Commit graph

90983 commits

Author SHA1 Message Date
Peter Hoeg 222d084927 ledger-web: we have bundlerEnv, let us use it 2016-09-07 11:17:12 +08:00
Franz Pletz 7949e69382
chromium: update to latest channel releases (security)
Fixes the following security problems:

- CVE-2016-5147: Universal XSS in Blink
- CVE-2016-5148: Universal XSS in Blink
- CVE-2016-5149: Script injection in extensions
- CVE-2016-5150: Use after free in Blink
- CVE-2016-5151: Use after free in PDFium
- CVE-2016-5152: Heap overflow in PDFium
- CVE-2016-5153: Use after destruction in Blink
- CVE-2016-5154: Heap overflow in PDFium
- CVE-2016-5155: Address bar spoofing
- CVE-2016-5156: Use after free in event bindings
- CVE-2016-5157: Heap overflow in PDFium
- CVE-2016-5158: Heap overflow in PDFium
- CVE-2016-5159: Heap overflow in PDFium
- CVE-2016-5160: Extensions web accessible resources bypass
- CVE-2016-5161: Type confusion in Blink.
- CVE-2016-5162: Extensions web accessible resources bypass
- CVE-2016-5163: Address bar spoofing
- CVE-2016-5164: Universal XSS using DevTools
- CVE-2016-5165: Script injection in DevTools
- CVE-2016-5166: SMB Relay Attack via Save Page As
- CVE-2016-5167: Various fixes from internal audits, fuzzing and other initiatives
2016-09-07 04:49:56 +02:00
Peter Hoeg d4eac0278c calibre: 2.64.0 -> 2.66.0 (#18311)
A few additional changes:

1. We load patches from debian for improving privacy and security
2. Now with QT 5.6 instead of 5.5
3. We strip bundled python code and use proper upstream instead
2016-09-07 04:32:06 +02:00
Langston Barrett 492a90f1c9 dovecot service: require mail{User,Group} with sieveScripts
fixes #17702.
2016-09-07 01:50:59 +00:00
obadz 39e197ab1c uhub: 0.4.1 -> 0.5.0 (fixes build)
@ehmry: please have a look so that we can cherry-pick in release-16.09
and move forward on #18209
2016-09-07 02:30:03 +01:00
Joachim F 1c7270f001 Merge pull request #18379 from peterhoeg/st_0146
syncthing: 0.14.5 -> 0.14.6
2016-09-07 03:24:01 +02:00
obadz 973fd1aae1 haskellPackages.haste-Cabal: mark as broken 2016-09-07 01:35:23 +01:00
obadz d9db8a9bf5 seq24: fix build failures due to name clash in "mutex" class 2016-09-07 01:30:44 +01:00
Nikolay Amiantov aed2cd32f8 nixos containers: hopefully fix test failures
Closes #18377.
2016-09-07 02:55:48 +03:00
Dan Peebles 9a05352488 souffle: work around hardening bug on linux 2016-09-06 23:11:33 +00:00
Joachim F b78e625445 Merge pull request #18235 from teh/master
Remove broken hyperdex package and dependencies. Closes #17995.
2016-09-07 00:18:48 +02:00
Shea Levy d81d59aad9 Merge branch 'fix/st-update-0.7' of git://github.com/andsild/nixpkgs 2016-09-06 18:04:48 -04:00
Joachim F 6340b32e49 Merge pull request #18370 from elasticdog/transcrypt
transcrypt: 0.9.7 -> 0.9.9
2016-09-06 23:55:47 +02:00
Aaron Bull Schaefer 598ccfdec9 transcrypt: 0.9.7 -> 0.9.9 2016-09-06 14:55:19 -07:00
Thomas Tuegel 3b78026a7f Merge pull request #18297 from edwtjo/zotero-esr-verfix
zotero: remove esr suffix from version string.
2016-09-06 16:50:45 -05:00
Joachim F 6949069678 Merge pull request #18119 from puffnfresh/package/hyperterm
hyperterm: init at 0.7.6
2016-09-06 23:50:00 +02:00
Dan Peebles 247c54e374 souffle: init at 1.0.0 2016-09-06 17:45:13 -04:00
Joachim F c43c0b2efa Merge pull request #18349 from peterhoeg/ledger-web2
ledger-web: do not make our own wrapper
2016-09-06 23:42:35 +02:00
Stefan Junker 5100db559a rkt: 1.12.0 -> 1.14.0 (#18360) 2016-09-06 23:04:17 +02:00
Franz Pletz 9190dbcc0e Merge pull request #18366 from groxxda/acme-loop
security.acme: require networking for client, remove loop without fallbackHost
2016-09-06 23:02:07 +02:00
Tuomas Tynkkynen c5e9049ac3 qt5: Fix qt5X.full
Use dev outputs explicitly since they aren't the first output since the
recent changes.
2016-09-06 23:42:41 +03:00
asildnes 29aac27089 st: 0.6 -> 0.7 2016-09-06 22:00:19 +02:00
Tuomas Tynkkynen 2ae5fb2723 pythonPackages.keystoneclient: Disable tests
````
run_tests.sh: interpreter directive changed from "/bin/bash" to "/nix/store/nyj6xd7s1n1w8c0xdwk5ddhi7bjcyi9x-bash-4.3-p46/bin/bash"
No virtual environment found...create one? (Y/n) builder for ‘/nix/store/qcrhq2f7llvzyc37ili94ff50z7vlgn3-python2.7-keystoneclient-1.8.1.drv’ failed with exit code 1
error: build of ‘/nix/store/qcrhq2f7llvzyc37ili94ff50z7vlgn3-python2.7-keystoneclient-1.8.1.drv’ failed
````
2016-09-06 22:01:17 +03:00
Tuomas Tynkkynen 81eb0c20f8 honcho: Fix hash 2016-09-06 21:58:42 +03:00
Bjørn Forsman 2bf421d197 mcelog: add utillinux as dependency
Fixes this:

  $ sudo mcelog
  ...
  unknown-error-trigger: line 21: logger: command not found
  unknown-error-trigger: line 22: logger: command not found
2016-09-06 20:30:47 +02:00
Rickard Nilsson 28e378d462 nodePackages.elasticdump: init at 2.4.2 2016-09-06 18:22:05 +00:00
Domen Kožar 3877ec5b2f Make /var/empty immutable
Fixes #14910 and #18358

Deployed to an existing server, restarted sshd and polkit to verify
they don't fail.
2016-09-06 20:13:33 +02:00
Michael Raskin d9c76736cc octave: fix overridePlatforms (was just platforms) name collision, thanks to @bjornfor for catching 2016-09-06 19:57:06 +02:00
Robert Helgesson d0c2c99571
ugarit: bump aes input from 1.3 to 1.5 2016-09-06 19:30:01 +02:00
Michael Raskin 6b075ee8b1 openlibm: 0.4.1 -> 0.5.4 2016-09-06 19:31:38 +02:00
Michael Raskin 71fe391ac1 baresip: fix build by manually forcing feature flags for fresh glibc time.h 2016-09-06 19:10:42 +02:00
Thomas Tuegel caac16a924 Merge pull request #18362 from ericsagnes/fix/im-description
input-methods modules: fix engine description
2016-09-06 11:42:28 -05:00
Michael Raskin 472ac50f5b octave: forbid 32-bit builds of the octaveFull version, looks like too much memory needed 2016-09-06 18:26:58 +02:00
Michael Raskin 5c686923de linphone: 3.8.5 -> 3.10.2 2016-09-06 18:21:28 +02:00
Michael Raskin 13092a7ff9 mediastreamer-openh264: 1.0.0 -> git version from Belledonne Communications fork (Linphone upstream) 2016-08-01 2016-09-06 18:19:17 +02:00
Michael Raskin 0bfe4bb9e8 mediastreamer2: 2.12.1 -> 2.14.0 2016-09-06 18:19:17 +02:00
Michael Raskin 599653de54 ortp: 0.25.0 -> 0.27.0 2016-09-06 18:19:17 +02:00
Michael Raskin e662a8ee6d belle-sip: 1.4.2 -> 1.5.0 2016-09-06 18:19:17 +02:00
Michael Raskin 592e265caa antlr3_4: init at 3.4 2016-09-06 18:19:17 +02:00
Michael Raskin 8f284c0a94 antlr3_5: init at 3.5.2 2016-09-06 18:19:17 +02:00
Michael Raskin 308f85a42e bctoolbox: init at 0.2.0 2016-09-06 18:19:17 +02:00
Michael Raskin bcd3dcfc2b bcunit: init at 3.0 2016-09-06 18:19:17 +02:00
Michael Raskin b30ead6e54 cunit: 2.1-2 -> 2.1-3 2016-09-06 18:19:17 +02:00
Michael Raskin 4ae17801af mbedtls_1_3; init at 1.3.17 2016-09-06 18:19:16 +02:00
Michael Raskin 9d1d0dd546 neural-style: restrict to 64-bit Linux because it wants too much RAM 2016-09-06 18:18:00 +02:00
Alexander Ried e84b803300 security.acme: remove loop when no fallbackHost is given 2016-09-06 17:47:00 +02:00
Alexander Ried 7f98dca782 security.acme: the client really needs networking
Actually this can be improved since the client only needs network
connectivity if it needs to renew the certificate.
2016-09-06 17:47:00 +02:00
Eelco Dolstra 98102ebd92 Enable the runuser command from util-linux
Fixes #14701.
2016-09-06 17:23:27 +02:00
Robin Gloster 9ab141ce27
vp: fix build 2016-09-06 16:52:26 +02:00
Aneesh Agrawal b1c83e8928 vagrant: make patches a list (#18364)
This has more correct semantics, allows for multiple patches, and makes
using overrideDerivation to add/remove patches work as expected.
2016-09-06 16:52:01 +02:00