Commit graph

96994 commits

Author SHA1 Message Date
Will Dietz 7c29e476a7 qt5.6/5.7: PaX compat qtwebengine
* paxmark QtWebEngineProcess so it executes on PaX kernels
* when building on host w/PaX apply patch to fix mksnapshot

Patch taken from Gentoo[1], slightly modified to use paxctl directly.

[1] https://gitweb.gentoo.org/repo/gentoo.git/plain/dev-qt/qtwebengine/files/qtwebengine-paxmark-mksnapshot.patch
2016-12-07 20:02:41 -06:00
Graham Christensen d71dbd733c
chromium: 54.0.2840.100 -> 55.0.2883.75 2016-12-07 20:26:47 -05:00
Graham Christensen 86da9839b1
xen: Patch for CVE-2016-9385, CVE-2016-9377, and CVE-2016-9378 2016-12-07 20:16:05 -05:00
Graham Christensen 4c5a198019
teeworlds: 0.6.3 -> 0.6.4 for CVE-2016-9400 2016-12-07 19:46:54 -05:00
Alexey Shmalko 1c50bdd928 Merge pull request #18737 from chris-martin/secp256k1-flags
secp256k1: configure with more feature flags
2016-12-07 16:42:42 -08:00
Graham Christensen 0683c1a35c
p7zip: patch for CVE-2016-9296 2016-12-07 19:38:50 -05:00
Graham Christensen e0b850147d
openafs: 1.6.17 -> 1.6.20 for CVE-2016-9772
From release notes:
      OPENAFS-SA-2016-003: file and directory names leak due to
      reuse of directory objects without zeroing the contents
      (12461 12462 12463 12464 12465)
2016-12-07 19:29:06 -05:00
Jaka Hudoklin f98b71b244 Merge pull request #20958 from ebzzry/kubernetes-1.4.6
kubernetes: 1.4.5 -> 1.4.6
2016-12-08 00:23:18 +01:00
Eric Bailey 6a86b603f9 lfe: 1.1.1 -> 1.2.1
- Use buildRebar3 instead of mkDerivation, obviating the need for setup-hook.sh
- Manually build proper and patch rebar.config s.t. it doesn't try to fetch it
- Set checkTarget = "travis" and actually run the tests
2016-12-08 00:36:38 +02:00
Eric Bailey ab9688a63a rebar3: Fix typos and support name-version-tag
The fixup_app_name/1 change notably supports packages like proper-1.1.1-beta.
2016-12-08 00:11:41 +02:00
Eric Bailey fe727a19c1 rebar3: 3.1.0 -> 3.3.2 2016-12-08 00:11:41 +02:00
Michael Alan Dorman 6ef023a62b melpa-stable-packages: 2016-12-07
Removals:
 - elang: removed from melpa
2016-12-07 16:51:35 -05:00
Michael Alan Dorman 6f0564bb8c melpa-packages: 2016-12-07
Removals:
 - debian-bug: cvs server timed out
 - elang: removed from melpa
2016-12-07 16:51:35 -05:00
Joe Hermaszewski 41256881bf gti: 2015-05-21 -> 2016-12-07
No need to replace gcc with cc thanks to
https://github.com/rwos/gti/pull/26
2016-12-07 22:53:34 +02:00
romildo 0a09969693 numix-gtk-theme: 2016-06-12 -> 2016-11-19 2016-12-07 18:45:25 -02:00
Jascha Geerds f5bd003b27 Merge pull request #20989 from romildo/upd.numix-icon-theme
numix-icon-theme: 2016-10-05 -> 2016-11-13
2016-12-07 21:39:23 +01:00
romildo 979a1a1043 numix-icon-theme: 2016-10-05 -> 2016-11-13 2016-12-07 18:33:28 -02:00
romildo dd5eb0d03a elementary-icon-theme: 4.0.1 -> 4.0.1.1 2016-12-07 17:56:14 -02:00
romildo 1678119dcc paper-gtk-theme: 2016-05-27 -> 2016.08-16 2016-12-07 17:38:07 -02:00
romildo 1494ede691 paper-icon-theme: 2016-06-08 -> 2016-11-05 2016-12-07 17:27:42 -02:00
romildo a634fe83a3 arc-icon-theme: 2016-07-07 -> 2016-11-22 2016-12-07 17:10:45 -02:00
romildo 1039d9d7eb arc-theme: 2016-10-13 -> 2016-11-25 2016-12-07 16:52:34 -02:00
Vladimír Čunát 49187304d8
libdwarf: security 20161021 -> 20161124
/cc #20972.  It seems safe API+ABI-wise:
https://abi-laboratory.pro/tracker/timeline/libdwarf/

Also nitpicks: meta.homepage, etc.

Note: `darwin.dtrace` probably contains an embedded copy of libdwarf,
which I didn't (attempt to) fix.
2016-12-07 18:27:37 +01:00
Tomas Hlavaty 59134519ee fix win-dll-link.sh setup hook (#20925)
if a dll is symlink then dll files from the symlinked
directory need to be taken
2016-12-07 17:58:36 +01:00
Graham Christensen e42f6a11ac
gstreamer: 1.10.1 -> 1.10.2 for multiple CVEs
CVE-2016-9807, CVE-2016-9808, CVE-2016-9809, CVE-2016-9810, CVE-2016-9811, CVE-2016-9812, CVE-2016-9813, CVE-2016-9634, CVE-2016-9635, CVE-2016-9636

https://gstreamer.freedesktop.org/releases/1.10/#1.10.2
2016-12-07 09:10:29 -05:00
Graham Christensen c677c35922
calamares: remove due to being broken and insecure. 2016-12-07 08:10:39 -05:00
Thomas Tuegel cbec455ec6 Merge pull request #20967 from peterhoeg/u/db
dropbox: 14.4.19 -> 15.4.22
2016-12-07 07:03:48 -06:00
Domen Kožar b6363c7bc8 make-disk-image: make store validity fix optional
This is useful for EC2 AMI generation to speedup the process.

In my case it removes 13min out of 45min when generating an image
on EC2.
2016-12-07 13:30:20 +01:00
Domen Kožar 00b3d6957a pythonPackages.chameleon: 2.15 -> 2.25 2016-12-07 13:30:20 +01:00
Domen Kožar e5cca82d79 make-disk-image: run tune2fs after umount to skip fsck
tune2fs marks the filesystem as clean to prevent resize2fs from
complaining.

But we were invoking it before we mounted the filesystem, so the
counters would increase to 1 and it broke the functionality.

By moving the call after the mount, I have confirmed it works by:

   $ nix-build nixos/tests/ec2.nix

cc @rbvermaa @edolstra
2016-12-07 13:30:20 +01:00
Vladimír Čunát a11ad092d6
digikam: remove file unintentionally resurrected
... in 8b565d647.  Git's rename semantics is a real PITA.
https://github.com/NixOS/nixpkgs/commit/8b565d647#commitcomment-20099695
2016-12-07 13:25:18 +01:00
Graham Christensen 76ef70af7d
imagemagick: 6.9.6-2 -> 6.9.6-7 for CVE-2016-9556 and CVE-2016-9559 2016-12-07 07:24:13 -05:00
Christoph Hrdinka 797a784d6f python-mapnik: add cairo to buildInputs 2016-12-07 13:16:11 +01:00
Jörg Thalheim 0df00d66d5 Merge pull request #20916 from montag451/corosync
corosync: 2.4.1 -> 2.4.2
2016-12-07 12:50:23 +01:00
Kier Davis 7200424589
hashcat3: init at 3.10 2016-12-07 11:25:32 +00:00
Jörg Thalheim a65deea6c6 Merge pull request #20953 from joelmo/master
portaudio: remove old version portaudioSVN
2016-12-07 09:14:23 +01:00
David Terry f067bca841 nixos: docs: note that channels are per user 2016-12-07 09:06:25 +01:00
Jörg Thalheim 8d18d06e3c Merge pull request #20969 from ericsagnes/pkg-update/styx
styx: 0.3.1 -> 0.4.0
2016-12-07 09:00:38 +01:00
Jörg Thalheim 52753e409e Merge pull request #20966 from demoslam/update/ag-1.0.2
silver-searcher: 0.33.0 -> 1.0.2
2016-12-07 08:49:43 +01:00
Peter Hoeg 08721190a5 dropbox: 14.4.19 -> 15.4.22 2016-12-07 14:35:38 +08:00
demoslam d76c48796e silver-searcher: 0.33.0 -> 1.0.2 2016-12-06 22:22:03 -08:00
Eric Sagnes 30d4eca088 styx-themes: init 2016-12-07 15:01:29 +09:00
Eric Sagnes c56fa24745 styx: 0.3.1 -> 0.4.0 2016-12-07 15:01:03 +09:00
Joachim F 583e5cfa0d Merge pull request #20881 from romildo/new.e17gtk
e17gtk: init at 3.22.0
2016-12-07 05:25:30 +01:00
Joachim F 48cad0441b Merge pull request #20901 from ambrop72/kdevelop-5.0.3
kdevelop: 5.0.2 -> 5.0.3
2016-12-07 05:23:17 +01:00
Joachim F bf574f33cb Merge pull request #20955 from savannidgerinel/bugfix-icu-version
icu4c: fix #20954: icu_54_1 package does not compile
2016-12-07 01:25:06 +01:00
Joachim Fasting 984d9ebb56
hidepid: polkit and systemd-logind compatibility
`systemd.hideProcessInformation = true`, would break interactions
requiring polkit arbitration such as initating poweroff/reboot as a
normal user; the polkit daemon cannot be expected to make decisions
about processes that don't exist as far as it is concerned.

systemd-logind lacks the `sys_ptrace` capability and so needs to be part
of the designated proc gid, even though it runs as root.

Fixes https://github.com/NixOS/nixpkgs/issues/20948
2016-12-07 01:12:05 +01:00
Savanni D'Gerinel 705e29046d icu: remove icu4c-54.1
Only zoom-us depends on icu4c-54.1. Since we know that version has some vulnerabilities, and zoom-us appears to work with icu4c-57.1, I remove the icu/54.1.nix file, remove icu_54_1 from all-packages.nix, and have zoom-us depend on icu (i.e., icu4c-57.1)
2016-12-06 17:51:11 -06:00
Rommel M. Martinez 26d6722381 kubernetes: 1.4.5 -> 1.4.6 2016-12-07 07:13:08 +08:00
Nikolay Amiantov c182733691 skype: return to stock qt4
Fix a SIGABRT, also finally get rid of qt4_clang.
2016-12-07 01:47:30 +03:00