Commit graph

96015 commits

Author SHA1 Message Date
Jörg Thalheim e5eccf311f Merge pull request #26949 from Profpatsch/adbfs-rootless
adbfs-rootless: init at 2016-10-02
2017-06-29 08:22:42 +01:00
Jörg Thalheim fa68544156 adbfs-rootless: limit platform to linux 2017-06-29 08:20:54 +01:00
Jörg Thalheim 793620eff4 Merge pull request #26898 from knedlsepp/update-gogs
gogs: 0.10.18 -> 0.11.19
2017-06-29 08:14:43 +01:00
Jörg Thalheim f14cd40c4b gogs: remove old deps.nix
gogs code is now fully vendored.
2017-06-29 08:12:32 +01:00
Christian Albrecht dd484418a1 skopeo: 0.1.18 -> 0.1.22 fix whitespace 2017-06-29 08:54:52 +02:00
Christian Albrecht 05e9c47dc3 skopeo: 0.1.18 -> 0.1.22 fix certs.d permission error
the dependency docker_client.go tries to read /etc/docker/certs.d/
and fails if this is not readable.

the original code silently ignores this directory if it is not present
so path.patch adds the logic to ignore it in case of a permission error.
2017-06-29 08:47:08 +02:00
Jörg Thalheim b8e9561e02 Merge pull request #26919 from romildo/upd.moka-icon-theme
moka-icon-theme: 2017-02-13 -> 5.3.6
2017-06-29 07:45:31 +01:00
Profpatsch da012dda01 adbfs-rootless: init at 2016-10-02 2017-06-29 08:44:43 +02:00
Joachim F 332486fc13 Merge pull request #26943 from mdorman/emacs-updates
Automated Emacs Package updates
2017-06-29 07:04:01 +01:00
Karn Kallio 13ab06b05a kde applications : fix builds by adding missing dependencies
Patch applied by James Cook <james.cook@utoronto.ca>.
2017-06-29 05:01:46 +00:00
Karn Kallio 815764096b Fix akonadi build.
Patch applied by James Cook <james.cook@utoronto.ca>.
2017-06-29 04:51:20 +00:00
Charles Strahan f4e04c3e44
clac: 20170416 -> 20170503 2017-06-28 22:46:11 -04:00
Tim Steinbach 4cc729644e Merge pull request #26867 from michalpalka/xen-security-2017.06-new
xen: patch for XSAs: 216, 217, 218, 219, 220, 221, 222, and 224
2017-06-28 22:43:46 -04:00
John Ericson eb052edd6f Merge pull request #26946 from obsidiansystems/wxmsw-fix
wxMSW: Fix syntax --- travis eval did not catch
2017-06-28 22:39:36 -04:00
Tim Steinbach db17c508ef Merge pull request #26915 from diegs/terraform
terraform: 0.9.6 -> 0.9.9.
2017-06-28 22:39:18 -04:00
Tim Steinbach fb8a66dcc9 Merge pull request #26945 from NeQuissimus/virtualbox_32bit
virtualbox: Add ability to disable 32-bit guest support
2017-06-28 22:32:12 -04:00
John Ericson b0ada07f36 wxMSW: Fix syntax --- travis eval did not catch 2017-06-28 22:31:24 -04:00
romildo 226aadd6b0 monoid: init at 2016-07-21 2017-06-28 23:24:32 -03:00
Tim Steinbach 312c2f7961
virtualbox: Add ability to disable 32-bit guest support 2017-06-28 22:24:19 -04:00
Tomas Hlavaty f57fadc536 sbcl: 1.3.18 -> 1.3.19
Updated sbcl with new version released today.  Tested on nixos 17.03
x86_64, sbcl executable runs.  Thanks.

From 36da6ad6eac68fdf2c8876c0a35642aa3e5c9d96 Mon Sep 17 00:00:00 2001
From: Tomas Hlavaty <tom@logand.com>
Date: Wed, 28 Jun 2017 20:12:58 +0200
Subject: [PATCH] sbcl: 1.3.18 -> 1.3.19
2017-06-28 21:52:59 -04:00
John Ericson e1faeb574a Merge pull request #26884 from obsidiansystems/purge-stdenv-cross
Purge stdenv cross
2017-06-28 21:39:16 -04:00
hsloan 9f156f4a8a top-level: stdenv.cross vanquished 2017-06-28 21:29:08 -04:00
hsloan 10685e3956 replace: Rely on cc-wrapper to export env var 2017-06-28 21:29:08 -04:00
hsloan 936196129d html-tidy: Don't use stdenv.cross 2017-06-28 21:29:08 -04:00
hsloan 60ce1e3b90 ts: Rely on cc-wrapper to export this env var 2017-06-28 21:29:07 -04:00
hsloan 82a09181a4 tm: Rely on cc-wrapper to export this env var 2017-06-28 21:29:07 -04:00
hsloan 40be9738ab nix: Don't use stdenv.cross 2017-06-28 21:29:07 -04:00
hsloan 822084fa37 tcpdump: Don't use stdenv.cross 2017-06-28 21:29:07 -04:00
hsloan 1b882edf78 mtdutils: Rely on cc-wrapper to export this env var 2017-06-28 21:29:07 -04:00
hsloan 2f37cad1b9 wxMSW-2.8: Don't use stdenv ? cross 2017-06-28 21:29:07 -04:00
hsloan c4ab3ef580 jom: Don't use stdenc.cross 2017-06-28 21:29:07 -04:00
hsloan 14d3ed8c38 sysvinit: Rely on cc-wrapper to export this env var 2017-06-28 21:29:07 -04:00
hsloan a291194d2f shadow: Don't use stdenv ? cross 2017-06-28 21:28:34 -04:00
hsloan b8ed3c65bb propcps: Rely on cc-wrapper to export this env var 2017-06-28 21:24:25 -04:00
hsloan 66e22e1229 mingetty: Rely on cc-wrapper to export this env var 2017-06-28 21:24:24 -04:00
hsloan 5d83d36389 mdadm: Don't use stdenv.cross 2017-06-28 21:24:24 -04:00
hsloan a210b08d18 klibc: Don't use crossAttrs 2017-06-28 21:24:12 -04:00
Johannes Frankenau 8461e31dc9 mergerfs: 2.16.1 -> 2.22.1 2017-06-29 02:54:48 +02:00
hsloan 16781a3892 kernel perf: Don't use stdenv.cross 2017-06-28 20:23:09 -04:00
hsloan 1e3b45cfdb kernel manual-config: Don't use stdenv.cross 2017-06-28 20:23:09 -04:00
hsloan 459d07d41c kernel generic: Don't use stdenv.cross 2017-06-28 20:22:59 -04:00
hsloan c5b4b6c911 kernel-headers: Don't use stdenv.cross 2017-06-28 19:44:04 -04:00
hsloan a7f81284a5 uboot: Don't use stdenv.cross 2017-06-28 19:43:08 -04:00
hsloan 9cd606467f libtool2: Don't use stdenv ? cross 2017-06-28 19:43:03 -04:00
hsloan 3e69864717 cmake 2.8: Don't use stdenv ? cross 2017-06-28 19:42:46 -04:00
hsloan f9730bc8da readline 7.0: Don't use stdenv ? cross 2017-06-28 19:42:35 -04:00
hsloan 45272c98f5 readline 6.3: Don't use stdenv ? cross 2017-06-28 19:42:11 -04:00
hsloan a46b063ac1 readline 6.2: Don't use stdenv ? cross 2017-06-28 19:41:56 -04:00
hsloan d28eb3b7a0 poppler: Don't use stdenv.cross 2017-06-28 19:41:29 -04:00
hsloan 51856df2a1 nlohmann_json: Don't use stdenv.cross 2017-06-28 19:41:22 -04:00
hsloan 8b726dc116 newt: Don't use stdenv.cross 2017-06-28 19:39:08 -04:00
hsloan 9d56714419 libssh2: Don't use stdenv.cross 2017-06-28 19:39:00 -04:00
hsloan a850ddbefc libpng default: Don't use stdenv.cross 2017-06-28 19:38:29 -04:00
hsloan bdbdb08eef libpng 12: Don't use stdenv ? cross 2017-06-28 19:37:39 -04:00
hsloan a9c90df12e libmsgpack generic: Don't use stdenv.cross 2017-06-28 19:36:49 -04:00
hsloan 737e344e50 libjpeg-turbo: Don't use stdenv.cross 2017-06-28 19:36:21 -04:00
hsloan db0af50973 libiconv: Don't use stdenv ? cross 2017-06-28 19:34:32 -04:00
hsloan 5a21bb6917 libffi: Don't use stdenv ? cross 2017-06-28 19:34:03 -04:00
hsloan 58196b607e libav: Don't use stdenv.cross 2017-06-28 19:33:46 -04:00
hsloan de1125ea2c glew default: Don't use stdenv ? cross 2017-06-28 19:33:39 -04:00
hsloan ade488c52a glew 1.10: Don't use stdenv ? cross 2017-06-28 19:32:57 -04:00
hsloan cebe4ee5c9 freetype default: Don't use stdenv.cross 2017-06-28 19:32:41 -04:00
hsloan 9b2d1cbc70 fontconfig default: Don't use stdenv.cross 2017-06-28 19:31:16 -04:00
hsloan 0fa3d99f4e fontconfig 2.10: Don't use stdenv.cross 2017-06-28 19:29:41 -04:00
Jörg Thalheim 7642a76c1a Merge pull request #26926 from dotlambda/master
dmensamenu: init at 1.0.0
2017-06-29 00:29:18 +01:00
hsloan df8c390a5a boost: Don't use stdenv ? cross 2017-06-28 19:29:03 -04:00
hsloan 67ae0f0370 boehm-gc: Don't use stdenv ? cross 2017-06-28 19:27:45 -04:00
hsloan 784ffeaabd SDL: Don't use stdenv ? cross
Simplify and finess logic a bit in a way that doesn't affect the
default native build, too.
2017-06-28 19:25:41 -04:00
Jörg Thalheim 7ab817c8b8 Merge pull request #26942 from dtzWill/fix/mendeley-ignore-handler-errors
mendeley: ignore errors attempting to install link handler on startup
2017-06-28 23:42:23 +01:00
hsloan 49347667a8 gcc-wrapper-old: Don't use stdenv.cross
Take the dynamic linker logic for cc-wrapper for now
2017-06-28 18:42:00 -04:00
Michael Alan Dorman 37f381a970 melpa-packages: 2017-06-28
Removals:
 - relative-line-numbers: removed from melpa
2017-06-28 18:37:31 -04:00
Michael Alan Dorman b2e148faa0 melpa-stable-packages: 2017-06-28
Removals:
 - relative-line-numbers: removed from melpa
2017-06-28 18:37:30 -04:00
Michael Alan Dorman e636454c40 elpa-packages: 2017-06-28 2017-06-28 18:37:30 -04:00
Jörg Thalheim d0a9189a03 Merge pull request #26941 from volth/certstrap-1.0.1
certstrap: init at 1.0.1
2017-06-28 23:34:10 +01:00
John Ericson da668f66c7 zlib: cc-wrapper can be relied on to export this env var 2017-06-28 18:31:37 -04:00
John Ericson 895c361480 WIP: optipng: cc-wrapper can be relied on to export these env vars 2017-06-28 18:31:37 -04:00
John Ericson f16ee76ca8 qt 4.8: Don't use stdenv.cross 2017-06-28 18:31:37 -04:00
John Ericson aac32fe2d1 vim: cc-wrapper can be relied on to export this env var 2017-06-28 18:31:37 -04:00
John Ericson 60eff17b27 openssl: cc-wrapper can be relied on to export these env vars 2017-06-28 18:31:37 -04:00
John Ericson c23028bdad cc-wrapper: Also export env var for windres, when it is present 2017-06-28 18:31:37 -04:00
John Ericson a40ceb2782 glew: Rely on cc-wrapper can to export these env vars 2017-06-28 18:30:46 -04:00
John Ericson 5c99b2f341 libvpx: Don't use stdenv.cross 2017-06-28 18:21:06 -04:00
John Ericson 38dbd4b161 ffmpeg: Don't use stdenv.cross 2017-06-28 18:21:06 -04:00
John Ericson fcef0add76 boost: Don't use stdenv.cross, and utilize new platform metadata 2017-06-28 18:21:06 -04:00
John Ericson 67b5f39c72 scummvm: Don't use stdenv.cross 2017-06-28 18:21:06 -04:00
John Ericson 80a857f8d7 SDL: Don't use stdenv.cross 2017-06-28 18:21:06 -04:00
John Ericson 5d1e51a199 lua 5: Don't use stdenv.cross, and use less make flags
cc-wrapper will define environment variables matching those now
2017-06-28 18:21:06 -04:00
John Ericson c3c5793ab2 guile: Don't use stdenv.cross 2017-06-28 18:21:05 -04:00
John Ericson deb8fae4c0 make-initrd: Don't use stdenv.cross 2017-06-28 18:21:05 -04:00
John Ericson 9c163cebdd omxplayer: Don't use stdenv.cross 2017-06-28 18:21:05 -04:00
John Ericson ffa535a0cc fossil: Don't use stdenv.cross 2017-06-28 18:21:05 -04:00
John Ericson ca94de8c4c offrss: cc-wrapper can be relied on to export this env var 2017-06-28 18:21:05 -04:00
John Ericson c4443d70df fbida: cc-wrapper can be relied on to export these env vars 2017-06-28 18:21:05 -04:00
John Ericson a11426c523 ImageMagick: Don't use stdenv.cross
I'm guessing the salient aspect here is not cross compiling itself, but
just whether the host platform is MinGW, so I simplified the logic
accordingly
2017-06-28 18:20:38 -04:00
Will Dietz a97c803b4b mendeley: ignore errors attempting to install link handler on startup
It's not critical functionality and AFAICT only fails in environments
that wouldn't benefit from "successfully" installing it anyway.

Fixes #24709
Fixes #24821
2017-06-28 17:05:11 -05:00
Volth 8797e3edd2 certstrap: init at 1.0.1 2017-06-28 21:16:38 +00:00
Michael Raskin 338be9dbd4 Fresh SBCL is not compatible with not-fresh iolib 2017-06-28 22:18:25 +02:00
Aristid Breitkreuz fe2e3cea51 gnome-control-center: add missing dependency on cracklib 2017-06-28 21:43:15 +02:00
Will Dietz bcaceabc3c ddccontrol: Don't try to set special perms on ddcpci 2017-06-28 14:41:32 -05:00
Will Dietz 8e5759e7d2 irods: Don't ask cmake to grant setuid permissions 2017-06-28 14:37:34 -05:00
Will Dietz 707145a955 firejail: don't try to set setuid bit 2017-06-28 14:31:47 -05:00
Will Dietz ed0ac2fece leafnode: patch around setting special bits 2017-06-28 14:31:46 -05:00
Will Dietz 0d871bd108 libutempter: Fixup unsupported permissions here as well 2017-06-28 14:31:46 -05:00
Will Dietz 09d85c49c4 kbdlight: Fix installation permissions
Looks like NixOS creates a security wrapper for this already, FWIW.
2017-06-28 14:31:45 -05:00
Will Dietz 15253a8dde wcslib: fix attempts to use unsupported permissions during install 2017-06-28 14:31:44 -05:00
Will Dietz 59bf263a59 netselect: Fix attempt to use unsupported permissions on files in store 2017-06-28 14:31:44 -05:00
Will Dietz 7492873014 mcron: Fix attempt to set +s during install 2017-06-28 14:31:43 -05:00
Daiderd Jordan 35b974a8e9 Merge pull request #26911 from manveru/patch-2
dockerTools.buildImage: configurable timestamp
2017-06-28 21:28:30 +02:00
Tomas Hlavaty ad82538423 ccl: create ccl symlink
Make it more intuitive for users to start ccl and avoid platform
dependent executable names.

https://github.com/NixOS/nixpkgs/issues/26934
2017-06-28 21:11:48 +02:00
Will Dietz d339dc762c mailutils: Fix attempts to set unsupported ownership and perms 2017-06-28 13:58:16 -05:00
Robert Helgesson fa6e946383
eclipse-plugin-jdt: 4.6.2 -> 4.7 2017-06-28 20:56:48 +02:00
Robert Helgesson 556a867186
eclipse-sdk: 4.6.2 -> 4.7 2017-06-28 20:56:48 +02:00
Robert Helgesson 0a52cc1851
eclipse-platform: 4.6.2 -> 4.7 2017-06-28 20:56:43 +02:00
Vincent Laporte c8c673568c ocamlPackages.stringext: 1.4.0 -> 1.4.3
ocamlPackages.qcheck: 0.4.0.1 -> 0.6
2017-06-28 18:41:59 +00:00
Vincent Laporte 582c3edcfa ocamlPackages.bap: mark as broken on OCaml ≥ 4.03 2017-06-28 18:41:59 +00:00
Daniel Peebles 09194cafa8 Merge pull request #26937 from joachifm/lkl-4_11
lkl: 2017-03-24 -> 2017-06-27
2017-06-28 14:35:36 -04:00
Will Dietz 179936d75c mailman: Fix attempts to chmod g+s during installation 2017-06-28 13:34:21 -05:00
Joachim Fasting 0bc3429e77
lkl: 2017-03-24 -> 2017-06-27
Now based on Linux 4.11
2017-06-28 20:14:00 +02:00
Joachim F c7278cfc0b Merge pull request #26887 from taku0/thunderbird-bin-52.2.1
Thunderbird bin 52.2.1
2017-06-28 19:06:38 +01:00
Vincent Laporte 607650adac ocamlPackages.ptime: 0.8.2 -> 0.8.3 2017-06-28 17:39:15 +00:00
Vincent Laporte 64ff2e2712 ocamlPackages.mtime: 0.8.3 -> 0.8.4, 1.1.0 2017-06-28 17:28:13 +00:00
Tim Steinbach add90948bc
docker: 17.03.1-ce -> 17.03.2-ce 2017-06-28 12:49:59 -04:00
Christian Albrecht 08ccf9e059 skopeo: 0.1.18 -> 0.1.22 2017-06-28 18:45:30 +02:00
Shea Levy 24c59a4452 neuron: enable GUI 2017-06-28 11:59:54 -04:00
Vladimír Čunát 46a4462782
Merge #26927: libopus: bugfix 1.2 -> 1.2.1 2017-06-28 17:45:39 +02:00
Jörg Thalheim 855c1bde42 suid-chroot: do not set suid bit during install
To be useful in nixos, it probably also requires a module to set up a hardening wrapper.
2017-06-28 16:00:38 +01:00
Domen Kožar 5015dea12a
stack2nix: depend on stack binary as well 2017-06-28 16:35:08 +02:00
Domen Kožar 8de4530b4a
Add static binary for stack2nix 2017-06-28 16:21:42 +02:00
Jörg Thalheim cc63c5d32c bench: add static executable from haskellPackages 2017-06-28 14:42:54 +01:00
Thomas Tuegel 59f94b12f3
dropbox: 28.4.14 -> 29.4.20 2017-06-28 08:38:38 -05:00
Thomas Tuegel 2ed4b6fad8
qt59: fix qtCompatVersion
Qt 5.9 was incorrectly identified as being plugin-compatible with Qt 5.8.
2017-06-28 08:38:38 -05:00
Peter Simons 298c3bdac0 hackage-packages.nix: automatic Haskell package set update
This update was generated by hackage2nix v2.2.1-11-gb2cb3cb from Hackage revision
8860e9a322.
2017-06-28 15:37:53 +02:00
Peter Simons 668c2c348b hackage2nix: disable broken hydra builds 2017-06-28 15:37:52 +02:00
Peter Simons b5729a2571 LTS Haskell 8.20 2017-06-28 15:37:52 +02:00
Pascal Wittmann 3dea2941e0 Merge pull request #26712 from gnidorah/master2
nas: init at 1.9.4
2017-06-28 15:20:23 +02:00
Eelco Dolstra 32e492251b
systemd: Apply fix for CVE-2017-9445 2017-06-28 14:08:05 +02:00
Frederik Rietdijk 8a62a9b064 Merge pull request #26125 from volth/webkitgtk-naming
rename webkitgtk24x⇒webkitgtk24x-gtk3; webkitgtk2⇒webkitgtk24x-gtk2
2017-06-28 13:54:38 +02:00
gnidorah 69aa5f5540 nas: init at 1.9.4 2017-06-28 14:13:20 +03:00
Martin Wohlert b90bab7d58 libopus: 1.2 -> 1.2.1
> http://opus-codec.org/release/stable/2017/06/26/libopus-1_2_1.html

This Opus 1.2.1 minor release fixes a relatively rare issue where the 1.2 encoder would wrongly assume a signal to be bandlimited to 12 kHz and not encode frequencies between 12 and 20 kHz.
This only happens on a few clips, but it is good to update to avoid a potential loss of quality.

There are no other changes compared to 1.2.
2017-06-28 11:53:05 +02:00
Robert Schütz 1a7745d6ec dmensamenu: init at 1.0.0 2017-06-28 11:43:39 +02:00
Jörg Thalheim bd10a77c56 Merge pull request #26908 from selaux/rustPackages-2017-06-27
rustRegistry: 2017-06-25 -> 2017-06-27
2017-06-28 09:52:19 +01:00
Jörg Thalheim 5e044b9dc8 Merge pull request #26903 from ivan-tkatchev/pullrequest4
boost-build: update to version 2016.03
2017-06-28 09:46:42 +01:00
Benjamin Staffin 1856119466 python-gflags: 2.0 -> 3.1.1 (#26858)
* python-gflags: 2.0 -> 3.1.1

* python-gflags: split out to new python-modules dir

* python-gflags: fix tests
2017-06-28 10:42:13 +02:00
Frederik Rietdijk e93f222fd4 Merge pull request #26914 from siddharthist/django-polymorphism
django-polymorphic: init at 1.2
2017-06-28 10:41:20 +02:00
Jörg Thalheim 33adb08080 boost-build: drop spurious version infix 2017-06-28 09:40:31 +01:00
Jörg Thalheim fcf4f2f9ad Merge pull request #26918 from diegs/google-cloud-sdk
google-cloud-sdk: 155.0.0 -> 159.0.0
2017-06-28 09:36:37 +01:00
Jörg Thalheim ce88027294 jetbrains.gogland: 171.4694.35 -> 171.4694.61 2017-06-28 08:31:08 +01:00
Jörg Thalheim f849eb2018 jetbrains.datagrip: 2017.1.4 -> 2017.1.5 2017-06-28 08:30:59 +01:00
John Ericson 099b83f90d libxslt: Don't use stdenv.cross 2017-06-28 00:55:21 -04:00
John Ericson 8ca8293dbc libxml2: Don't use stdenv.cross 2017-06-28 00:51:59 -04:00
romildo aad03268cb moka-icon-theme: 2017-02-13 -> 5.3.6 2017-06-27 22:52:00 -03:00
Diego Pontoriero 3dfa1d2282
google-cloud-sdk: 155.0.0 -> 159.0.0 2017-06-27 17:34:19 -07:00
Charles Strahan 8e73afb2e1 zoom-us: don't add mesa to the LD_LIBRARY_PATH
zoom-us was failing to launch under the proprietary nvidia drivers,
as described in the comments of #26596.

Closes #26916
2017-06-27 18:43:20 -04:00
Diego Pontoriero 5b90fa0151
terraform: 0.9.6 -> 0.9.9. 2017-06-27 15:04:11 -07:00
Langston Barrett 6fd4c3956e django-polymorphic: init at 1.2 2017-06-27 21:12:29 +00:00
Karn Kallio 07dc20e436 kcachegrind : Fix build by adding missing dependencies. 2017-06-27 22:33:06 +02:00
Tomas Hlavaty 6739a1773e sbcl: 1.3.17 -> 1.3.18
The attached patch updates sbcl version.

From efdeb164ab3ca748a960791b093638c982465e97 Mon Sep 17 00:00:00 2001
From: Tomas Hlavaty <tom@logand.com>
Date: Tue, 27 Jun 2017 22:15:17 +0200
Subject: [PATCH] sbcl: 1.3.17 -> 1.3.18
2017-06-27 16:29:52 -04:00
Frederik Rietdijk f2b97e061a python.pkgs.intelhex: fix patch 2017-06-27 22:27:49 +02:00
Shea Levy 4d2597981d Partially revert "terraform: 0.9.4 -> 0.9.6."
Terraform point releases are significant changes, we need to keep old ones around

This reverts commit 6a27b46dee.
2017-06-27 16:26:07 -04:00
Michael Fellinger 54419f3016 using inherited instead 2017-06-27 22:22:08 +02:00
Michael Fellinger 704e04b108 dockerTools.buildImage: configurable timestamp
This way not all images have to be from 47 years ago, making it much easier to find the one you're looking for.
2017-06-27 22:11:17 +02:00
Karn Kallio c710ddf7cd okteta : Fix build by adding missing dependencies. 2017-06-27 22:10:00 +02:00
Joachim F 2c30e5e754 Merge pull request #25441 from Hodapp87/draftsight
draftsight: init at 2017-SP1
2017-06-27 21:04:30 +01:00
leenaars 10126e13ef openpa: init at 1.0.4 (#26033) 2017-06-27 20:52:23 +01:00
Joachim F 767a8b2e9a Merge pull request #26073 from florianjacob/piwik-package
piwik & piwik service: init at 3.0.4
2017-06-27 20:51:16 +01:00
Joachim F bccd3feed2 Merge pull request #26450 from oxij/pkg/fix/tor-browser
firefoxPackages: tor-browser: use gtk2 by default (like tor-browser-bin does)
2017-06-27 20:41:27 +01:00
Joachim F 4e44b63892 Merge pull request #26453 from oxij/pkg/fix/ranger
ranger: add imagePreviewSupport option and make previews work out of the box
2017-06-27 20:40:57 +01:00
Shea Levy 711637a4a7 Merge branch 'master' of github.com:NixOS/nixpkgs 2017-06-27 15:35:47 -04:00
Shea Levy 551dcb6783 Add ansible 2.3 2017-06-27 15:22:31 -04:00
Karn Kallio 67e4072282 k3b : Fix build by adding missing dependencies. 2017-06-27 21:14:00 +02:00
Joachim F 8dda321c1f Merge pull request #26724 from schneefux/pkg.shaarli
shaarli: 0.8.4 -> 0.9.0
2017-06-27 20:08:48 +01:00
Stefan Lau 55fc963122 rustRegistry: 2017-06-25 -> 2017-06-27 2017-06-27 21:06:33 +02:00
Vincent Laporte b475d5f04c ocamlPackages.atd: 1.1.2 -> 1.12.0 2017-06-27 19:01:18 +00:00
Radek Benkel 53de56c0cc sauce-connect: 4.4.2 -> 4.4.7 (#26893) 2017-06-27 19:18:35 +01:00
Jörg Thalheim f5b8a8fc10 Merge pull request #26882 from mzaccari/jruby-9.1.5.0
jruby: 9.0.5.0 -> 9.1.5.0
2017-06-27 18:45:14 +01:00
Vincent Laporte 9c68a8b2d2 ocamlPackages.angstrom: 0.4.0 -> 0.5.1 2017-06-27 17:28:33 +00:00
Trevor Joynson 068341b1c7 iptstate: init at 2.2.6 (#26878)
* Add iptstate package

* iptstate: nit pick
2017-06-27 18:27:13 +01:00
Jörg Thalheim c30cf6f0f1 Merge pull request #26891 from orivej/libunwind
libunwind: 1.1 -> 1.2.1
2017-06-27 18:18:57 +01:00
Jörg Thalheim d2c500f05c Merge pull request #26900 from cohei/update-fswatch
fswatch: 1.5.0 -> 1.9.3
2017-06-27 18:08:28 +01:00
Daiderd Jordan 5740c9e0e1 Merge pull request #26772 from robx/fix-v8
v8_3_16_14: fix OS X build by passing deployment version
2017-06-27 18:31:28 +02:00
Vincent Laporte b13245c2a3 ocamlPackages.bos: 0.1.4 -> 0.1.6 2017-06-27 16:14:29 +00:00
Joachim F c27fc66856 Merge pull request #26904 from Ma27/geogebra/make-language-configurable
geogebra: make `language` configurable
2017-06-27 16:21:00 +01:00
Joachim F e6b7dcd1f6 Merge pull request #26871 from NickHu/dfhack
dfhack: 0.43.05-alpha4 -> 0.43.05-r1
2017-06-27 16:14:36 +01:00
Joachim F bcbf45ff1f Merge pull request #26886 from jonafato/remove-thunderbird-bin-updater
Remove old thunderbird-bin update script
2017-06-27 16:12:37 +01:00
tkatchev 45f6bb6ba5 boost-build: update to version 2016.03 2017-06-27 18:00:40 +03:00
Thomas Tuegel dbb3037d27 Merge pull request #26902 from ttuegel/plasma-5.10.3
plasma5: 5.10.2 -> 5.10.3
2017-06-27 08:06:32 -05:00
Tim Steinbach d2e199ca3c
linux: 4.4.73 -> 4.4.74 2017-06-27 08:14:47 -04:00
Tim Steinbach 493ae24872 Merge pull request #26870 from lsix/update_nano
nano: 2.8.4 -> 2.8.5
2017-06-27 08:12:52 -04:00
Tim Steinbach 719b506bad Merge pull request #26803 from NeQuissimus/rkt_1_27_0
rkt: 1.26.0 -> 1.27.0
2017-06-27 08:09:40 -04:00
Michał Pałka 7b5d72ce04 xen: patch for XSAs: 216, 217, 218, 219, 220, 221, 222, and 224 (xen 4.8)
This commit contains security patches for xen 4.8. The patches
for XSA-216 applied to the kernel are omitted, as they are part of
80e0cda7ff.

XSA-216 Issue Description:

> The block interface response structure has some discontiguous fields.
> Certain backends populate the structure fields of an otherwise
> uninitialized instance of this structure on their stacks, leaking
> data through the (internal or trailing) padding field.

More: https://xenbits.xen.org/xsa/advisory-216.html

XSA-217 Issue Description:

> Domains controlling other domains are permitted to map pages owned by
> the domain being controlled.  If the controlling domain unmaps such a
> page without flushing the TLB, and if soon after the domain being
> controlled transfers this page to another PV domain (via
> GNTTABOP_transfer or, indirectly, XENMEM_exchange), and that third
> domain uses the page as a page table, the controlling domain will have
> write access to a live page table until the applicable TLB entry is
> flushed or evicted.  Note that the domain being controlled is
> necessarily HVM, while the controlling domain is PV.

More: https://xenbits.xen.org/xsa/advisory-217.html

XSA-218 Issue Description:

> We have discovered two bugs in the code unmapping grant references.
>
> * When a grant had been mapped twice by a backend domain, and then
> unmapped by two concurrent unmap calls, the frontend may be informed
> that the page had no further mappings when the first call completed rather
> than when the second call completed.
>
> * A race triggerable by an unprivileged guest could cause a grant
> maptrack entry for grants to be "freed" twice.  The ultimate effect of
> this would be for maptrack entries for a single domain to be re-used.

More: https://xenbits.xen.org/xsa/advisory-218.html

XSA-219 Issue Description:

> When using shadow paging, writes to guest pagetables must be trapped and
> emulated, so the shadows can be suitably adjusted as well.
>
> When emulating the write, Xen maps the guests pagetable(s) to make the final
> adjustment and leave the guest's view of its state consistent.
>
> However, when mapping the frame, Xen drops the page reference before
> performing the write.  This is a race window where the underlying frame can
> change ownership.
>
> One possible attack scenario is for the frame to change ownership and to be
> inserted into a PV guest's pagetables.  At that point, the emulated write will
> be an unaudited modification to the PV pagetables whose value is under guest
> control.

More: https://xenbits.xen.org/xsa/advisory-219.html

XSA-220 Issue Description:

> Memory Protection Extensions (MPX) and Protection Key (PKU) are features in
> newer processors, whose state is intended to be per-thread and context
> switched along with all other XSAVE state.
>
> Xen's vCPU context switch code would save and restore the state only
> if the guest had set the relevant XSTATE enable bits.  However,
> surprisingly, the use of these features is not dependent (PKU) or may
> not be dependent (MPX) on having the relevant XSTATE bits enabled.
>
> VMs which use MPX or PKU, and context switch the state manually rather
> than via XSAVE, will have the state leak between vCPUs (possibly,
> between vCPUs in different guests).  This in turn corrupts state in
> the destination vCPU, and hence may lead to weakened protections
>
> Experimentally, MPX appears not to make any interaction with BND*
> state if BNDCFGS.EN is set but XCR0.BND{CSR,REGS} are clear.  However,
> the SDM is not clear in this case; therefore MPX is included in this
> advisory as a precaution.

More: https://xenbits.xen.org/xsa/advisory-220.html

XSA-221 Issue Description:

> When polling event channels, in general arbitrary port numbers can be
> specified.  Specifically, there is no requirement that a polled event
> channel ports has ever been created.  When the code was generalised
> from an earlier implementation, introducing some intermediate
> pointers, a check should have been made that these intermediate
> pointers are non-NULL.  However, that check was omitted.

More: https://xenbits.xen.org/xsa/advisory-221.html

XSA-222 Issue Description:

> Certain actions require removing pages from a guest's P2M
> (Physical-to-Machine) mapping.  When large pages are in use to map
> guest pages in the 2nd-stage page tables, such a removal operation may
> incur a memory allocation (to replace a large mapping with individual
> smaller ones).  If this allocation fails, these errors are ignored by
> the callers, which would then continue and (for example) free the
> referenced page for reuse.  This leaves the guest with a mapping to a
> page it shouldn't have access to.
>
> The allocation involved comes from a separate pool of memory created
> when the domain is created; under normal operating conditions it never
> fails, but a malicious guest may be able to engineer situations where
> this pool is exhausted.

More: https://xenbits.xen.org/xsa/advisory-222.html

XSA-224 Issue Description:

> We have discovered a number of bugs in the code mapping and unmapping
> grant references.
>
> * If a grant is mapped with both the GNTMAP_device_map and
> GNTMAP_host_map flags, but unmapped only with host_map, the device_map
> portion remains but the page reference counts are lowered as though it
> had been removed. This bug can be leveraged cause a page's reference
> counts and type counts to fall to zero while retaining writeable
> mappings to the page.
>
> * Under some specific conditions, if a grant is mapped with both the
> GNTMAP_device_map and GNTMAP_host_map flags, the operation may not
> grab sufficient type counts.  When the grant is then unmapped, the
> type count will be erroneously reduced.  This bug can be leveraged
> cause a page's reference counts and type counts to fall to zero while
> retaining writeable mappings to the page.
>
> * When a grant reference is given to an MMIO region (as opposed to a
> normal guest page), if the grant is mapped with only the
> GNTMAP_device_map flag set, a mapping is created at host_addr anyway.
> This does *not* cause reference counts to change, but there will be no
> record of this mapping, so it will not be considered when reporting
> whether the grant is still in use.

More: https://xenbits.xen.org/xsa/advisory-224.html
2017-06-27 12:02:59 +00:00
Michał Pałka 9e6bfbb2f9 xen_4_8: init at 4.8.1
This commit adds the xen_4_8 package to be used instead of
xen (currently at 4.5.5):
 * Add packages xen_4_8, xen_4_8-slim and xen_4_8-light
 * Add packages qemu_xen_4_8 and qemu_xen_4_8-light to be used
   with xen_4_8-slim and xen_4_8-light respectively.
 * Add systemd to buildInputs of xen (it is required by oxenstored)
 * Adapt xen service to work with the new version of xen
 * Use xen-init-dom0 to initlilise dom0 in xen-store
 * Currently, the virtualisation.xen.stored option is ignored
   if xen 4.8 is used
2017-06-27 12:01:53 +00:00
Thomas Tuegel 074bccb43b
plasma5: 5.10.2 -> 5.10.3
This is a scheduled bugfix release. Several fixes are related to integrating
Plasma 5.10 and Qt 5.9, particularly a serious bug in KWin.
2017-06-27 06:58:34 -05:00
Josef Kemetmueller 2cb5246dd8 gogs: 0.10.18 -> 0.11.19 2017-06-27 11:41:19 +00:00
TANIGUCHI Kohei f48e400133 fswatch: 1.5.0 -> 1.9.3 2017-06-27 20:24:30 +09:00
Robert 107d53f40c bundix: 2.2.0 -> 2.2.1 (#26894)
This fixes `fetchurl-force.nix` not being installed, which breaks
bundix for some gems.

E.g.

```
$ nix-build --argstr url https://rubygems.org/gems/nio4r-2.1.0.gem /nix/store/y6959dxal86l3alc0ryf7752prbbkzxg-bundix-2.2.0/lib/ruby/gems/2.3.0/gems/bundix-2.2.0/lib/bundix/fetchurl-force.nix
error: getting status of ‘/nix/store/y6959dxal86l3alc0ryf7752prbbkzxg-bundix-2.2.0/lib/ruby/gems/2.3.0/gems/bundix-2.2.0/lib/bundix/fetchurl-force.nix’: No such file or directory
```
2017-06-27 10:24:16 +01:00
Cray Elliott 71e495e10f winetricks: 20170327 -> 20170614 2017-06-27 02:00:49 -07:00
Maximilian Bosch 9516bbf172
geogebra: make language configurable 2017-06-27 09:51:06 +02:00
Orivej Desh 842250064b libunwind: 1.1 -> 1.2.1 2017-06-27 01:30:48 +00:00
Jon Banafato d8e5c75f75 Remove old thunderbird-bin update script
`thunderbird-bin` appears to now use the
`maintainers/scripts/update.nix` script instead of this ruby script, so
the latter should be removed.
2017-06-26 19:54:24 -04:00
Franz Pletz b8bfc8dae2
httpd: don't install suid executables into nix store 2017-06-27 01:51:18 +02:00