Commit graph

26264 commits

Author SHA1 Message Date
Frederik Rietdijk d09c1bc5b3 Merge staging-next into staging 2020-05-01 08:23:58 +02:00
Andreas Rammhold bf3870a4c0
Merge pull request #86277 from mweinelt/dnsmasq/2.81
dnsmasq: 2.80 → 2.81
2020-05-01 03:50:57 +02:00
Florian Klink e30f1e3c80 Revert "coreutils: set ac_cv_func_lchmod=no"
This reverts commit c5e3472e20.
2020-04-29 15:48:25 +02:00
Jan Tojnar 2874eebfd2
Merge branch 'staging-next' into staging 2020-04-29 08:35:47 +02:00
Jan Tojnar 2b5e2ffe0a
Merge pull request #86165 from jtojnar/libusb-compat-rename 2020-04-29 08:26:08 +02:00
Pavel Goran 462fa8bbaf pykms: replace logging patch
The logging "sed-patch" that was introduced for version 20190611 worked poorly:
it was too intrusive (breaking the --logfile option), and it didn't prevent
using in-store file for logging by default. The new logging patch (an actual
"diff-patch") is less intrusive: it just changes the default log file's
location to be the current directory instead of the executable's directory.
2020-04-29 03:53:41 +00:00
Martin Weinelt c9fef6230a dnsmasq: 2.80 → 2.81
Fixes: CVE-2019-14834

A vulnerability was found in dnsmasq before version 2.81, where the
memory leak allows remote attackers to cause a denial of service
(memory consumption) via vectors involving DHCP response creation.

Changelog:

version 2.81
	Improve cache behaviour for TCP connections. For ease of
	implementaion, dnsmasq has always forked a new process to handle
	each incoming TCP connection. A side-effect of this is that
	any DNS queries answered from TCP connections are not cached:
	when TCP connections were rare, this was not a problem.
	With the coming of DNSSEC, it is now the case that some
	DNSSEC queries have answers which spill to TCP, and if,
	for instance, this applies to the keys for the root, then
	those never get cached, and performance is very bad.
	This fix passes cache entries back from the TCP child process to
	the main server process, and fixes the problem.

	Remove the NO_FORK compile-time option, and support for uclinux.
	In an era where everything has an MMU, this looks like
	an anachronism, and it adds to (Ok, multiplies!) the
	combinatorial explosion of compile-time options. Thanks to
	Kevin Darbyshire-Bryant for the patch.

	Fix line-counting when reading /etc/hosts and friends; for
	correct error messages. Thanks to Christian Rosentreter
	for reporting this.

	Fix bug in DNS non-terminal code, added in 2.80, which could
	sometimes cause a NODATA rather than an NXDOMAIN reply.
	Thanks to Norman Rasmussen, Sven Mueller and Maciej Żenczykowski
	for spotting and diagnosing the bug and providing patches.

	Support TCP-fastopen (RFC-7413) on both incoming and
	outgoing TCP connections, if supported and enabled in the OS.

	Improve kernel-capability manipulation code under Linux. Dnsmasq
	now fails early if a required capability is not available, and
	tries not to request capabilities not required by its
	configuration.

	Add --shared-network config. This enables allocation of addresses
	by the DHCP server in subnets where the server (or relay) does not
	have an interface on the network in that subnet. Many thanks to
	kamp.de for sponsoring this feature.

	Fix broken contrib/lease_tools/dhcp_lease_time.c. A packet
	validation check got borked in commit 2b38e382 and release 2.80.
	Thanks to Tomasz Szajner for spotting this.

	Fix compilation against nettle version 3.5 and later.

	Fix spurious DNSSEC validation failures when the auth section
	of a reply contains unsigned RRs from a signed zone,
	with the exception that NSEC and NSEC3 RRs must always be signed.
        Thanks to Tore Anderson for spotting and diagnosing the bug.

	Add --dhcp-ignore-clid. This disables reading of DHCP client
	identifier option (option 61), so clients are only identified by
	MAC addresses.

	Fix a bug which stopped --dhcp-name-match from working when a hostname
	is supplied in --dhcp-host. Thanks to James Feeney for spotting this.

	Fix bug which caused very rarely caused zero-length DHCPv6 packets.
	Thanks to Dereck Higgins for spotting this.

	Add --tftp-single-port option.

	Enhance --conf-dir to load files in a deterministic order. Thanks to
	Evgenii Seliavka for the suggestion and initial patch.

	In the router advert code, handle case where we have two
	different interfaces on the same IPv6 net, and we are doing
	RA/DHCP service on only one of them. Thanks to NIIBE Yutaka
	for spotting this case and making the initial patch.

	Support prefixed ranges of ipv6 addresses in dhcp-host.
	This eases problems chain-netbooting, where each link in the
	chain requests an address using a different UID. With a single
	address, only one gets the "static" address, but with this
	fix, enough addresses can be reserved for all the stages of the
	boot. Many thanks to Harald Jensås for his work on this idea and
	earlier patches.

	Add filtering by tag of --dhcp-host directives. Based on a patch
	by Harald Jensås.

	Allow empty server spec in --rev-server, to match --server.

	Remove DSA signature verification from DNSSEC, as specified in
	RFC 8624. Thanks to Loganaden Velvindron for the original patch.

	Add --script-on-renewal option.
2020-04-29 04:22:08 +02:00
Mario Rodas 002817019b
Merge pull request #86224 from bbigras/starship
starship: 0.40.1 -> 0.41.0
2020-04-28 19:37:12 -05:00
Colin 4007ceb6af
treewide get rid of go 1.12 (#83253)
* treewide Drop unneeded go 1.12 overrides

* Fix packr to be go module compatible.

I updated to version 2.8.0 which is the latest on master.
Then due to the 2 different sets of go modules which are used, I split
the build into two different derivations, then merged them togethor
using symlinkJoin to have the same output structure as the existing derivation.

* Remove consul dependency on go1.12

I updated the consul version to 1.7.2 and flipped it to building using
modules.

* Remove go1.12 from perkeep.

Update the version to the latest unstable on master.

* Update scaleway-cli to not be pinned to go1.12

Switched the version to 1.20

* Update prometheus-varnish-exporter to not depend on go1.12

* Update lnd to build with go1.12

Updated the version
Forced only building subpackages with main to prevent panics over
multiple modules in one repo

* Remove go1.12 from openshift

Had to update the version to 4.1.0 and do a bit of munging to get this
to work

* Remove go1.12 completely.

These are no longer needed.

* Update bazel-watcher and make it build with go 1.14
2020-04-28 20:16:20 -04:00
worldofpeace 10bf212b4f
Merge pull request #85589 from emilazy/add-acme-maintainers-team
Add ACME maintainers team
2020-04-28 18:38:12 -04:00
worldofpeace 34444e7b45
Merge pull request #86231 from symphorien/nix-du-strictDeps
nix-du: fix with strictDeps
2020-04-28 13:34:43 -04:00
Bruno Bigras 6da294e8df starship: 0.40.1 -> 0.41.0 2020-04-28 12:00:20 -04:00
Symphorien Gibol 83c66e956f nix-du: fix with strictDeps
Fixes https://github.com/symphorien/nix-du/issues/4
2020-04-28 12:00:00 +00:00
Jörg Thalheim 20e67f1fb8
Merge pull request #85535 from zowoq/gopackage
buildGoPackage: use $out instead of $bin
2020-04-28 12:55:09 +01:00
Jörg Thalheim d894038d0b
Merge remote-tracking branch 'upstream/master' into HEAD 2020-04-28 12:54:51 +01:00
zowoq b5dc07a4b4 treewide: use $out instead of $bin with buildGoPackage 2020-04-28 20:30:29 +10:00
Jörg Thalheim 72773b9c97
prey-bash-client: remove
prey-bash-client is deprecated since 2018
2020-04-28 09:44:55 +01:00
Jan Tojnar e89e2edc73
libusb-compat-0_1: rename from libusb 2020-04-28 05:33:41 +02:00
Maximilian Bosch c6518b5aaf
Merge pull request #86082 from eadwu/thermald/2.1
thermald: 1.9.1 -> 2.1
2020-04-28 02:43:00 +02:00
Lassulus b83ab97eae
Merge pull request #86144 from danielfullmer/hcxdumptool-rename
hcxdumptool: fix incorrect pname
2020-04-28 02:26:30 +02:00
Benjamin Hipple 697bff74fd
Merge pull request #86135 from Mic92/nixpkgs-review
nixpkgs-review: 2.3.0 -> 2.3.1
2020-04-27 19:29:20 -04:00
Maximilian Bosch caadc44285
diffoscope: 142 -> 143 2020-04-28 00:18:26 +02:00
Maximilian Bosch 1f20c084a7
passExtensions.pass-audit: 1.0.1 -> 1.1 2020-04-28 00:18:26 +02:00
Maximilian Bosch 12a614b633
brutespray: 1.6.6 -> 1.6.8
https://github.com/x90skysn3k/brutespray/blob/brutespray-1.6.8/CHANGELOG.md#changelog
2020-04-28 00:18:25 +02:00
Daniel Fullmer 301ede4157 hcxdumptool: fix incorrect pname 2020-04-27 16:22:25 -04:00
Frederik Rietdijk 80d069b157 Merge staging-next into staging 2020-04-27 19:36:01 +02:00
Jörg Thalheim 2805d68529
nixpkgs-review: 2.3.0 -> 2.3.1 2020-04-27 17:37:06 +01:00
Florian Klink 3b1e189f40
Merge pull request #85965 from flokli/libusb1-cleanups
make libusb1 dependencies explicit
2020-04-27 16:40:47 +02:00
Mario Rodas eeb257f04d
Merge pull request #86076 from kimat/kimat-tmux-3.1
tmux: 3.0a -> 3.1
2020-04-27 08:07:27 -05:00
zowoq b83b2591dd aptly: use installShellFiles 2020-04-27 21:06:12 +10:00
Florian Klink f3a5fd548a yubikey-personalization: request libusb1 directly 2020-04-27 12:19:12 +02:00
Jörg Thalheim a90356e08a
Merge pull request #86035 from zowoq/go-fixes 2020-04-27 10:03:52 +01:00
Jörg Thalheim fa4747c38a
Merge pull request #86045 from zowoq/restic 2020-04-27 08:02:09 +01:00
zowoq 3e4f1e5b67 restic: use subPackages, installShellFiles 2020-04-27 16:48:25 +10:00
zowoq 8193ac091a vault: use installShellFiles 2020-04-27 08:48:42 +10:00
zowoq 148f8629cc gopass: use installShellFiles 2020-04-27 08:48:42 +10:00
zowoq e7b44787b1 lxd: use installShellFiles 2020-04-27 08:48:42 +10:00
Bernardo Meurer c5e3472e20 coreutils: set ac_cv_func_lchmod=no
Bumping binutils to 2.32 broke coreutils for unknown reasons[1]. Upon
further investigation we found that there was some issue with mknod
inside a chroot[2][3], which setting ac_cv_func_lchmod to "no" _somehow_
fixes.

We apply this fix and hope to never have to debug this again.

Thanks to @flokli and @lnl7 who helped me chase after this and @pbogdan
who found the fix in the fedora build.

[1]: https://github.com/NixOS/nixpkgs/pull/85951
[2]: https://github.com/NixOS/nixpkgs/pull/85951#issuecomment-619601978
[3]: https://bugzilla.redhat.com/show_bug.cgi?id=1811038
2020-04-26 15:17:12 -07:00
Kimat Boven 361684e97b tmux: 3.0a -> 3.1 2020-04-26 21:49:29 +02:00
Jörg Thalheim ef959a1d9b
Merge pull request #85984 from Mic92/wireguard 2020-04-26 11:28:55 +01:00
Vladyslav M 2cd8c35c1f
Merge pull request #86031 from marsam/update-bat 2020-04-26 11:48:54 +03:00
rizary 7c399a4ee0 nixpkgs-fmt: 0.7.0 -> 0.8.0 2020-04-25 22:57:02 -07:00
Benjamin Hipple e005a48799
Merge pull request #86014 from marsam/update-awsweeper
awsweeper: 0.6.0 -> 0.7.0
2020-04-25 19:57:46 -04:00
Benjamin Hipple d761d9ce47
Merge pull request #85988 from bbigras/httplz
httplz: 1.8.0 -> 1.9.2
2020-04-25 15:34:52 -04:00
Maximilian Bosch a4347f2b92
wireguard: reference missing nixosTests.wireguard 2020-04-25 20:22:14 +02:00
Edmund Wu 3e051b04cb
thermald: 1.9.1 -> 2.1 2020-04-25 13:28:48 -04:00
Robert Scott 1985c6b9d5 afl: fix afl-clang-fast++ by making it a copy of afl-clang-fast, not a symlink
a symlink gets skipped by wrapProgram and this ends up confusing the nix
cc wrapper's cpp mode detection
2020-04-25 10:04:06 -05:00
Jörg Thalheim 77dc7ef908
wireguard-tools: reference tests 2020-04-25 11:16:10 +01:00
Maximilian Bosch a194de9a9d
diffoscope: 138 -> 142 2020-04-25 12:07:38 +02:00
Mario Rodas ccfdcf16f4
bat: 0.14.0 -> 0.15.0
Changelog: https://github.com/sharkdp/bat/releases/tag/v0.15.0
2020-04-25 04:20:00 -05:00