Commit graph

2701 commits

Author SHA1 Message Date
Vladimír Čunát 6b6553c768
Merge branch 'staging'
It contains security updates.  I somehow forgot to push this yesterday.
2017-01-20 16:33:59 +01:00
Jörg Thalheim 3fdde25b4c Merge pull request #21962 from Mic92/gemdir
bundleEnv: Used gemdir for most applications now
2017-01-19 09:34:14 +01:00
Vladimír Čunát 40003aa2ed
Merge branch 'master' into staging 2017-01-18 15:54:04 +01:00
Jörg Thalheim 246fd4c950
maphosts: use gemdir 2017-01-18 00:52:48 +01:00
Periklis Tsirakidis 513ce19fd0 offlineimap: 7.0.9 -> 7.0.12 2017-01-17 23:04:37 +01:00
Tristan Helmich c7ea194b41 fping: 3.13 -> 3.15 (#21949) 2017-01-17 11:55:09 +01:00
Tristan Helmich c885570944 fping: enable IPv6 (provides fping6 binary) (#21950) 2017-01-17 11:54:03 +01:00
Nikolay Amiantov 70a6628848 Merge pull request #21882 from abbradar/dhcp6
DHCPv6 improvements
2017-01-15 19:53:33 +03:00
Nikolay Amiantov cb418318a0 radvd: 2.13 -> 2.15 2017-01-15 19:38:53 +03:00
Bas van Dijk f0338024b9 strongswan: enable charon-systemd (#21872)
See: https://wiki.strongswan.org/projects/strongswan/wiki/Charon-systemd
2017-01-14 20:41:51 +01:00
Frederik Rietdijk 66d3b9a02d wicd: use python2 2017-01-11 18:25:10 +01:00
Pascal Wittmann 1738be8cd2
axel: 2.11 -> 2.12 2017-01-09 21:32:30 +01:00
Jörg Thalheim 188fcc1eb5
ferm: 2.3 -> 2.3.1 2017-01-08 23:40:40 +01:00
Joachim Fasting 0f24e56728
dnscrypt-proxy: 1.9.0 -> 1.9.1 2017-01-07 08:02:53 +01:00
Vladimír Čunát 07bf828bd9
Merge branch 'staging'; security /cc #21642 2017-01-06 16:32:47 +01:00
Gabriel Ebner b0ccbb395c Merge pull request #21658 from acowley/mu-no-mug
mu: allow gtk-free builds
2017-01-06 00:22:30 -05:00
Anthony Cowley 8ca70e358d mu: allow gtk-free builds
The gtk components are enabled by default when stdenv.isLinux is true.
2017-01-05 17:55:54 -05:00
Franz Pletz e94bfe55c4
mitmproxy: 0.17.1 -> 1.0.2, move to all-packages.nix 2017-01-05 06:25:26 +01:00
Matthias Beyer b5c7ce015f http-prompt: 0.2.0 -> 0.8.0 2017-01-04 16:29:33 +01:00
Daiderd Jordan 27660cfdc0
Merge branch 'master' into staging 2017-01-04 01:42:26 +01:00
Eelco Dolstra 82b0ae1223 Merge pull request #21612 from NeQuissimus/curl_7_52_1
curl: 7.51.0 -> 7.52.1
2017-01-03 16:11:35 +01:00
Tim Steinbach 125fa1520d
curl: 7.51.1 -> 7.52.1 2017-01-03 08:42:59 -05:00
Michael Raskin 277e7119be openvpn: 2.3.13 -> 2.4.0 2017-01-02 15:38:46 +01:00
Michael Raskin 6151982f58 Merge pull request #21581 from bendlas/update-i2p
i2p: 0.9.26 -> 0.9.28
2017-01-02 14:15:10 +00:00
Michael Raskin c882915351 Merge pull request #21548 from FPtje/patch-2
Strongswan: enable rdrand and aes-ni only on X86
2017-01-02 14:07:16 +00:00
Herwig Hochleitner 86a6083498 i2p: 0.9.26 -> 0.9.28
update patch
2017-01-02 13:14:42 +01:00
Daiderd Jordan 5a67b130b9
Merge branch 'master' into staging 2017-01-02 00:54:17 +01:00
Jörg Thalheim d5f8652e6d Merge pull request #17364 from fmu/ndjbdns-fix
ndjbdns: build from latest sources which adds Darwin compatibility
2017-01-01 08:34:28 +01:00
volth 06b372f24f miredo: init at 1.2.6 2016-12-31 21:03:27 +01:00
Falco Peijnenburg 9c61571f1a Strongswan: enable rdrand and aes-ni only on X86
Strongswan fails to compile on armv7l-linux with `--enable-aesni` and  `--enable-rdrand` enabled. Errors are thrown about impossible constraints in asm (`--enable-rdrand`) or about gcc getting unknown command line parameters about aes (`--enable-aesni`). The options only makes sense on X86_64 processors.

The rdrand plugin is designed for Ivy Bridge processors:

> High quality / high performance random source using the Intel rdrand instruction found on Ivy Bridge processors

The aes-ni plugin also only exists on X86 processors (which have the AES instruction set)

Tested with a local override. The change triggers a (successful) rebuild on my X86_64 system. On armv7-linux this change fixes build errors.

See: 
https://wiki.strongswan.org/issues/337
2016-12-31 14:26:17 +01:00
Dhananjay Balan cab497ee6d unbound 1.5.6 > 1.6.0 2016-12-30 18:13:10 +01:00
Joachim Fasting 64f45520b9
dnscrypt-proxy: 1.7.0 -> 1.9.0
Release notes at:
https://github.com/jedisct1/dnscrypt-proxy/releases/tag/1.9.0

Packaging tweaks:
- No longer split man page, kind of pointless ...
- No longer install libtool files, they are now optional
2016-12-30 05:33:58 +01:00
Vladimír Čunát 0163f0c427
openssh: update the gssapi patch
Only building was tested.
2016-12-29 17:04:58 -05:00
Graham Christensen 11e8ed5ff4
Revert "Revert "openssh: security 7.3p1 -> 7.4p1""
This reverts commit 661b5a9875.
2016-12-29 17:04:39 -05:00
Sophie Taylor 0e0fb196ca openntpd: v6+ requires libressl for constraints 2016-12-28 13:35:42 +10:00
zimbatm 12532879b0 zerotierone: 1.1.12 -> 1.1.14 2016-12-27 17:47:41 +00:00
Mitch Tishmack b398665a4e wakelan: refactor allow builds on non linux 2016-12-26 15:04:45 -06:00
Vladimír Čunát 661b5a9875
Revert "openssh: security 7.3p1 -> 7.4p1"
This reverts commit 277080fea0.

I had tested the server on my physical machine before pushing,
but the openssh test got broken so something is clearly wrong.
http://hydra.nixos.org/build/45500080
2016-12-25 22:15:56 +01:00
Vladimír Čunát 277080fea0
openssh: security 7.3p1 -> 7.4p1
The two removed patches were for issues that should've been fixed.
Minor vulnerabilities addressed: CVE-2016-{10009,10010,10011,10012}.
https://www.openssh.com/txt/release-7.4
2016-12-25 18:42:55 +01:00
zimbatm c38b4da994 strongswan: 5.5.0 -> 5.5.1 2016-12-24 15:57:56 +00:00
Joachim Fasting a34eae0ecb
stun: gzip -9 -> gzip -9n
Note that it does not seem to make a difference to `nix-build --check`.
2016-12-20 15:32:14 +01:00
Joachim Fasting 8246a845b4
zerotierone: gzip -9 -> gzip -9n
Note that it does not seem to make a difference to `nix-build --check`.
2016-12-20 15:32:07 +01:00
Gabriel Ebner 182c735527 mu: 0.9.16 -> 0.9.18 2016-12-15 14:45:46 -05:00
Franz Pletz dc0c7104ea
chrony: 2.4 -> 2.4.1 2016-12-15 15:35:22 +01:00
Tomas Hlavaty d65ef03677 stunnel: 5.37 -> 5.38 2016-12-13 22:34:25 +01:00
schneefux b6a4876258
httpie: 0.9.6 -> 0.9.8 2016-12-11 13:17:49 +01:00
Michael Raskin 64402bb9e0 getmail: 4.51.0 -> 4.52.0 2016-12-08 16:15:18 +01:00
Joachim Fasting 148ee2cba9
privoxy: homepage now reachable via https 2016-12-06 15:48:39 +01:00
Joachim Fasting 1a427cf625
privoxy: enable pie 2016-12-06 15:48:28 +01:00
Chris Martin 02ecd0f0f7 pssh: init at 2.3.1 2016-12-06 00:46:48 -05:00