinstallation of the group key (GTK) in the group key handshake.
    CVE-2017-13081: Reinstallation of the integrity group key (IGTK) in the group key handshake.
    CVE-2017-13082: Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it.
    CVE-2017-13084: Reinstallation of the STK key in the PeerKey handshake.
    CVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake.
    CVE-2017-13087: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.
    CVE-2017-13088: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.
2017-10-16 07:33:44 -04:00
Graham Christensen
629965a532
hostapd: patch for KRACKAttack
CVE-2017-13077: Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake.
    CVE-2017-13078: Reinstallation of the group key (GTK) in the 4-way handshake.
    CVE-2017-13079: Reinstallation of the integrity group key (IGTK) in the 4-way handshake.
    CVE-2017-13080: Reinstallation of the group key (GTK) in the group key handshake.
    CVE-2017-13081: Reinstallation of the integrity group key (IGTK) in the group key handshake.
    CVE-2017-13082: Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it.
    CVE-2017-13084: Reinstallation of the STK key in the PeerKey handshake.
    CVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake.
    CVE-2017-13087: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.
    CVE-2017-13088: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.
2017-10-16 07:33:43 -04:00
Tim Steinbach
19997f0100
linux-copperhead: 4.13.6.a -> 4.13.7.a 2017-10-15 15:28:16 -04:00
Jörg Thalheim
043529822b Merge pull request #30413 from symphorien/kexec
kexectools: 2.0.14 -> 2.0.15
2017-10-15 18:24:02 +01:00
Vladimír Čunát
3ee33f35f8
Merge branch 'staging'
Contains security fixes in X server and X libs.
On Hydra, the amount to rebuild on master is now higher than on staging;
the comparison looks OK.
2017-10-15 13:59:18 +02:00
Symphorien Gibol
8e53ca98f2 kexectools: 2.0.14 -> 2.0.15 2017-10-14 16:50:45 +02:00
Tim Steinbach
8c618fce30
linux: 4.13.6 -> 4.13.7
CVE-2017-5123
2017-10-14 10:29:04 -04:00
Richard Marko
7357d7b5ea lxc: 2.0.8 -> 2.1.0
Related to #30023

Note that this comes with new configuration format,
for migrating see https://linuxcontainers.org/lxc/news/#lxc-21-release-announcement-5th-of-september-2017
2017-10-14 15:14:46 +02:00
Vladimír Čunát
6525c22ef1
Merge branch 'master' into staging
Hydra: ?compare=1401528
2017-10-14 10:36:13 +02:00
Peter Hoeg
f22ce20ec0 Revert "hyperv-daemons: init at current linux kernel version"
This reverts commit 51f1c635e6.
2017-10-14 14:42:49 +08:00
Peter Hoeg
8df1c9ac17 Revert "firewalld: init at 0.4.4.4"
This reverts commit 178a96f99b.
2017-10-14 14:42:48 +08:00
Peter Hoeg
5f6d2d15ac Revert "nvidia-firmware: init at 325.15"
This reverts commit 15bdbc21f9.
2017-10-14 14:42:48 +08:00
Peter Hoeg
15bdbc21f9 nvidia-firmware: init at 325.15 2017-10-14 14:38:04 +08:00
Peter Hoeg
178a96f99b firewalld: init at 0.4.4.4
Includes systemd module.
2017-10-14 14:38:04 +08:00
Peter Hoeg
51f1c635e6 hyperv-daemons: init at current linux kernel version 2017-10-14 14:38:04 +08:00
Joerg Thalheim
acee0f9bea android-udev-rules: 20170612 -> 20171014 2017-10-13 20:15:49 +01:00
Tim Steinbach
cc5dd66c03
linux: 4.9.55 -> 4.9.56 2017-10-12 20:02:15 -04:00
Tim Steinbach
64a727b160
linux-copperhead: 4.13.5.a -> 4.13.6.a 2017-10-12 13:09:36 -04:00
Tim Steinbach
5a8f9a8b6c
linux: 4.13.5 -> 4.13.6 2017-10-12 07:58:46 -04:00
Tim Steinbach
8940265231
linux: 4.9.54 -> 4.9.55 2017-10-12 07:58:33 -04:00
Dan Peebles
e86991e1e8 darwin: fix assorted xcbuild builds
This includes adding a new xcbuild-based libutil build to test the waters a bit there.
We'll need to get xcbuild into the stdenv bootstrap before we can make the main build,
but it's nice to see that it can work.
2017-10-12 07:16:22 -04:00
Shea Levy
48595335f4
Add system_cmds apple project
Actually just build sysctl for now, as xcbuild segfaults.
2017-10-11 15:13:27 -04:00
Tim Steinbach
5dda1324be
linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT 2017-10-11 13:50:20 -04:00
Tim Steinbach
2262b2332d
linux: 4.14-rc3 -> 4.14-rc4 2017-10-10 13:07:42 -04:00
Vladimír Čunát
f4c9d517db
tiptop: bugfix 2.3 -> 2.3.1 2017-10-10 18:13:18 +02:00
Eelco Dolstra
67c3eab348
linux: 4.9.53 -> 4.9.54 2017-10-10 12:41:50 +02:00
Joerg Thalheim
1439972bfb wireguard: 0.0.20171001 -> 0.0.20171005 2017-10-09 14:44:21 +01:00
Vladimír Čunát
994036d857
Merge branch 'master' into staging
Hydra: ?compare=1400181
2017-10-09 11:24:35 +02:00
Peter Hoeg
4817454366 wireguard: wg-quick systemd unit was referencing /usr/bin 2017-10-09 11:46:42 +08:00
Daniel Peebles
416979f3f7 Merge pull request #30150 from copumpkin/no-rpath-nonsense
Get rid of most @rpath nonsense on Darwin
2017-10-08 16:21:27 -04:00
Dan Peebles
b426c85ce2 Get rid of most @rpath nonsense on Darwin
This requires some small changes in the stdenv, then working around the
weird choice LLVM made to hardcode @rpath in its install name, and then
lets us remove a ton of annoying workaround hacks in many of our Go
packages. With any luck this will mean less hackery going forward.
2017-10-08 16:13:46 -04:00
Michael Raskin
76cec2dfa6 fbterm: fix build 2017-10-08 20:53:13 +02:00
Jan Tojnar
08b283b37e
criu: Rely on XML_CATALOG_FILES variable 2017-10-07 23:39:15 +02:00
Jan Tojnar
7c690aec16
conky: Rely on XML_CATALOG_FILES variable 2017-10-07 23:38:32 +02:00
Frederik Rietdijk
acfec163b1 Merge remote-tracking branch 'upstream/master' into HEAD 2017-10-07 12:15:17 +02:00
Vladimír Čunát
ef41fc7f51
Merge branch 'master' into staging
Hydra: ?compare=1399476
2017-10-07 10:17:42 +02:00
Tuomas Tynkkynen
a06d64ea69 kernel config: Explicitly enable device mapper
A no-op change on x86 but enables it on ARM.
2017-10-07 11:05:05 +03:00
Franz Pletz
662f82aee8
zfs, spl: 0.7.1 -> 0.7.2 2017-10-07 00:48:51 +02:00
Will Dietz
78785a06f9 lsb-release: wrap to ensure needed utilities are available 2017-10-06 08:57:23 -05:00
Tim Steinbach
3e5b594732
linux-copperhead: 4.13.4.a -> 4.13.5.a 2017-10-05 16:06:19 -04:00
Tim Steinbach
0bd1f7a92f
linux: 4.13.4 -> 4.13.5 2017-10-05 09:50:00 -04:00
Tim Steinbach
aee224c8a5
linux: 4.9.52 -> 4.9.53 2017-10-05 09:49:40 -04:00
Orivej Desh
66d4941afe Merge branch 'master' into staging
* master: (48 commits)
  Mathematica: 11.0.1 -> 11.2.0
  kbfs: 20170922.f76290 -> 20171004.40555d
  packer: 1.0.3 -> 1.1.0
  libxdg-basedir: 1.0.2 -> 1.2.0
  fscrypt: 0.2.1 -> 0.2.2
  devtodo: init at 0.1.20
  keybase: 1.0.30 -> 1.0.33
  elixir: Fix locale problem on NixOS
  keybase-gui: 1.0.25 -> 1.0.33
  terraform: 0.10.2 -> 0.10.7  (#30055)
  emby: 3.2.32.0 -> 3.2.33.0
  sbcl: 1.3.21 -> 1.4.0
  ardour: 5.11 -> 5.12
  axoloti: fix evaluation
  axoloti: init at 1.0.12-1
  melpa-packages: Add new lean packages
  fastlane: init at 2.60.1
  nixos/traefik: guard example path
  go-ethereum: 1.7.0 -> 1.7.1
  xzgv: 0.9.1 -> 0.9.2
  ...
2017-10-05 07:41:39 +00:00
Michael Weiss
c42b878ed3 fscrypt: 0.2.1 -> 0.2.2 2017-10-05 01:29:45 +02:00
Orivej Desh
f137004179 Merge branch 'master' into staging
* master: (81 commits)
  Add NixOS 17.09 AMIs
  gradle: 4.2 -> 4.2.1
  maintainers.nix: use my GitHub handle as maintainer name
  fcitx-engines.rime: init at 0.3.2
  brise: init at 2017-09-16
  librime: init at 1.2.9
  marisa: init at 0.2.4
  opencc: build shared library and programs
  josm: 12712 -> 12914
  exa: 0.7.0 -> 0.8.0
  krb5: add deprecation date for old configuration
  rustRegistry: 2017-09-10 -> 2017-10-03
  go-ethereum: Fix libusb segmentation faults on Darwin
  tor-browser-bundle-bin: 7.0.5 -> 7.0.6
  libsodium: 1.0.13 -> 1.0.15
  tor-browser-bundle: geoip support
  tor-browser-bundle: support transports obfs2,obfs3
  tor-browser-bundle: bump https-everywhere to 2017.9.12
  tint2: limit platforms to Linux since macOS is not supported and fails the tests
  eclipse-plugin-vrapper: init at 0.72.0
  ...
2017-10-03 17:46:39 +00:00
Franz Pletz
37521cfd54
iproute: 4.12.0 -> 4.13.0 2017-10-02 20:24:35 +02:00
Franz Pletz
1988f762ff
batman-adv: 2017.2 -> 2017.3 2017-10-02 20:24:21 +02:00
Tim Steinbach
1e85d28fdc
linux: 4.14-rc2 -> 4.14-rc3 2017-10-02 09:29:51 -04:00
Jason A. Donenfeld
c2842b92f8 wireguard: 0.0.20170810 -> 0.0.20171001 2017-10-02 03:14:15 +02:00
Orivej Desh
fda26c8476 Merge branch 'master' into staging
* master: (271 commits)
  pysmbc: clarify license
  pysmbc: fix license
  bazel: 0.5.4 -> 0.6.0 (#29990)
  googler: init at 3.3
  go: declare support for aarch64
  firefox-beta-bin: 56.0b5 -> 57.0b4
  spotify: 1.0.64.401.g9d720389-21 -> 1.0.64.407.g9bd02c2d-26
  gogs: 0.11.19 -> 0.11.29
  grafana: 4.5.1 -> 4.5.2
  mopidy-iris: 3.4.1 -> 3.4.9
  nextcloud: 12.0.2 -> 12.0.3
  haskell-json-autotype: jailbreak to fix build within LTS 9.x
  kore: fix up
  kore: init at 2.0.0
  glusterfs service: fix issues with useRpcbind
  tig: 2.2.2 -> 2.3.0
  haskell-hspec-core: enable test suite again
  hackage-packages.nix: automatic Haskell package set update
  librsvg: fix thumbnailer path
  awscli: 1.11.108 -> 1.11.162
  ...
2017-10-02 00:22:12 +00:00
Jörg Thalheim
d67137dd55 iwd: 2017-06-02 -> 2017-09-22 2017-10-01 10:22:18 +01:00
Tim Steinbach
e479b5ea6f
linux-copperhead: 4.13.3.a -> 4.13.4.a 2017-09-30 10:05:39 -04:00
Joerg Thalheim
3db9841d34 bcc: fix relocation bug downgrading to llvm 3.9
https://github.com/iovisor/bcc/issues/1276

fixes #29913
2017-09-30 00:33:14 +01:00
Joerg Thalheim
09d3bab32d sysdig: remove broken patchelf call
patchelf broke sysdig/csysdig binaries
2017-09-29 16:52:45 +01:00
John Ericson
f037625f87 Merge remote-tracking branch 'upstream/staging' into deps-reorg 2017-09-28 12:32:57 -04:00
Cray Elliott
56d1a14419 nvidia-x11: 384.69 -> 384.90 2017-09-28 00:01:37 -07:00
Robin Gloster
50fb62994b
bluez: remove unneeded dependencies and fix test bins 2017-09-27 21:25:05 +02:00
Tim Steinbach
ab3ff4af9f
linux: 4.13.3 -> 4.13.4 2017-09-27 13:08:21 -04:00
Tim Steinbach
2ca84cfa29
linux: 4.9.51 -> 4.9.52 2017-09-27 13:03:27 -04:00
Tim Steinbach
964672dde5
linux: Remove 4.12 (EOL) 2017-09-27 13:03:06 -04:00
WilliButz
43b7e69d13 splUnstable: fix hash 2017-09-27 15:22:02 +02:00
Jan Solanti
4ec3d311cb nvidia-x11: generate nvidia_icd.json from template 2017-09-26 21:53:44 +02:00
Jörg Thalheim
bbdca85b17 Merge pull request #29644 from yegortimoshenko/patch-3
mba6x_bl: 2016-04-22 ->2016-12-08
2017-09-26 19:56:26 +01:00
Yegor Timoshenko
fbc8fa8b42 mba6x_bl: update to 2016-12-08 2017-09-26 17:08:59 +00:00
Joerg Thalheim
8fcf95f102 {zfsUnstable,splUnstable}: 2017-09-12 -> 2017-09-26 2017-09-26 09:08:56 +01:00
Joerg Thalheim
b064137b7b sysdig: 0.17.0 -> 0.18.0 2017-09-26 00:15:51 +01:00
Daiderd Jordan
b196241f42
reattach-to-user-namespace: 2.5 -> 2.6 2017-09-26 00:58:51 +02:00
Tim Steinbach
b13a6d5720
linux: 4.14-rc1 -> 4.14-rc2 2017-09-25 09:24:23 -04:00
Michael Weiss
ec075b40ec fscryptctl: init at 2017-09-12 2017-09-24 23:12:30 +02:00
Vladimír Čunát
cb9a846762
Merge older staging
Hydra looks OK; not finished yet but already has more successes than
on master.
2017-09-24 20:56:11 +02:00
Michael Weiss
2037f1bbe8 fscrypt: init at 0.2.1 2017-09-24 02:38:45 +02:00
Daiderd Jordan
bb02b800a2
darwin-frameworks: add impure version of CoreFoundation 2017-09-23 22:29:43 +02:00
Michael Weiss
1a9467edd5 fuse3: 3.1.1 -> 3.2.0 2017-09-23 21:31:15 +02:00
Robin Gloster
08b09fdc5c
fanctl, fan module: remove
This has been broken nearly all the time due to the patches needed to
iproute2 not being compatible with the newer versions we have been
shipping. As long as Ubuntu does not manage to upstream these changes
so they are maintained with iproute2 and we don't have a maintainer
updating these patches to new iproute2 versions it is not feasible to
have this available.
2017-09-23 17:55:33 +02:00
Vladimír Čunát
73282c8cc2
Merge branch 'master' into staging
Thousands of rebuilds from master :-/
2017-09-23 09:57:23 +02:00
Jörg Thalheim
743848bb46 Merge pull request #29581 from eqyiel/fix-rpc-gssd
nixos/nfs: allow setting the path to krb5.keytab
2017-09-22 01:41:10 +01:00
John Ericson
1dd63de9a0 Merge some Master PRs into staging
No native hashes should be changed
2017-09-21 20:11:59 -04:00
John Ericson
56574e6087 Merge pull request #29610 from obsidiansystems/no-gccCrossStageFinal
top-level: No `gccCrossStageFinal` needed anymore
2017-09-21 18:57:16 -04:00
Michael Weiss
351f5fc585 fuse3: init at 3.1.1
This includes fuse-common (fusePackages.fuse_3.common) as recommended by
upstream. But while fuse(2) and fuse3 would normally depend on
fuse-common we can't do that in nixpkgs while fuse-common is just
another output from the fuse3 multiple-output derivation (i.e. this
would result in a circular dependency). To avoid building fuse3 twice I
decided it would be best to copy the shared files (i.e. the ones
provided by fuse(2) and fuse3) from fuse-common to fuse (version 2) and
avoid collision warnings by defining priorities. Now it should be
possible to install an arbitrary combination of "fuse", "fuse3", and
"fuse-common" without getting any collision warnings. The end result
should be the same and all changes should be backwards compatible
(assuming that mount.fuse from fuse3 is backwards compatible as stated
by upstream [0] - if not this might break some /etc/fstab definitions
but that should be very unlikely).

My tests with sshfs (version 2 and 3) didn't show any problems.

See #28409 for some additional information.

[0]: https://github.com/libfuse/libfuse/releases/tag/fuse-3.0.0
2017-09-21 23:59:46 +02:00
John Ericson
bac21681a1 systemd: Use some nativeBuildInputs
I erred on the side of caution when changing these.
2017-09-21 15:49:54 -04:00
John Ericson
ed14223f8c treewide: Manual fix more pkg-config build-inputs 2017-09-21 15:49:54 -04:00
John Ericson
f8a18cd4cf misc pkgs: Manual fixup pkgconfig nativeBuildInputs after sed
Importantly, this included regenerating pkgs/servers/x11/xorg, to
clobber the old sed.
2017-09-21 15:49:54 -04:00
John Ericson
531e4b80c9 misc pkgs: Basic sed to get fix pkgconfig and autoreconfHook buildInputs
Only acts on one-line dependency lists.
2017-09-21 15:49:53 -04:00
John Ericson
9f2e05662b treewide: Manually fix miscategorized autoreconfHook buildInputs
These are the ones with odd indentation my script will mess up on.
2017-09-21 15:49:53 -04:00
John Ericson
b9bf90ca6c all-packages: Remove gccCrossStageFinal; any gcc will not work 2017-09-21 15:49:18 -04:00
Vladimír Čunát
4683c374fa
Merge branch 'master' into staging
A couple thousand rebuilds again.
2017-09-21 21:09:32 +02:00
Tim Steinbach
7d3d276a16
linux-copperhead: 4.13.2.a -> 4.13.3.a 2017-09-21 14:37:44 -04:00
Ruben Maher
98a2316166 nfs-utils: set /etc/krb5.keytab as default path for rpc-gssd
Currently the `rpc-gssd.service` has a `ConditionPathExists` clause that can
never be met, because it's looking for stateful data inside `/nix/store`.

`auth-rpcgss-module.service` also only starts if this file exists.

Fixes NixOS/nixpkgs#29509.
2017-09-20 15:36:26 +01:00
Tim Steinbach
eab480ac3d
linux: 4.13.2 -> 4.13.3 2017-09-20 08:36:27 -04:00
Tim Steinbach
726765404b
linux: 4.12.13 -> 4.12.14 2017-09-20 08:36:13 -04:00
Tim Steinbach
7cfa6895e8
linux: 4.9.50 -> 4.9.51 2017-09-20 08:35:44 -04:00
John Ericson
e9c1f64048 Merge branch 'master' into staging 2017-09-20 01:39:59 -04:00
John Ericson
19e3c580ad Merge pull request #29584 from obsidiansystems/no-wrapCCCross
top-level: Remove useless abstractions
2017-09-20 01:25:02 -04:00
John Ericson
e19bb868dc all-packages: Remove forcedNativePackages; we no longer need it
Its kept around in the Hurd package set, but all that code is
presumably broken.
2017-09-20 00:59:19 -04:00
Frank Doepper
28dd1158ff circumvent hdaps name clash 2017-09-19 23:57:28 +02:00
Frank Doepper
a3e806ef0f tp_smapi with hdaps 2017-09-19 23:57:28 +02:00
Vladimír Čunát
d4c33d5e4e
Merge branch 'master' into staging 2017-09-19 18:03:09 +02:00
Robin Gloster
5c18c55062
dmtcp: fix buffer overflow due to too long ld-linux.so path
fixes #29565
2017-09-19 13:41:12 +02:00
Tuomas Tynkkynen
779aea8868 linuxPackages.mxu11x0: Mark broken on >= 4.13
https://hydra.nixos.org/build/61465503
2017-09-19 08:40:01 +03:00
Tuomas Tynkkynen
3e495bfd94 linuxPackages.cryptodev: Mark broken on >= 4.13
https://hydra.nixos.org/build/61470492
2017-09-19 08:37:44 +03:00
Franz Pletz
94bbe7db22
bluez4: remove, unused and probably vulnerable 2017-09-18 21:19:15 +02:00
Franz Pletz
dadb16a57f
bluez: 5.43 -> 5.47 for CVE-2017-1000250
Fixes #29289.
2017-09-18 21:19:15 +02:00
Aneesh Agrawal
49fc06ed0a audit: Remove openldap dependency
The openldap dependency is only used for the audisp z/OS plugin.
This is not useful on Linux, so always disable this.
2017-09-18 02:49:01 -07:00
Joachim F
aa818c5dbd Merge pull request #29467 from mguentner/wi.fi-urls
hostapd/wpa_supplicant: update urls
2017-09-17 14:59:05 +00:00
Jan Malakhovski
8525b78d05
linuxPackages: properly propagate features and extraConfig
`kernel.override { features = ... }` didn't work before, now it works as
expected.
2017-09-17 16:33:47 +02:00
Tim Steinbach
c8f43edaf5
linux: 4.13-rc7 -> 4.14-rc1 2017-09-17 09:11:04 -04:00
Maximilian Güntner
daf07c9d62
hostapd/wpa_supplicant: update urls 2017-09-17 13:46:11 +02:00
Joachim Fasting
7d69e5a18f linuxPackages.lttng-modules: broken on kernels >4.11 2017-09-17 09:44:04 +02:00
Joachim Fasting
9e395545e8 linuxPackages.lttng-modules: 2.9.3 -> 2.10.0 2017-09-17 09:44:04 +02:00