JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
102,175 Commits 2 Branches 0 Tags 13 GiB
e8ad7f0570
Commit Graph

35332 Commits

Author SHA1 Message Date
Graham Christensen
59d61ef34a Revert "nixpkgs: allow packages to be marked insecure" 2017-02-23 09:41:42 -05:00
Will Dietz
2f303bc10e R/generate-shell: Use R from current tree, fix missing wget dep. 
Without this change, the 'R' version used might be the wrong
one which changes the package lists used.

Fixes #19530.
 2017-02-23 07:46:20 -06:00
Graham Christensen
037c489b10 Merge pull request #22890 from grahamc/mark-as-insecure 
nixpkgs: allow packages to be marked insecure
 2017-02-23 07:12:18 -05:00
Nikolay Amiantov
cf29810281 haskellPackages.lambdabot: jailbreak 2017-02-23 13:13:22 +03:00
Nikolay Amiantov
a4353270c4 lttng-ust: 2.5.1 -> 2.9.0 2017-02-23 13:04:23 +03:00
Nikolay Amiantov
ba43d6bdc9 lttng-tools: 2.5.2 -> 2.9.3 2017-02-23 13:04:23 +03:00
sternenseemann
8352e0b38c ocaml-ipaddr: 2.6.1 -> 2.7.2 
Keeps the legacy version under attribute `ipaddr_p4`;
it is needed for OCaml < 4.02 and some libraries (eg `conduit`).
 2017-02-23 08:01:29 +00:00
Itai Zukerman
59bb3d1f3f bazel: remove dependence on buildFHSUserEnv 2017-02-22 20:42:21 -08:00
Graham Christensen
c8859b7264
libplist: mark as insecure 
Patches currently available don't seem to apply.
 2017-02-22 21:09:14 -05:00
Jörg Thalheim
ceac00d82b
mp4v2: 1.9.1p4 -> 2.0.0 2017-02-23 01:47:45 +01:00
davidak
45588a7a7c PyZufall: init at 0.13.2 2017-02-22 22:59:42 +01:00
Vincent Laporte
cb6d15549a ocamlPackages.mparser: init at 1.2.1 
MParser is a simple monadic parser combinator library for OCaml.

Homepage: https://github.com/cakeplus/mparser/
 2017-02-22 19:23:06 +00:00
Vladimír Čunát
f5eea8ba1d
libevent: apply security patches from Debian 
/cc #23072.  As with curl, it's nontrivial rebuild but security...
https://lwn.net/Alerts/714571/
 2017-02-22 19:00:04 +01:00
Vladimír Čunát
145d3ea81c
Merge branch 'master' into staging 2017-02-22 17:47:49 +01:00
Vladimír Čunát
d6cff5783e
gnutls: drop -lunistring on Darwin as well 
I didn't intend this substitution to be conditional; I looked wrong.
 2017-02-22 17:44:06 +01:00
Gabriel Ebner
b66ec6026c idris: jailbreak 
Fixes #23048
 2017-02-22 17:36:36 +01:00
Vladimír Čunát
2f1945dcd3
python-3.6: fix random numbers with glibc-2.25 
I missed this upstream patch. /cc #22874.
 2017-02-22 17:34:33 +01:00
Vladimír Čunát
fe8aa284c2
xcbuild: fixup build with glibc-2.25 2017-02-22 16:58:45 +01:00
Vladimír Čunát
a04849502d
fstrm: init at 0.3.1 2017-02-22 15:03:21 +01:00
Frederik Rietdijk
3bcd3d2c34 Merge pull request #23061 from nixy/pythonPackages.snakeviz 
pythonPackages.snakeviz: init at 0.4.1
 2017-02-22 14:31:26 +01:00
Andrew R. M
99754b2527 pythonPackages.snakeviz: init at 0.4.1 2017-02-22 08:14:53 -05:00
Peter Simons
deec3c1dae Merge pull request #23071 from takikawa/add-ndpi-1.8 
ndpi: init at 1.8
 2017-02-22 10:46:19 +01:00
Asumu Takikawa
85fb29bb49 ndpi: init at 1.8 2017-02-22 00:20:10 -08:00
Tom Hunger
bae3d0e49f vowpalwabbit: init at 8.3.2 2017-02-22 07:28:52 +01:00
Luke Gorrie
a000ec038e r-modules/README.md: mention generate-shell.nix 2017-02-22 04:48:50 +00:00
Tim Steinbach
83f29e9b99
gradle: 3.3 -> 3.4 2017-02-21 19:02:42 -05:00
Vladimír Čunát
723f23d291
dmd: fixup build with glibc-2.25 2017-02-21 18:20:06 +01:00
Vladimír Čunát
cab0b445be
python-3.4: fixup with glibc-2.25 (/cc #22874) 
Upstream won't support it, but let me trick the code into behaving
as if glibc was older.  It seems 3.3 branch should be unaffected.
 2017-02-21 17:56:32 +01:00
zimbatm
9c1399e476 packer: 0.12.1 -> 0.12.2 2017-02-21 14:10:15 +00:00
Arseniy Seroka
c3aa109041 Merge pull request #22497 from andsild/vint 
vint: init at 0.3.11
 2017-02-21 16:19:13 +03:00
Vladimír Čunát
4b7215368a
glibc: fixup libm.a 
Now it's not an actual archive but a linker script, and the absolute
paths in there were broken due to moving *.a into $static.
Let's fix this up in all *.a in case there are more in future.
 2017-02-21 14:19:07 +01:00
asildnes
88b8f38e71
vint: init at 0.3.11 2017-02-21 12:48:03 +01:00
Matthias Beyer
d35695e3e1 Revert "sqlitebrowser: 3.8.0 -> 3.9.1" 
This reverts commit f9d7d29fa9.
 2017-02-21 10:48:00 +01:00
Johannes Bornhold
87b9ee7680 flake8-blind-except: init at 0.1.1 2017-02-21 10:05:16 +01:00
Johannes Bornhold
c55649ce07 flake8-debugger: init at 1.4.0 2017-02-21 10:05:16 +01:00
Johannes Bornhold
96e1fd6a5a python-stdnum: init at 1.5 2017-02-21 10:05:16 +01:00
Johannes Bornhold
402a6c6dde PyWebDAV: init at 0.9.8 2017-02-21 10:05:16 +01:00
Johannes Bornhold
4518b02c8b simpleeval: init at 0.9.5 2017-02-21 10:05:16 +01:00
Peter Hoeg
8e5b630b49 Merge pull request #22264 from peterhoeg/m/modeswitch 
usb-modeswitch: 2.2.1 -> 2.5.0 and nixos module
 2017-02-21 16:49:04 +08:00
Matthias C. M. Troffaes
88cc35f1f4 wolfssl: 3.9.10b -> 3.10.3 2017-02-21 09:42:32 +01:00
Frederik Rietdijk
5bd6331b29 Merge pull request #22944 from johbo/add-trytond 
trytond: init at 4.2.1
 2017-02-21 08:03:43 +01:00
David James
85fba54bc6
Attempt to update RocksDB to 5.1.2. 2017-02-20 21:50:30 -05:00
Vladimír Čunát
e688bbbee4
libunistring: split into multiple outputs 
Saves ~1 MB.  Through default gnutls, many closures are affected.
Reverse deps seem to build OK.
 2017-02-21 00:39:22 +01:00
Vladimír Čunát
b17eb34203
gnutls: don't propagate -lunistring 
This fixes systemd build.  Also put it into the generic expression,
as there's only one version in nixpkgs ATM.
 2017-02-20 23:21:28 +01:00
Johannes Bornhold
79cba3d3ff relatorio: init at 0.6.4 2017-02-20 23:03:04 +01:00
Johannes Bornhold
a2dd4ea7d1 python-sql: init at 0.8 2017-02-20 23:02:04 +01:00
Vladimír Čunát
3ba1875743
mesa: maintenance 13.0.4 -> 13.0.5 
I'm being conservative here until 17.0.1 is released.
 2017-02-20 21:53:03 +01:00
Vladimír Čunát
9458018a87
dbus: 1.10.14 -> 1.10.16 
It's for "security" issue that's considered unexploitable with a sane
config.
 2017-02-20 21:38:24 +01:00
Vladimír Čunát
dbae14164b
glib: maintenance 2.50.2 -> 2.50.3 2017-02-20 21:33:03 +01:00
Vladimír Čunát
4339dca980
gdk-pixbuf: maintenance 2.36.4 -> 2.36.5 2017-02-20 21:31:41 +01:00
Vladimír Čunát
62c323bdff
gtk3: maintenance 3.22.7 -> 3.22.8 2017-02-20 21:30:12 +01:00
Vladimír Čunát
5cf7b7c109
cmake: 3.7.1 -> 3.7.2 2017-02-20 21:29:52 +01:00
Vladimír Čunát
5a38ab8add
Merge branch 'master' into staging 2017-02-20 21:24:35 +01:00
Vladimír Čunát
292efffb62
libuv: 1.10.1 -> 1.11.0 
And a nitpick in the expression.
 2017-02-20 21:23:47 +01:00
Vladimír Čunát
2cb76ff1ff
Merge branch 'glibc-2.25' into staging 
The largest problem-causers should be fixed now (within).
 2017-02-20 21:18:48 +01:00
Frederik Rietdijk
dd054e890f Merge pull request #22061 from Mic92/python3-protobuf 
python-protobuf: enable python3 and enable py3 tests
 2017-02-20 21:17:38 +01:00
Vladimír Čunát
09d02f72f6
Re-revert "Merge: glibc: 2.24 -> 2.25" 
This reverts commit 55cc7700e9.
I hope most problems have been solved.  /cc #22874.
 2017-02-20 21:16:41 +01:00
Vincent Laporte
b634622be0 compcert: 2.7.1 -> 3.0.1 2017-02-20 20:09:53 +00:00
Vladimír Čunát
0ff2179e0f
gnutls: use 3.5 and remove 3.4 
3.4 branch detects support for getrandom() call during configure-time,
which gets picked up since glibc-2.25, and consequently it will fail
with older kernels during rutime.
 2017-02-20 21:07:35 +01:00
Will Dietz
7ea342708a lldb-4.0rc2: Try to fix but ultimately disable on Darwin. 
Currently it's failing due to needing Foundation.h,
but LLDB on Nix-Darwin is a bit sketchy anyway
due to code-signing requirements.
 2017-02-20 09:26:09 -06:00
Will Dietz
a5aedafbd9 llvm-4.0: Distinguish release version, fix naming to clarify rc2. 2017-02-20 09:26:07 -06:00
Will Dietz
753058baef libc++-4.0rc2: Use substituteInPlace instead of the Darwin patch. 
On 3.9 the substituteInPlace is equivalent to the patch,
hopefully this is a slightly more robust way to make
the same substitution for the 4.0 version.

Apply this change unconditionally for consistency across versions,
even if the changed strings are unused on other platforms.

Discussion:
https://github.com/NixOS/nixpkgs/pull/22970#discussion_r101926144
 2017-02-20 09:26:06 -06:00
Will Dietz
2ebb086df1 llvm-4.0/libc++abi: Remove LLVM build dep to unbreak Darwin evaluation. 2017-02-20 09:26:06 -06:00
Will Dietz
9d8ad57abc llvm-4.0: init at rc2 in preparation for release. 
Also adds 'lld'.
 2017-02-20 09:26:06 -06:00
Peter Simons
8bc0ece0f1 hackage-packages.nix: automatic Haskell package set update 
This update was generated by hackage2nix v2.0.4-12-gf83834c from Hackage revision
fbb2c029b0.
 2017-02-20 15:28:45 +01:00
Peter Simons
5e3eea0cd3 LTS Haskell 8.2 2017-02-20 15:28:38 +01:00
Nikolay Amiantov
ec2c9d57b5 Merge pull request #22568 from abbradar/chromium-updates 
Chromium updates
 2017-02-20 15:49:04 +03:00
Robin Gloster
dcba6eae1b Merge pull request #22116 from LnL7/darwin-cmus 
cmus: fix darwin
 2017-02-20 13:02:30 +01:00
aszlig
c5b2714bc7
dbus: Put DTDs into $out instead of $doc 
First of all, these "documents" are not really documentation, so it
really doesn't make much sense to put it into $doc.

The main point however is that the installer tests are failing since
this was introduced in ac0cdc1952.

One way to circumvent this is putting dbus.doc into
system.extraDependencies of the installer tests, but given the first
point this sounds a bit odd to me.

So I went for the second way of putting it into $out, because it's now
basically necessary to build a NixOS system.

With this the NixOS installer tests should now work again, although I
have only tested this with the installer.simple test.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @abbradar
 2017-02-20 03:24:38 +01:00
aszlig
fc6684054d
make-dbus-conf: Use libxslt.bin instead of .dev 
The problem with using libxslt as buildInputs is that the dev output is
used for building the dbus config.

This is one of the reasons why the installer tests are failing since
ac0cdc1952, because the tests do not have
libxslt.dev in their closure and really shouldn't.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @abbradar
 2017-02-20 03:24:34 +01:00
aszlig
edce2b759c
make-dbus-conf: Don't try to access network 
This is the output of the builder:

building path(s) `/nix/store/khkcfb8433i9mabb6wnb8ik6p9skg644-dbus-1'
error : connection refused
error : connection refused

However, even when using --nonet we'd still get this:

I/O error : Attempt to load network entity
http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd

So in order to avoid this, we now provide an XML catalog file, mapping
the public URLs to the local DTD paths inside the store instead of using
--path (which doesn't seem to work with xsltproc).

Tested this by comparing the SHA256 (nix-hash --type sha256) of the
output path generated by:

nix-build -E '(import ./. {}).makeDBusConf {
  suidHelper = "SUIDHELPER";
  serviceDirectories = [ "SERVICEDIR1" "SERVICEDIR1" ];
}'

... with the SHA256 of the generated output path prior to this commit
and they have the same hash:

6f3f9594b12fddbff9407b85252b6f649da11f56b7fd514f761966c11399a7ab

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @abbradar
 2017-02-20 03:24:26 +01:00
Benjamin Saunders
bfdfd6c3df vulkan-loader: fix search paths in suid processes 
Fixes #22990
 2017-02-20 01:39:48 +03:00
Domen Kožar
5fc89a6778
language-ecmascript: jailbreak 2017-02-19 20:30:13 +01:00
Peter Simons
7734d159d1 hackage-packages.nix: automatic Haskell package set update 
This update was generated by hackage2nix v2.0.4-12-gf83834c from Hackage revision
cc52bff6e8.
 2017-02-19 20:12:44 +01:00
Nikolay Amiantov
aefb01a945 haskellPackages.lambdabot: maintain 2017-02-19 20:12:44 +01:00
Peter Simons
7422bb0ceb Merge pull request #22995 from rvl/lentil 
haskellPackages.lentil: no longer needs overrides
 2017-02-19 20:06:30 +01:00
Michael Raskin
febda39df3 qca2: 2.1.1 -> 2.1.3 2017-02-19 18:38:10 +01:00
Rodney Lorrimar
1078758b12 haskellPackages.lentil: no longer needs overrides 2017-02-19 17:13:09 +00:00
vbgl
d31577cfd3 Merge pull request #22871 from FlorentBecker/default_ocaml_402 
Default ocaml 402
 2017-02-19 15:54:54 +01:00
Arseniy Seroka
fe5ea1ba82 Merge pull request #22742 from volhovM/feature/fix-orgmode-parse-tests 
Disable orgmode-parse tests in configuration-common.nix
 2017-02-19 16:16:54 +03:00
Florent Becker
9d57f1ae9a frama-c: fix compilation with ocaml 4.02+ 2017-02-19 13:05:47 +01:00
Vincent Laporte
203e3c5292 trv: fix the propagate build inputs 2017-02-19 11:38:29 +00:00
sternenseemann
a452714799 ocaml-cow: init at 2.2.0 2017-02-19 11:16:25 +00:00
Vincent Laporte
d2a4a84f00 ocamlPackages.uri: 1.9.1 -> 1.9.2 
The old version is also kept, under the attribute `uri_p4`.
It is built against `sexplib` version prior to 113.33 and needed by `trv`.
 2017-02-19 11:57:24 +01:00
Benno Fünfstück
785fbfac65 haskell: add nix-specific fixes for various packages in stackage" 
This reverts commit fd0e0cdc76.

http-streams test suite is no longer broken, but still needs to be
disabled due to cyclic dependencies (http-streams(test) -> snap ->
http-streams)
 2017-02-19 11:34:21 +01:00
Daiderd Jordan
16fd03ddaa Merge pull request #22907 from wizeman/u/upd-rust 
rustc: 1.15 -> 1.15.1
 2017-02-19 10:51:10 +01:00
Joachim F
ac7c0208e8 Merge pull request #22982 from dtzWill/fix/creduce-wrapper 
creduce: Use wrapper instead of propagatedUserEnvPkgs
 2017-02-19 10:22:49 +01:00
Jörg Thalheim
0361776764
pyroute2: 0.4.12 -> 0.4.13 2017-02-19 09:58:13 +01:00
sternenseemann
44820907af ocaml-ezjsonm: 0.4.1 -> 0.4.3 2017-02-19 04:53:44 +00:00
sternenseemann
4f0feb4f5f ocaml-logs: init at 0.6.2 2017-02-19 04:36:14 +00:00
Will Dietz
798e0f50f4 creduce: Use wrapper instead of propagatedUserEnvPkgs 
Friendlier when installed,
fixes execution outside of NixOS.
 2017-02-18 19:49:53 -06:00
sternenseemann
d738ac4fd5 ocaml-angstrom: init at 0.3.0 2017-02-19 02:12:52 +01:00
Michele Guerini Rocco
1ae9b50a77 vapoursynth: disable OCR by default (#22943) 2017-02-19 02:11:08 +01:00
Nikolay Amiantov
7cbe538e94 pythonPackages.wrapPython: fix for paths with spaces 2017-02-19 01:43:12 +03:00
rushmorem
3f09f8fa4d czmq: v3.0.2 -> v4.0.2 2017-02-18 23:54:50 +02:00
rushmorem
467f7d3f6c zmq: v4.2.0 -> v4.2.2 2017-02-18 22:52:02 +02:00
Thomas Tuegel
fd0e0cdc76
Revert "haskell: add nix-specific fixes for various packages in stackage" 
This reverts commit 17c5ca9018.

This commit causes an evaluation error due to infinite recursion, which can be
tested by running:
```
$ nix-env -f . -qa \* --meta --xml --drv-path --show-trace > /dev/null
```
 2017-02-18 12:48:05 -06:00
Nikolay Amiantov
32560d2699 haskellPackages.lambdabot: fix build 2017-02-18 19:33:22 +03:00
Nikolay Amiantov
713918a094 haskellPackages.pointfree: fix build 2017-02-18 19:33:22 +03:00
Franz Pletz
78abfe951b
php71: 7.1.1 -> 7.1.2 2017-02-18 14:50:16 +01:00
Franz Pletz
405e117d31
php70: 7.0.15 -> 7.0.16 2017-02-18 14:49:59 +01:00
Benno Fünfstück
17c5ca9018 haskell: add nix-specific fixes for various packages in stackage 
With these overrides, nearly all of the stackage packages in the latest
stackage release should compile now.
 2017-02-18 14:34:53 +01:00
Eric Sagnes
979d20794d buildRebar3: fix buildPhase & cleanup (#22744) 2017-02-18 14:25:24 +01:00
Frederik Rietdijk
8c3480f3b9 Merge pull request #22828 from matthiasbeyer/update-my-pkgs 
Updates for some of my packages
 2017-02-18 14:09:51 +01:00
obadz
ae91514b26 gapi-ocaml: 0.2.10 -> 0.3.1 2017-02-18 10:42:59 +00:00
Peter Hoeg
3729441340 Merge branch 'u/bundler' into real_master 2017-02-18 17:35:07 +08:00
Vladimír Čunát
432dba859e
Merge branch 'staging' 
A security update of libxml2 is within.
 2017-02-18 08:59:29 +01:00
Vladimír Čunát
714eabc5af
guile rev-deps: fix build by adding pkgconfig 
Without it packages fail to find the headers, after guile has split
them into a separate output in 218713a.
 2017-02-18 08:23:07 +01:00
Peter Hoeg
cad335eb01 usb-modeswitch-data: 20160112 -> 20170205 
Plus some minor cleanups.
 2017-02-18 11:35:25 +08:00
Peter Hoeg
9097b9e34a usb-modeswitch: 2.2.1 -> 2.5.0 
We were carrying v2.2.1 and not v2.3.0 due to the update only touching
the version and not the sha256 sum.
 2017-02-18 11:35:02 +08:00
Thomas Tuegel
a8b49802db Merge pull request #22902 from ttuegel/kde5-instructions 
KDE 5 packaging instructions
 2017-02-17 21:09:31 -06:00
Sarah Brofeldt
d26ac6afa4 haskellPackages.xmonad-extras: jailbreak to allow xmonad 0.13 (#22927) 
Fixes https://github.com/NixOS/nixpkgs/issues/22919
 2017-02-18 04:07:55 +01:00
Thomas Tuegel
580bdde06c
kde5.frameworks: update instructions 2017-02-17 11:48:14 -06:00
Joachim F
fe4552420e Merge pull request #22680 from dtzWill/feature/creduce 
creduce: init at 2.6.0
 2017-02-17 16:58:37 +01:00
Ricardo M. Correia
8d1bd281cc rustc: 1.15 -> 1.15.1 2017-02-17 16:44:01 +01:00
Peter Hoeg
facb2c0483 bundler: 1.14.3 -> 1.14.4 2017-02-17 22:48:39 +08:00
Vincent Demeester
834de6ebaa glide: output correct version (#22896) 
It currently displays `0.12.0-dev` instead of the specified
version.

Signed-off-by: Vincent Demeester <vincent@sbr.pm>
 2017-02-17 12:08:54 +01:00
Nikolay Amiantov
8ecd5c4019 Merge pull request #22864 from abbradar/dbus-etc 
Redo DBus configuration
 2017-02-17 11:47:51 +03:00
Daiderd Jordan
8a5c6153d7 Merge pull request #22814 from veprbl/wxpython 
wxPython30: fix on darwin
 2017-02-17 08:35:39 +01:00
David Terry
90d225db76 microsoft_gsl: init at 2017-02-13 2017-02-17 02:14:12 +01:00
Dmitry Kalinkin
c2a5733654
wxPython: fix on darwin 2017-02-16 18:48:08 -05:00
Robin Gloster
101d90d18b
libzrtpcpp: remove 2017-02-17 00:14:15 +01:00
Robin Gloster
449c895f31
podofo: 0.9.4 -> 0.9.5 2017-02-17 00:14:01 +01:00
Robin Gloster
54018c8f63
xmlsec: 1.2.20 -> 1.2.23 2017-02-17 00:13:45 +01:00
Robin Gloster
e400eb36d1
nodejs: 6.9.1 -> 6.9.5 2017-02-17 00:13:34 +01:00
Robin Gloster
5063a8099b
serf: 1.3.7 -> 1.3.9 2017-02-17 00:13:32 +01:00
Robin Gloster
9593049e06
pkcs11helper: 1.11 -> 1.21 2017-02-17 00:13:18 +01:00
Robin Gloster
22bea837f4
tcltls: 1.6 -> 1.6.7 2017-02-17 00:12:12 +01:00
Robin Gloster
c3011fde96
neon: 0.30.1 -> 0.30.2 2017-02-17 00:11:29 +01:00
Robin Gloster
80d8b8c716
mongoc: 1.1.10 -> 1.5.4 2017-02-17 00:11:26 +01:00
Robin Gloster
4277978fb2
gsoap: 2.8.37 -> 2.8.42 2017-02-17 00:11:18 +01:00
Robin Gloster
71e8ef6e76
afflib: 3.7.6 -> 3.7.15 2017-02-17 00:11:14 +01:00
Vladimír Čunát
110f136dc2
python*: upstream patches to fix with glibc-2.25 
https://bugs.python.org/issue29157
The 3.6 release already contains the fix (from 3.5);
the branches in-between are claimed to be unaffected.
/cc #22874.
 2017-02-16 23:13:38 +01:00
Lluís Batlle i Rossell
0c42efd9d7 SDL2: fix creation of libSDL2main.a 
It's required by a trigger rally update I will commit next.
And other games use that too.
 2017-02-16 22:24:40 +01:00
Vladimír Čunát
5ad81ab09c
libxml2: bugfix updates from git upstream 
This should solve CVE-2016-5131 and some other bugs, but not what Suse
calls CVE-2016-9597: https://bugzilla.suse.com/show_bug.cgi?id=1017497
The bugzilla discussion seems to indicate that the CVE is referenced
incorrectly and only shows reproducing when using command-line flags
that are considered "unsafe".

CVE-2016-9318 also remains unfixed, as I consider their reasoning OK:
https://lwn.net/Alerts/714411/

/cc #22826.
 2017-02-16 20:18:17 +01:00
Vladimír Čunát
e962a3c95f
Merge branch 'master' into staging 2017-02-16 19:02:37 +01:00
Vladimír Čunát
55cc7700e9
Revert "Merge: glibc: 2.24 -> 2.25" 
This reverts commit 1daf2e26d2, reversing
changes made to c0c50dfcb7.

It seems this is what has been causing all the reliability problems
on Hydra.  I'm currently unable to find why it happens, so I'm forced
to revert the update for now.  Discussion: #22874.
 2017-02-16 18:16:06 +01:00
Frederik Rietdijk
624cd8ae9e Merge pull request #22593 from teh/master 
Update scrapy & dependencies
 2017-02-16 17:27:57 +01:00
Tom Hunger
69363e9611 Move scrapy to its own module and add patch to fix broken permission code. 
Scrapy is usually installed via pip where copying all permissions
makes sense. In Nix the files copied are owned by root and
readonly. As a consequence scrapy can't edit the project templates so

  scrapy startproject

fails.
 2017-02-16 16:21:46 +00:00
Graham Christensen
cfbddd3ae0 Merge pull request #22867 from maurer/openssl-cve-2017-3733 
openssl: 1.1.0d -> 1.1.0e for High severity CVE-2017-3733
 2017-02-16 09:29:29 -05:00
Matthew Maurer
0d2ba7ef2b openssl: 1.1.0d -> 1.1.0e for High severity CVE-2017-3733 2017-02-16 09:16:41 -05:00
Joachim Fasting
2d643613f3
mozart: refactoring 
- Append emacs to the oz wrapper's command search path rather than the
  rpath.  Previously, emacs would end up in the closure but the oz
  shell script would not be helped by it. Now a user without emacs in
  their PATH can still get the complete Oz experience (which depends
  crucially on emacs).  To build a variant without emacs, do
  mozart.override { emacs = null; }
- Patch full path to oz executable into the oz desktop item to make the
  output less reliant on the runtime PATH
- Compress .elc files to save a little bit of space
- Make it easier to extend platform support
- Inline builder.sh
- Be more specific about patching.  oz and ozc are capable of inferring
  OZHOME themselves; thus we generate wrappers only for the binary
  executable components.

Note that gmp and boost would be removed by patchelf --shrink-path; I've
no idea whether they are used somehow, so we leave them in and forego
rpath shrinking for now.
 2017-02-16 14:51:08 +01:00
Graham Christensen
52026edf98 Merge pull request #22839 from ilya-kolpakov/master 
boost: 1.63.0 (not default)
 2017-02-16 07:42:40 -05:00
Nikolay Amiantov
3e23ec4450 makeDBusConf: init 
Use XSLT transform to modify stock dbus configuration file. This is needed
because some dbus components doesn't support <include> so we need to put our
core configuration in the main file.
 2017-02-16 15:41:23 +03:00
Nikolay Amiantov
300c9a6c3d dbus: use /etc as datadir, install dtd 2017-02-16 15:41:23 +03:00
Peter Simons
3c0b1919e7 git-annex: update sha256 hash for the new version 2017-02-16 11:49:42 +01:00
Peter Simons
5e910bcbf6 hackage-packages.nix: automatic Haskell package set update 
This update was generated by hackage2nix v2.0.4-12-gf83834c from Hackage revision
2701517fd6.
 2017-02-16 11:49:11 +01:00
Peter Simons
918a5926c6 hackage2nix: drop obsolete extra packages 2017-02-16 11:48:10 +01:00
Graham Christensen
7943dc8978 Merge pull request #22843 from bendlas/update-webkitgtk 
webkitgtk212x: remove
 2017-02-15 21:28:35 -05:00
Jascha Geerds
900fc49013 Merge pull request #22775 from peterhoeg/u/qtox 
tox clients and libraries updates
 2017-02-15 23:05:14 +01:00