Commit graph

83677 commits

Author SHA1 Message Date
Sebastian Schwarz 97581e7458 mpop: init at 1.2.4 2016-05-14 22:27:07 +02:00
Vladimír Čunát 024d44dd61 Merge #15449: update default Linux headers
...to those of the default NixOS kernel
2016-05-14 22:25:04 +02:00
Vladimír Čunát 26e8e3e654 util-linux: use sha256 instead of sha512 again
/cc #15048. I believe the usage of sha512 here at this point
brings very little gain and can be quite painful to some users.
2016-05-14 22:19:28 +02:00
Scott R. Parish 5ebf20db0f
chromium: Update stable to 50.0.2661.102 for multiple security fixes
This addresses the following security fixes:

 * High   CVE-2016-1667: Same origin bypass in DOM. Credit to
                         Mariusz Mlynski.
 * High   CVE-2016-1668: Same origin bypass in Blink V8 bindings. Credit
                         to Mariusz Mlynski.
 * High   CVE-2016-1669: Buffer overflow in V8. Credit to Choongwoo Han.
 * Medium CVE-2016-1670: Race condition in loader. Credit to anonymous.
 * Medium CVE-2016-1671: Directory traversal using the file scheme on
                         Android. Credit to Jann Horn.

See: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html

Signed-off-by: Scott R. Parish <srparish@gmail.com>
Tested-by: aszlig <aszlig@redmoonstudios.org>
Closes: #15446
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-05-14 22:04:56 +02:00
Vladimír Čunát 45a14c873b Merge #15447: glibc security updates 2016-05-14 21:38:18 +02:00
Vladimír Čunát b1ac3404e0 Merge branch 'master' into staging 2016-05-14 21:37:55 +02:00
Tuomas Tynkkynen 0561e14c3b bind: Split into multiple outputs
A patch is needed to make bind not print its configure flags on
'named -V'.
2016-05-14 22:12:59 +03:00
Tuomas Tynkkynen d359ce90e8 nix-prefetch-scripts: Use correct output of 'nix' 2016-05-14 21:10:23 +03:00
Tuomas Tynkkynen b7437eb012 tcp_wrappers: Remove separate builder.sh and use standard stdenv phases
For instance, this means that the binaries get stripped properly
(previously this package retained a reference to glibc headers).
2016-05-14 21:05:58 +03:00
Pascal Wittmann 34f4515051 filezilla: 3.17.0 -> 3.17.0.1 2016-05-14 19:48:30 +02:00
José Romildo Malaquias 080f9c579a atom: 1.6.2 -> 1.7.3 2016-05-14 13:54:27 -03:00
Pascal Wittmann b596fd4a42 xlockmore: 5.46 -> 5.47 2016-05-14 18:27:43 +02:00
José Romildo Malaquias e081433bee arc: 2015-10-21 -> 2016-05-14 2016-05-14 13:05:03 -03:00
Tobias Geerinckx-Rice 934be04e19
perlPackages.URIFind: 20111103 -> 20140709 2016-05-14 16:44:04 +02:00
Tobias Geerinckx-Rice bf2834a105
pyexiv2: 0.3.0 -> 0.3.2 2016-05-14 16:12:21 +02:00
Tobias Geerinckx-Rice 9385353a99
btrfs-progs: 4.5.2 -> 4.5.3 2016-05-14 16:01:33 +02:00
Tobias Geerinckx-Rice 2cf6c67d15
dpkg: 1.18.6 -> 1.18.7 2016-05-14 16:01:33 +02:00
Tobias Geerinckx-Rice f2c7f9a677
zstd: 0.6.0 -> 0.6.1 2016-05-14 16:01:33 +02:00
Tobias Geerinckx-Rice 537f0fb297
securefs: 0.3.1 -> 0.3.2 2016-05-14 16:01:33 +02:00
Matt McHenry df0e0adb11
crashplan: fix .out in LD_LIBRARY_PATH
Closes #15388
2016-05-14 14:27:09 +02:00
Frederik Rietdijk 9bb021898e KDE5 Plasma 5.6.3 -> 5.6.4 2016-05-14 14:26:23 +02:00
José Romildo Malaquias 1498dfd24a xfce4-screenshooter: 1.8.1 -> 1.8.2 2016-05-14 09:25:25 -03:00
José Romildo Malaquias 48c63cb6a6 xfce4-screenshooter: add dependency on hicolor_icon_theme 2016-05-14 09:15:06 -03:00
Igor Sharonov 7237ccfabc i3pystatus: fix libpulseaudio 2016-05-14 14:28:20 +03:00
José Romildo Malaquias 6f42aeb716 blackbird: init at 2016-04-10 2016-05-14 07:41:25 -03:00
Pascal Wittmann da061d06f9 calibre: 2.55.0 -> 2.56.0 2016-05-14 11:56:23 +02:00
Pascal Wittmann b638f18ce9 zsh-navigation-tools: 2.1.10 -> 2.1.12 2016-05-14 11:29:03 +02:00
Frederik Rietdijk 7083611275 KDE5 Applications 16.04.0 -> 16.04.1 2016-05-14 11:14:08 +02:00
Louis Taylor 3b6550c29b sailsd: 0.1.1 -> 0.2.0 (#15445)
Sails has now been split into a few subcomponents, sailsd being the main
one. This package has been renamed to sailsd, the sailing simulation
daemon.
2016-05-14 11:05:37 +02:00
Arseniy Seroka 83a89d03d2 Merge pull request #15444 from bkase/youcompleteme-racerd
racerd: init at 0.1.1
2016-05-14 11:56:44 +03:00
Brandon Kase ea018f8339 racerd: init at 0.1.1
Needed for Rust YouCompleteMe support
2016-05-14 01:28:08 -07:00
Joachim Fasting aa18837652
linuxHeaders: linuxHeaders_3_18 -> linuxHeaders_4_4
This updates the Linux API headers to those of the default NixOS kernel.
2016-05-14 09:16:18 +02:00
Joachim Fasting c9750f5382
linuxHeaders_4_4: init at 4.4.10 2016-05-14 09:14:00 +02:00
Joachim Fasting 77022120f7 Merge pull request #15347 from joachifm/kernel-headers-cleanup
linuxHeaders cleanup
2016-05-14 08:53:48 +02:00
Joachim Fasting 201f6600cb
dirmngr: 1.0.3 -> 1.1.1
Fixes the build.

This package is probably ripe for removal by now, as dirmngr was incorporated
into gnupg a couple of years ago:
https://lists.gnupg.org/pipermail/gnupg-announce/2014q4/000358.html
2016-05-14 08:48:56 +02:00
Scott R. Parish 64f5845418 glibc: patch 2.23 for CVE-2016-3075, CVE-2016-1234, CVE-2016-3706
This addresses the following security advisories:

+ CVE-2016-3075: Stack overflow in _nss_dns_getnetbyname_r
+ CVE-2016-1234: glob: buffer overflow with GLOB_ALTDIRFUNC due to incorrect
                 NAME_MAX limit assumption
+ CVE-2016-3706: getaddrinfo: stack overflow in hostent conversion

Patches cherry-picked from glibc's release/2.23/master branch.

The "glob-simplify-interface.patch" was a dependency for
"cve-2016-1234.patch".
2016-05-13 23:47:17 -07:00
Joachim Fasting 7e4db700dc
libksba: 1.3.3 -> 1.3.4
Contains a fix for https://access.redhat.com/security/cve/CVE-2016-4574
2016-05-14 08:25:36 +02:00
Joachim Fasting 2113b7389a
mldonkey: add libjpeg to build inputs
Possibly jpeg used to be propagated from gd but is no longer after
f8bdd7969d.
2016-05-14 07:43:05 +02:00
Joachim Fasting 94286527ac
mscgen: add libjpeg to build inputs
Possibly jpeg used to be propagated from gd but is no longer after
f8bdd7969d.
2016-05-14 07:42:58 +02:00
Joachim Fasting a371094f1f
pstoedit: explicit dependency on jpeg
Possibly jpeg used to be propagated from gd but is no longer after
f8bdd7969d.
2016-05-14 07:41:42 +02:00
Joachim Fasting 220836d066
gd: apply patch for CVE-2016-3074 from upstream
Source:
2bb97f407c.patch

The original patch contains binary data, however, which is not supported
by `patch`; we could use `git apply` here, of course, but it was simpler
to just copy-paste only the fix into a separate file and include it in
the repo.
2016-05-14 07:15:41 +02:00
Joachim Fasting f8bdd7969d
gd: 2.0.35 -> 2.1.1
Upstream claims 2.1 is fully API compatible with 2.0

https://libgd.github.io/release-2.1.0.html
https://libgd.github.io/release-2.1.1.html

Also includes meta updates, adds pkg-config to the build environment,
for proper detection of dependencies, and adds optional support for tiff
and xpm image formats.
2016-05-14 07:15:41 +02:00
Joachim Fasting 3f0518ac4d Merge pull request #15378 from aneeshusa/add-lib-output-for-ccacheStdenv
ccacheStdenv: inherit lib output from wrapped gcc
2016-05-14 06:25:34 +02:00
Joachim Fasting 4e9833d9e8 Merge pull request #15384 from Shados/fix-preshell-terminfo
nixos: ensure TERMINFO is set before user shells are run
2016-05-14 06:21:25 +02:00
Joachim Fasting 6194e9d801
kernelPatches.grsecurity: 4.5.4-201605122039 -> 4.5.4-201605131918
Also revert to using the grsecurity-scrape mirror; relying on upstream
just isn't viable. Lately, updates have been so frequent that a new
version is released before Hydra even gets around to building the
previous one.
2016-05-14 05:15:35 +02:00
Nikolay Amiantov cd5dd9f82e udev service: fix packages' paths 2016-05-14 05:12:52 +03:00
Nikolay Amiantov 5c39f28a9f Merge pull request #15024 from abbradar/xfce-no-desktop
xfce service: add noDesktop option
2016-05-14 04:55:27 +03:00
Rok Garbas ac8cd3e9a6 pythonPackages.psycopg2: 2.5.4 -> 2.6.1 2016-05-14 03:35:34 +02:00
Nikolay Amiantov c6a61092e7 pythonPackages.sip: let python.buildEnv detect it 2016-05-14 04:29:22 +03:00
Nikolay Amiantov 38ef2df4a6 pythonPackages.pyqt{,5}: let python.buildEnv detect it 2016-05-14 04:22:50 +03:00