Commit graph

7421 commits

Author SHA1 Message Date
Tim Steinbach bd9b124f2a
linux: 4.13.12 -> 4.13.13 2017-11-15 07:32:24 -05:00
Orivej Desh a7f4d977a7
Merge pull request #31678 from flokli/fix-iwlwifi-linux-4.14
linux_4_14: fix iwlwifi fw reset
2017-11-15 11:32:53 +00:00
Florian Klink f919c7faec linux_4_14: fix iwlwifi fw reset
Currently, moving to kernel_4_14 breaks at least Intel Wireless 8260 and
8265 cards due to a API change in the firmware, which is not yet honored
in the driver.
2017-11-15 11:30:24 +00:00
Daiderd Jordan dadcca3f40 frameworks-coremedia: add impure dependnecy on CoreImage
Fixes ffmpeg sandbox build on darwin
2017-11-14 21:51:40 -05:00
Dan Peebles 49a5791bc4 darwin.stdenv: fix up to allow sandboxing 2017-11-14 10:36:04 -05:00
Dan Peebles 762a05cbb6 cctools-port: add a couple of (temporary) impure dependencies 2017-11-14 10:35:18 -05:00
Dan Peebles b2f8185695 configd: remove unsupported sandbox profile 2017-11-14 10:34:28 -05:00
Franz Pletz 172d346ff1
Merge pull request #31628 from lheckemann/fbterm-arm
fbterm: fix build on non-x86
2017-11-14 12:39:51 +01:00
Linus Heckemann e50745712c fbterm: fix build on non-x86 2017-11-14 09:01:13 +00:00
Cray Elliott 3c0c18792d mwprocapture: forgot to include a file 2017-11-13 20:26:24 -08:00
Cray Elliott 7f473fa506 mwprocapture: minor correctness fix to 4.14 patch 2017-11-13 20:21:56 -08:00
Cray Elliott ce8dea6bdd mwprocapture: patch to fix build for linux 4.14 2017-11-13 19:54:57 -08:00
Graham Christensen c886b170b1
Merge pull request #31629 from lheckemann/jfbview-mujs
jfbview: remove mujs and no-longer-necessary patch
2017-11-13 17:10:44 -05:00
Linus Heckemann 2c4e1e975c jfbview: remove mujs and no-longer-necessary patch
mujs is only required when older versions of mupdf are used, but
we have a more recent one in nixpkgs.
2017-11-13 21:08:01 +00:00
Joerg Thalheim b22f75748e android-udev-rules: 20171107 -> 20171113 2017-11-13 21:04:33 +00:00
Orivej Desh fab6760e75 devmem2: provide a better mirror
lartmaker.nl fails to respond to IPv6 queries.
2017-11-13 19:37:11 +00:00
Joerg Thalheim 7f7aa08332 linuxPackages_latest.spl: fix evaluation 2017-11-13 19:13:35 +00:00
adisbladis 8e2bd255e1
spl: Broken with 4.14 kernels 2017-11-14 01:37:52 +08:00
Tim Steinbach 53730c5a92
linux: Add 4.14 2017-11-13 08:34:36 -05:00
Jörg Thalheim be86b91d27
Merge pull request #31594 from sjau/master
zfsUnstable: 2017-10-16 -> 2017-11-12
2017-11-13 13:02:19 +00:00
Matthieu Coudron 38737386d5 linux_mptcp: makes linux_mptcp.override works
I needed to override some parameters because of an error I had:
"Error: modDirVersion specified in the Nix expression is wrong, it should be: 4.9.60+"

but the following override would not be taken into account
  pkg.override ({
    modDirVersion="4.9.60+";
    src=pkgs.lib.cleanSource /home/teto/mptcp;
  })

because the override would be overriden by the nixpkgs parameters
because of concatenation order:
https://nixos.org/nix/manual/#sec-language-operators
2017-11-13 11:19:26 +01:00
sjau 8ccaa882a1 zfsUnstable: 2017-10-16 -> 2017-11-12 2017-11-13 10:06:57 +01:00
tv 9f4a461278 update skarnet.org packages
execline:          2.2.0.0 -> 2.3.0.3
s6:                2.4.0.0 -> 2.6.1.1
s6-dns:            2.1.0.0 -> 2.2.0.1
s6-linux-utils:    2.2.0.0 -> 2.4.0.2
s6-networking:     2.2.1.0 -> 2.3.0.2
s6-portable-utils: 2.1.0.0 -> 2.2.1.1
s6-rc:             0.1.0.0 -> 0.3.0.0
skalibs:           2.4.0.1 -> 2.6.0.1
2017-11-13 00:09:32 +01:00
Vladimír Čunát ab1859e027
Merge branch 'staging'
Hydra looks very good: https://hydra.nixos.org/eval/1409475?compare=1409440
There's mainly some fallout from aarch64-linux not building `go`
on the first attempt.
2017-11-12 19:08:05 +01:00
Luke Adams 6ead149ff9 prl-tools: remove user services using .desktop files 2017-11-11 17:05:08 -06:00
Luke Adams 029b44db9d prl-tools: hardeningDisable: +"format" 2017-11-11 17:05:08 -06:00
Luke Adams 019cbdaa6a prl-tools: unpackPhase: extract prl-tools-lin.iso from dmg; add undmg, fetchurl inputs; update sourceRoot 2017-11-11 17:05:08 -06:00
Luke Adams 0b845abd22 prl-tools: 10.0.2.27712 -> 12.2.1-41615; src: download parallels dmg 2017-11-11 17:05:07 -06:00
Luke Adams e58b67ab2b prl-tools: Update platforms and url 2017-11-11 17:05:07 -06:00
Luke Adams 1aef116e41 prl-tools: ignore patchelf errors 2017-11-11 17:05:07 -06:00
Vladimír Čunát cbfb586151
Merge security fixes adapted from #31437 2017-11-11 13:33:25 +01:00
Andreas Rammhold 17fae2499a
busybox: fix CVE-2017-1587{34} 2017-11-11 13:32:29 +01:00
Vladimír Čunát 8559b6db82
Merge branch 'master' into staging
A couple thousand rebuilds from master.
2017-11-11 09:25:07 +01:00
Pascal Wittmann 24e87b49b6
Change many homepage urls from http to https #30636 2017-11-10 22:13:46 +01:00
Herwig Hochleitner 8ba0b7bc3b firmware-linux-nonfree: 2017-07-05 -> 2017-10-09-iwlwifi-fw-2017-11-03
- update and automate merging

The automated merging process should eliminate the need for keeping a
nixos-specific merged repository around

fixes #29806
2017-11-10 21:54:15 +01:00
Daiderd Jordan 63bac2c23e
cf-private: overwrite headers from CF 2017-11-09 23:29:41 +01:00
Vladimír Čunát 304259bdb1
Merge branch 'master' into staging
Mass rebuild, mainly on Darwin.
2017-11-09 22:37:01 +01:00
Drew Hess 67ba83a934 kernel: add beagleboard.org kernel
And update the existing platform variant to use it
2017-11-09 18:28:14 +02:00
Tuomas Tynkkynen d209612496 trinity: 1.6 -> 1.8 2017-11-09 10:53:33 +02:00
Dan Peebles bb863378d3 adv_cmds: remove custom sandbox profile (not allowed in recent Nix) 2017-11-08 22:32:44 -05:00
Dan Peebles 48a34be41c Support frameworks properly in sandbox 2017-11-08 22:06:52 -05:00
aszlig 2a894cd2d1
lxc: Fix build error with glibc 2.26
This issue doesn't necessarily have to do with glibc 2.26 and it could
have been fixed if we'd replace -Werror with -Wall.

The error in question was:

storage/overlay.c:808:13: error: 'dirlen' may be used uninitialized in
this function [-Werror=maybe-uninitialized]

After looking at the code in overlay.c it indeed might use dirlen
unitialized.

Unrelated to the glibc upgrade which brought the problem to the surface,
this also has been fixed upstream at lxc/lxc@180c477a32.

The reason however, that led to the upstream fix was a segfault which
has been reported at lxc/lxc#1802.

Signed-off-by: aszlig <aszlig@nix.build>
Cc: @wkennington, @globin, @fpletz
2017-11-09 02:21:00 +01:00
Vladimír Čunát 94efde5119
Merge #31402: mlt, ffado: fix includeds with glibc-2.26 2017-11-08 23:01:47 +01:00
Joerg Thalheim 55e6a5a4da android-udev-rules: 20171031 -> 20171107 2017-11-08 20:24:00 +00:00
Tim Steinbach 4cb8c5dc3c
linux-copperhead: 4.13.11.a -> 4.13.12.a 2017-11-08 14:34:31 -05:00
Tim Steinbach 087d1e8d36
linux: 4.13.11 -> 4.13.12 2017-11-08 14:34:31 -05:00
Tim Steinbach db1e2444a5
linux: 4.9.60 -> 4.9.61 2017-11-08 14:34:31 -05:00
Tim Steinbach bd4b9062ea
linux: 4.4.96 -> 4.4.97 2017-11-08 14:34:31 -05:00
Piotr Bogdan 1e78b48666 ffado: fix build with glibc-2.26
see https://sourceforge.net/p/ffado/mailman/message/36008067/
2017-11-08 17:35:51 +00:00
makefu 292f60504c linux.kernel: enable build of stk1160 modules 2017-11-08 12:41:54 +02:00
Vladimír Čunát c2b9ab578d
nfs-utils: fixup includes with glibc-2.26 2017-11-08 10:27:39 +01:00
Tuomas Tynkkynen 34f3ef2c4d tcp_wrappers: Use libnsl to fix build after new glibc
https://hydra.nixos.org/build/63759192

https://sourceware.org/ml/libc-alpha/2017-02/msg00478.html
2017-11-07 20:38:41 +02:00
Vladimír Čunát d51f9b364e
checkpolicy: fixup includes with glibc-2.26 2017-11-07 15:27:53 +01:00
Jörg Thalheim 84f40186b2 lxcfs: do not inherit enableDebugBuild from global namespace 2017-11-07 11:04:05 +00:00
Domen Kožar 2b995c544d osx_private_sdk: reduce output size and remove it from runtime closures 2017-11-07 11:06:10 +01:00
Vladimír Čunát 9aa37b159b
Merge branch 'master' into staging 2017-11-07 06:41:23 +01:00
Vladimír Čunát 1ac1581253
libselinux: fix missing include after glibc-2.26 2017-11-06 20:18:43 +01:00
Tuomas Tynkkynen bf585f2881 linux_rpi: 1.20170811 -> 1.20171029 2017-11-06 20:49:48 +02:00
Tuomas Tynkkynen 967ecb802e raspberrypifw: 1.20170811 -> 1.20171029 2017-11-06 20:49:48 +02:00
Tim Steinbach a9bf922bb7
Merge pull request #31308 from adisbladis/firejail-0_9_50
firejail: 0.9.48 -> 0.9.50
2017-11-06 12:47:57 +00:00
Vladimír Čunát bc90fe1fbb
Merge #30371: update misc. gnome3-related libraries 2017-11-06 13:00:15 +01:00
adisbladis 0af15f6f45
firejail: 0.9.48 -> 0.9.50 2017-11-06 17:21:03 +08:00
Tim Steinbach 30f6d630f1
linux: 4.14.0-rc7 -> 4.14.0-rc8 2017-11-05 16:47:03 -05:00
Jan Tojnar 3f12993f3a
xf86_input_wacom: 0.34 → 0.35 2017-11-05 20:44:11 +01:00
Orivej Desh 0a8d30c3b1
Merge pull request #31279 from rnhmjoj/rewritefs
rewritefs: 2016-07-27 -> 2017-08-14
2017-11-05 17:08:02 +00:00
Tuomas Tynkkynen 0d9f2f0bb4 platforms.nix: Clean up more 'uboot' legacy
For a while now, the only thing the 'uboot' attribute does is to tell
whether to add ubootTools to kernel/initrd builds. That can be
determined with platform.kernelTarget == "uImage" just as well.
2017-11-05 17:06:59 +02:00
rnhmjoj 896ec47a39
rewritefs: 2016-07-27 -> 2017-08-14 2017-11-05 15:52:37 +01:00
Franz Pletz b032b3544f
linux_mptcp: 0.92.1 -> 0.93 2017-11-05 14:56:06 +01:00
Tuomas Tynkkynen b50693d16c kernel, initrd: Remove legacy ubootChooser 2017-11-05 15:11:12 +02:00
Michael Raskin d715c087b1
Merge pull request #20423 from DerTim1/add-service-wrapper
service-wrapper: init at 16.04.0
2017-11-04 22:16:59 +00:00
Vladimír Čunát bb87d2c81a
drbd: fix evaluation after #30872 2017-11-04 10:20:39 +01:00
Frederik Rietdijk decaeb3040
Merge pull request #30872 from FRidh/udev
systemd: remove udev attributes
2017-11-04 10:02:01 +01:00
Joerg Thalheim 6ec3bf3a77 bcc: add myself as maintainer 2017-11-04 08:58:04 +00:00
Joerg Thalheim 292f23c4b5 bcc: fix module installation
BCC_KERNEL_MODULES_DIR should have not been removed
2017-11-04 08:57:20 +00:00
Franz Pletz 94043f511a
zfs: 0.7.2 -> 0.7.3
Bugfix release.
2017-11-03 21:39:05 +01:00
c0bw3b 525380b472 treewide: abandon Google Code homepages 2017-11-03 18:52:28 +00:00
Tuomas Tynkkynen b2093d4611 linuxPackages.bcc: Fix quoting for older Nix versions
Issue #31179.
2017-11-03 13:11:36 +02:00
Tim Steinbach 449a053152
linux-copperhead: 4.13.10.a -> 4.13.11.a 2017-11-02 19:54:31 -04:00
Orivej Desh a41342ba58
Merge pull request #30103 from dtzWill/fix/lsb-release-PATH
lsb-release: wrap to ensure needed utilities are available
2017-11-02 21:22:33 +00:00
Jörg Thalheim 5cfd049a03
Merge pull request #31057 from dtzWill/update/musl-1.1.18
musl: 1.1.17 -> 1.1.18
2017-11-02 18:53:11 +00:00
Orivej Desh 672efa467d
Merge pull request #31132 from pbogdan/sourceroot-fixes
fix source root locations after c3255fe8ec
2017-11-02 15:18:25 +00:00
Joerg Thalheim 7c8ec77db2 android-udev-rules: 20171014 -> 20171031 2017-11-02 15:12:43 +00:00
Piotr Bogdan 8904ce343a fix source root locations.
These have changed following commit
c3255fe8ec.

See also:

- https://github.com/NixOS/nixpkgs/pull/31004
- https://github.com/NixOS/nixpkgs/pull/31106
2017-11-02 13:53:36 +00:00
Matthieu Coudron 7dce131b86 kernelmptcp: 0.91.3 -> 0.92.1 2017-11-02 13:14:57 +01:00
Richard Marko 22beeeab76
criu: 2.0 -> 2.12.1 2017-11-02 12:45:51 +01:00
zimbatm c34c737172
Merge pull request #31100 from zimbatm/hashcat4
Hashcat4
2017-11-02 11:23:07 +00:00
Franz Pletz 68b5ec06b9
linux: 4.9.59 -> 4.9.60 2017-11-02 11:28:40 +01:00
Franz Pletz 6021ca25db
linux: 4.4.95 -> 4.4.96 2017-11-02 11:28:27 +01:00
Franz Pletz c37c896ee0
linux: 4.13.10 -> 4.13.11 2017-11-02 11:28:14 +01:00
Richard Marko c75c99f42e lxcfs: 2.0.7 -> 2.0.8, add debugBuild option 2017-11-02 03:56:59 +01:00
Franz Pletz 2df0fe91d4
Merge pull request #31038 from orivej/autofs
autofs: do not strip needed symbols
2017-11-01 22:10:15 +01:00
zimbatm 309373ea68 intel-ocl: r4.0-59481 -> 5.0-63503 2017-11-01 17:59:49 +00:00
zimbatm 8a59ef7354 wireguard: 0.0.20171017 -> 0.0.20171101 2017-11-01 11:00:20 +00:00
Will Dietz 399020d2f5 musl: 1.1.17 -> 1.1.18
Use this as an opportunity to remove
empty patches array.
2017-10-31 15:45:24 -05:00
Orivej Desh 2ad3933dca autofs: do not strip needed symbols
Fixes #28282 after #27415
2017-10-31 14:38:30 +00:00
Daniel Peebles dc1ef6ce8c
Merge pull request #31013 from NixOS/darwin-parallel
darwin: build applle stuff in parallel
2017-10-31 11:16:38 +01:00
Domen Kožar ea6a4068cf
darwin: build apple stuff in parallel 2017-10-31 07:47:58 +00:00
Vladimír Čunát 2d403e668c
Merge #30851: util-linux: 2.30.2 -> 2.31
Includes a fix for CVE-2016-2779.
2017-10-30 23:01:19 +01:00
Vladimír Čunát 687943763c
Merge branch 'master' into staging 2017-10-30 22:30:14 +01:00
Franz Pletz 0a5ecde808
linux: 4.4.80 -> 4.4.95 2017-10-30 17:57:00 +01:00
Franz Pletz 36be7d3e85
Revert parts of "linux: remove unused kernel patches"
This reverts commit 05b8cae9ec that
removed the cgroup v2 patch for the 4.4 kernel.
2017-10-30 17:57:00 +01:00
Franz Pletz 517606d1d4
Revert "linux_4_4: remove"
This reverts commit 9f3f575ab3.

Support from upstream has been extended to Feb 2022.
2017-10-30 17:57:00 +01:00
Tim Steinbach 70f35a99a4
linux: 4.14-rc6 -> 4.14-rc7 2017-10-30 08:30:29 -04:00
Frederik Rietdijk 6d41ae55dd Merge remote-tracking branch 'upstream/master' into HEAD 2017-10-30 07:51:09 +01:00
Shea Levy 9e37df185c
fwupd: Remove manual rpath settings now that meson is fixed.
Thanks @yegortimoshenko!
2017-10-29 14:42:55 -04:00
Frederik Rietdijk d0d0308876 Merge remote-tracking branch 'upstream/master' into HEAD 2017-10-29 14:08:20 +01:00
Tim Steinbach e76d8af375
linux-copperhead: 4.13.9.a -> 4.13.10.a 2017-10-28 13:42:32 -04:00
Frederik Rietdijk 97c7b69e25 systemd: remove udev attributes 2017-10-27 22:20:20 +02:00
Frederik Rietdijk 8634a2e2c5 Merge remote-tracking branch 'upstream/master' into HEAD 2017-10-27 21:35:58 +02:00
adisbladis 7b64943e8b
util-linux: 2.30.2 -> 2.31 2017-10-27 22:01:07 +08:00
Tim Steinbach 2c373d818d
linux: 4.13.9 -> 4.13.10 2017-10-27 07:48:05 -04:00
Tim Steinbach 85e79da31b
linux: 4.9.58 -> 4.9.59 2017-10-27 07:47:56 -04:00
Brian McKenna ed0f558fb0 uvcdynctrl: init at 0.2 (#30806)
* uvcdynctrl: init at 0.3.0

* uvcdynctrl: nitpicks
2017-10-26 11:10:28 +01:00
Tuomas Tynkkynen 2351947c57 sssd: 1.14.2 -> 1.16.0 2017-10-25 19:36:30 +03:00
Jörg Thalheim f3a2570ba4 Merge pull request #30695 from flokli/libcap-pkgconfig
libcap: already patch Make.Rules in prePatch
2017-10-25 09:00:28 +01:00
Joerg Thalheim 59382564ff bcc: fix install 2017-10-24 22:24:08 +01:00
Joerg Thalheim 8ee94216d3 bcc: 0.3.0 -> 0.4.0 2017-10-24 22:14:50 +01:00
Tuomas Tynkkynen 681c8006f5 read-edid: Only depend on libx86 on x86 2017-10-23 16:37:22 +03:00
Tim Steinbach 4ea79d3f36
linux: 4.14-rc5 -> 4.14-rc6 2017-10-23 08:49:39 -04:00
Florian Klink a505abc948 libcap: already patch Make.Rules in prePatch
Make.Rules gets already included during compilation, so set paths before
invoking make. This fixes wrong paths in libcap.pc.
2017-10-22 21:21:27 +02:00
Tim Steinbach e9aa686d3b
linux-copperhead: 4.13.8.a -> 4.13.9.a 2017-10-22 14:41:01 -04:00
Tim Steinbach 69ebd73571
linux: 4.13.8 -> 4.13.9 2017-10-22 14:35:49 -04:00
Tim Steinbach c529454c60
linux: 4.9.57 -> 4.9.58 2017-10-22 14:35:32 -04:00
Tuomas Tynkkynen 7b4db5da18 utillinux: 2.30 -> 2.30.2 2017-10-22 01:40:58 +03:00
Tuomas Tynkkynen 89e5c3b700 devicemapper: 2.02.173 -> 2.02.175 2017-10-22 01:40:58 +03:00
Tuomas Tynkkynen cc048f0b45 audit: 2.7.7 -> 2.8.1 2017-10-22 01:40:58 +03:00
Michael Weiss a0221824fb nvme-cli: 0.9 -> 1.4 2017-10-21 21:37:26 +02:00
Daniel Kuehn eafcfaf62c sssd: Add optional bindings for building sssd library that sudo can use to fetch sudoers rules from SSSD 2017-10-21 20:21:27 +02:00
Jörg Thalheim 3219511469 Merge pull request #30407 from sorki/lxc_2.1.0
lxc: 2.0.8 -> 2.1.0
2017-10-20 21:54:02 +01:00
Michael Raskin 83fdd2699c eudev: 3.2.1 -> 3.2.4 2017-10-20 18:37:39 +02:00
Will Dietz 4eb090efc8 musl: 1.1.16 -> 1.1.17, build with stack protector 2017-10-19 15:57:19 -05:00
Joerg Thalheim 485fe61657 zfsUnstable: 2017-09-26 -> 2017-10-16 2017-10-19 16:06:21 +01:00
Joerg Thalheim d8842199cb splUnstable: 2017-09-26 -> 2017-10-16 2017-10-19 16:06:13 +01:00
Tim Steinbach 0b409b37d4
linux-copperhead: 4.13.7.a -> 4.13.8.a 2017-10-19 08:02:26 -04:00
Nikolay Amiantov 0bc4216bf0 Merge branch 'staging' 2017-10-19 12:46:38 +03:00
Joerg Thalheim 65256b7f26 wireguard: 0.0.20171011 -> 0.0.20171017 2017-10-19 09:40:51 +01:00
Tim Steinbach 67343e2f30
linux: 4.13.7 -> 4.13.8 2017-10-18 08:38:39 -04:00
Tim Steinbach 1b0e69966b
linux: 4.9.56 -> 4.9.57 2017-10-18 08:38:27 -04:00
Vladimír Čunát 3d1dee3692
Merge branch 'master' into staging
Thousands of rebuilds from master.
2017-10-16 20:12:06 +02:00
Tim Steinbach 00669df0c1
linux: 4.14-rc4 -> 4.14-rc5 2017-10-16 09:26:36 -04:00
Joerg Thalheim 3f4a6754ef wireguard: 0.0.20171005 -> 0.0.20171011 2017-10-16 13:50:40 +01:00
Graham Christensen ea50efcc67
wpa_supplicant: patch for KRACKAttack
CVE-2017-13077: Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake.
    CVE-2017-13078: Reinstallation of the group key (GTK) in the 4-way handshake.
    CVE-2017-13079: Reinstallation of the integrity group key (IGTK) in the 4-way handshake.
    CVE-2017-13080: Reinstallation of the group key (GTK) in the group key handshake.
    CVE-2017-13081: Reinstallation of the integrity group key (IGTK) in the group key handshake.
    CVE-2017-13082: Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it.
    CVE-2017-13084: Reinstallation of the STK key in the PeerKey handshake.
    CVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake.
    CVE-2017-13087: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.
    CVE-2017-13088: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.
2017-10-16 07:33:44 -04:00
Graham Christensen 629965a532
hostapd: patch for KRACKAttack
CVE-2017-13077: Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake.
    CVE-2017-13078: Reinstallation of the group key (GTK) in the 4-way handshake.
    CVE-2017-13079: Reinstallation of the integrity group key (IGTK) in the 4-way handshake.
    CVE-2017-13080: Reinstallation of the group key (GTK) in the group key handshake.
    CVE-2017-13081: Reinstallation of the integrity group key (IGTK) in the group key handshake.
    CVE-2017-13082: Accepting a retransmitted Fast BSS Transition (FT) Reassociation Request and reinstalling the pairwise encryption key (PTK-TK) while processing it.
    CVE-2017-13084: Reinstallation of the STK key in the PeerKey handshake.
    CVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake.
    CVE-2017-13087: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.
    CVE-2017-13088: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame.
2017-10-16 07:33:43 -04:00
Tim Steinbach 19997f0100
linux-copperhead: 4.13.6.a -> 4.13.7.a 2017-10-15 15:28:16 -04:00
Jörg Thalheim 043529822b Merge pull request #30413 from symphorien/kexec
kexectools: 2.0.14 -> 2.0.15
2017-10-15 18:24:02 +01:00
Vladimír Čunát 3ee33f35f8
Merge branch 'staging'
Contains security fixes in X server and X libs.
On Hydra, the amount to rebuild on master is now higher than on staging;
the comparison looks OK.
2017-10-15 13:59:18 +02:00
Symphorien Gibol 8e53ca98f2 kexectools: 2.0.14 -> 2.0.15 2017-10-14 16:50:45 +02:00
Tim Steinbach 8c618fce30
linux: 4.13.6 -> 4.13.7
CVE-2017-5123
2017-10-14 10:29:04 -04:00
Richard Marko 7357d7b5ea lxc: 2.0.8 -> 2.1.0
Related to #30023

Note that this comes with new configuration format,
for migrating see https://linuxcontainers.org/lxc/news/#lxc-21-release-announcement-5th-of-september-2017
2017-10-14 15:14:46 +02:00
Vladimír Čunát 6525c22ef1
Merge branch 'master' into staging
Hydra: ?compare=1401528
2017-10-14 10:36:13 +02:00
Peter Hoeg f22ce20ec0 Revert "hyperv-daemons: init at current linux kernel version"
This reverts commit 51f1c635e6.
2017-10-14 14:42:49 +08:00
Peter Hoeg 8df1c9ac17 Revert "firewalld: init at 0.4.4.4"
This reverts commit 178a96f99b.
2017-10-14 14:42:48 +08:00
Peter Hoeg 5f6d2d15ac Revert "nvidia-firmware: init at 325.15"
This reverts commit 15bdbc21f9.
2017-10-14 14:42:48 +08:00
Peter Hoeg 15bdbc21f9 nvidia-firmware: init at 325.15 2017-10-14 14:38:04 +08:00
Peter Hoeg 178a96f99b firewalld: init at 0.4.4.4
Includes systemd module.
2017-10-14 14:38:04 +08:00
Peter Hoeg 51f1c635e6 hyperv-daemons: init at current linux kernel version 2017-10-14 14:38:04 +08:00
Joerg Thalheim acee0f9bea android-udev-rules: 20170612 -> 20171014 2017-10-13 20:15:49 +01:00
Tim Steinbach cc5dd66c03
linux: 4.9.55 -> 4.9.56 2017-10-12 20:02:15 -04:00
Tim Steinbach 64a727b160
linux-copperhead: 4.13.5.a -> 4.13.6.a 2017-10-12 13:09:36 -04:00
Tim Steinbach 5a8f9a8b6c
linux: 4.13.5 -> 4.13.6 2017-10-12 07:58:46 -04:00
Tim Steinbach 8940265231
linux: 4.9.54 -> 4.9.55 2017-10-12 07:58:33 -04:00
Dan Peebles e86991e1e8 darwin: fix assorted xcbuild builds
This includes adding a new xcbuild-based libutil build to test the waters a bit there.
We'll need to get xcbuild into the stdenv bootstrap before we can make the main build,
but it's nice to see that it can work.
2017-10-12 07:16:22 -04:00
Shea Levy 48595335f4
Add system_cmds apple project
Actually just build sysctl for now, as xcbuild segfaults.
2017-10-11 15:13:27 -04:00
Tim Steinbach 5dda1324be
linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT 2017-10-11 13:50:20 -04:00
Tim Steinbach 2262b2332d
linux: 4.14-rc3 -> 4.14-rc4 2017-10-10 13:07:42 -04:00
Vladimír Čunát f4c9d517db
tiptop: bugfix 2.3 -> 2.3.1 2017-10-10 18:13:18 +02:00
Eelco Dolstra 67c3eab348
linux: 4.9.53 -> 4.9.54 2017-10-10 12:41:50 +02:00
Joerg Thalheim 1439972bfb wireguard: 0.0.20171001 -> 0.0.20171005 2017-10-09 14:44:21 +01:00
Vladimír Čunát 994036d857
Merge branch 'master' into staging
Hydra: ?compare=1400181
2017-10-09 11:24:35 +02:00
Peter Hoeg 4817454366 wireguard: wg-quick systemd unit was referencing /usr/bin 2017-10-09 11:46:42 +08:00
Daniel Peebles 416979f3f7 Merge pull request #30150 from copumpkin/no-rpath-nonsense
Get rid of most @rpath nonsense on Darwin
2017-10-08 16:21:27 -04:00
Dan Peebles b426c85ce2 Get rid of most @rpath nonsense on Darwin
This requires some small changes in the stdenv, then working around the
weird choice LLVM made to hardcode @rpath in its install name, and then
lets us remove a ton of annoying workaround hacks in many of our Go
packages. With any luck this will mean less hackery going forward.
2017-10-08 16:13:46 -04:00
Michael Raskin 76cec2dfa6 fbterm: fix build 2017-10-08 20:53:13 +02:00
Jan Tojnar 08b283b37e
criu: Rely on XML_CATALOG_FILES variable 2017-10-07 23:39:15 +02:00
Jan Tojnar 7c690aec16
conky: Rely on XML_CATALOG_FILES variable 2017-10-07 23:38:32 +02:00
Frederik Rietdijk acfec163b1 Merge remote-tracking branch 'upstream/master' into HEAD 2017-10-07 12:15:17 +02:00
Vladimír Čunát ef41fc7f51
Merge branch 'master' into staging
Hydra: ?compare=1399476
2017-10-07 10:17:42 +02:00
Tuomas Tynkkynen a06d64ea69 kernel config: Explicitly enable device mapper
A no-op change on x86 but enables it on ARM.
2017-10-07 11:05:05 +03:00
Franz Pletz 662f82aee8
zfs, spl: 0.7.1 -> 0.7.2 2017-10-07 00:48:51 +02:00
Will Dietz 78785a06f9 lsb-release: wrap to ensure needed utilities are available 2017-10-06 08:57:23 -05:00
Tim Steinbach 3e5b594732
linux-copperhead: 4.13.4.a -> 4.13.5.a 2017-10-05 16:06:19 -04:00
Tim Steinbach 0bd1f7a92f
linux: 4.13.4 -> 4.13.5 2017-10-05 09:50:00 -04:00
Tim Steinbach aee224c8a5
linux: 4.9.52 -> 4.9.53 2017-10-05 09:49:40 -04:00
Orivej Desh 66d4941afe Merge branch 'master' into staging
* master: (48 commits)
  Mathematica: 11.0.1 -> 11.2.0
  kbfs: 20170922.f76290 -> 20171004.40555d
  packer: 1.0.3 -> 1.1.0
  libxdg-basedir: 1.0.2 -> 1.2.0
  fscrypt: 0.2.1 -> 0.2.2
  devtodo: init at 0.1.20
  keybase: 1.0.30 -> 1.0.33
  elixir: Fix locale problem on NixOS
  keybase-gui: 1.0.25 -> 1.0.33
  terraform: 0.10.2 -> 0.10.7  (#30055)
  emby: 3.2.32.0 -> 3.2.33.0
  sbcl: 1.3.21 -> 1.4.0
  ardour: 5.11 -> 5.12
  axoloti: fix evaluation
  axoloti: init at 1.0.12-1
  melpa-packages: Add new lean packages
  fastlane: init at 2.60.1
  nixos/traefik: guard example path
  go-ethereum: 1.7.0 -> 1.7.1
  xzgv: 0.9.1 -> 0.9.2
  ...
2017-10-05 07:41:39 +00:00
Michael Weiss c42b878ed3 fscrypt: 0.2.1 -> 0.2.2 2017-10-05 01:29:45 +02:00
Orivej Desh f137004179 Merge branch 'master' into staging
* master: (81 commits)
  Add NixOS 17.09 AMIs
  gradle: 4.2 -> 4.2.1
  maintainers.nix: use my GitHub handle as maintainer name
  fcitx-engines.rime: init at 0.3.2
  brise: init at 2017-09-16
  librime: init at 1.2.9
  marisa: init at 0.2.4
  opencc: build shared library and programs
  josm: 12712 -> 12914
  exa: 0.7.0 -> 0.8.0
  krb5: add deprecation date for old configuration
  rustRegistry: 2017-09-10 -> 2017-10-03
  go-ethereum: Fix libusb segmentation faults on Darwin
  tor-browser-bundle-bin: 7.0.5 -> 7.0.6
  libsodium: 1.0.13 -> 1.0.15
  tor-browser-bundle: geoip support
  tor-browser-bundle: support transports obfs2,obfs3
  tor-browser-bundle: bump https-everywhere to 2017.9.12
  tint2: limit platforms to Linux since macOS is not supported and fails the tests
  eclipse-plugin-vrapper: init at 0.72.0
  ...
2017-10-03 17:46:39 +00:00
Franz Pletz 37521cfd54
iproute: 4.12.0 -> 4.13.0 2017-10-02 20:24:35 +02:00
Franz Pletz 1988f762ff
batman-adv: 2017.2 -> 2017.3 2017-10-02 20:24:21 +02:00
Tim Steinbach 1e85d28fdc
linux: 4.14-rc2 -> 4.14-rc3 2017-10-02 09:29:51 -04:00
Jason A. Donenfeld c2842b92f8 wireguard: 0.0.20170810 -> 0.0.20171001 2017-10-02 03:14:15 +02:00
Orivej Desh fda26c8476 Merge branch 'master' into staging
* master: (271 commits)
  pysmbc: clarify license
  pysmbc: fix license
  bazel: 0.5.4 -> 0.6.0 (#29990)
  googler: init at 3.3
  go: declare support for aarch64
  firefox-beta-bin: 56.0b5 -> 57.0b4
  spotify: 1.0.64.401.g9d720389-21 -> 1.0.64.407.g9bd02c2d-26
  gogs: 0.11.19 -> 0.11.29
  grafana: 4.5.1 -> 4.5.2
  mopidy-iris: 3.4.1 -> 3.4.9
  nextcloud: 12.0.2 -> 12.0.3
  haskell-json-autotype: jailbreak to fix build within LTS 9.x
  kore: fix up
  kore: init at 2.0.0
  glusterfs service: fix issues with useRpcbind
  tig: 2.2.2 -> 2.3.0
  haskell-hspec-core: enable test suite again
  hackage-packages.nix: automatic Haskell package set update
  librsvg: fix thumbnailer path
  awscli: 1.11.108 -> 1.11.162
  ...
2017-10-02 00:22:12 +00:00
Jörg Thalheim d67137dd55 iwd: 2017-06-02 -> 2017-09-22 2017-10-01 10:22:18 +01:00
Tim Steinbach e479b5ea6f
linux-copperhead: 4.13.3.a -> 4.13.4.a 2017-09-30 10:05:39 -04:00
Joerg Thalheim 3db9841d34 bcc: fix relocation bug downgrading to llvm 3.9
https://github.com/iovisor/bcc/issues/1276

fixes #29913
2017-09-30 00:33:14 +01:00
Joerg Thalheim 09d3bab32d sysdig: remove broken patchelf call
patchelf broke sysdig/csysdig binaries
2017-09-29 16:52:45 +01:00
John Ericson f037625f87 Merge remote-tracking branch 'upstream/staging' into deps-reorg 2017-09-28 12:32:57 -04:00
Cray Elliott 56d1a14419 nvidia-x11: 384.69 -> 384.90 2017-09-28 00:01:37 -07:00
Robin Gloster 50fb62994b
bluez: remove unneeded dependencies and fix test bins 2017-09-27 21:25:05 +02:00
Tim Steinbach ab3ff4af9f
linux: 4.13.3 -> 4.13.4 2017-09-27 13:08:21 -04:00
Tim Steinbach 2ca84cfa29
linux: 4.9.51 -> 4.9.52 2017-09-27 13:03:27 -04:00
Tim Steinbach 964672dde5
linux: Remove 4.12 (EOL) 2017-09-27 13:03:06 -04:00
WilliButz 43b7e69d13 splUnstable: fix hash 2017-09-27 15:22:02 +02:00
Jan Solanti 4ec3d311cb nvidia-x11: generate nvidia_icd.json from template 2017-09-26 21:53:44 +02:00
Jörg Thalheim bbdca85b17 Merge pull request #29644 from yegortimoshenko/patch-3
mba6x_bl: 2016-04-22 ->2016-12-08
2017-09-26 19:56:26 +01:00
Yegor Timoshenko fbc8fa8b42 mba6x_bl: update to 2016-12-08 2017-09-26 17:08:59 +00:00
Joerg Thalheim 8fcf95f102 {zfsUnstable,splUnstable}: 2017-09-12 -> 2017-09-26 2017-09-26 09:08:56 +01:00
Joerg Thalheim b064137b7b sysdig: 0.17.0 -> 0.18.0 2017-09-26 00:15:51 +01:00
Daiderd Jordan b196241f42
reattach-to-user-namespace: 2.5 -> 2.6 2017-09-26 00:58:51 +02:00
Tim Steinbach b13a6d5720
linux: 4.14-rc1 -> 4.14-rc2 2017-09-25 09:24:23 -04:00
Michael Weiss ec075b40ec fscryptctl: init at 2017-09-12 2017-09-24 23:12:30 +02:00
Vladimír Čunát cb9a846762
Merge older staging
Hydra looks OK; not finished yet but already has more successes than
on master.
2017-09-24 20:56:11 +02:00
Michael Weiss 2037f1bbe8 fscrypt: init at 0.2.1 2017-09-24 02:38:45 +02:00
Daiderd Jordan bb02b800a2
darwin-frameworks: add impure version of CoreFoundation 2017-09-23 22:29:43 +02:00
Michael Weiss 1a9467edd5 fuse3: 3.1.1 -> 3.2.0 2017-09-23 21:31:15 +02:00
Robin Gloster 08b09fdc5c
fanctl, fan module: remove
This has been broken nearly all the time due to the patches needed to
iproute2 not being compatible with the newer versions we have been
shipping. As long as Ubuntu does not manage to upstream these changes
so they are maintained with iproute2 and we don't have a maintainer
updating these patches to new iproute2 versions it is not feasible to
have this available.
2017-09-23 17:55:33 +02:00
Vladimír Čunát 73282c8cc2
Merge branch 'master' into staging
Thousands of rebuilds from master :-/
2017-09-23 09:57:23 +02:00
Jörg Thalheim 743848bb46 Merge pull request #29581 from eqyiel/fix-rpc-gssd
nixos/nfs: allow setting the path to krb5.keytab
2017-09-22 01:41:10 +01:00
John Ericson 1dd63de9a0 Merge some Master PRs into staging
No native hashes should be changed
2017-09-21 20:11:59 -04:00
John Ericson 56574e6087 Merge pull request #29610 from obsidiansystems/no-gccCrossStageFinal
top-level: No `gccCrossStageFinal` needed anymore
2017-09-21 18:57:16 -04:00
Michael Weiss 351f5fc585 fuse3: init at 3.1.1
This includes fuse-common (fusePackages.fuse_3.common) as recommended by
upstream. But while fuse(2) and fuse3 would normally depend on
fuse-common we can't do that in nixpkgs while fuse-common is just
another output from the fuse3 multiple-output derivation (i.e. this
would result in a circular dependency). To avoid building fuse3 twice I
decided it would be best to copy the shared files (i.e. the ones
provided by fuse(2) and fuse3) from fuse-common to fuse (version 2) and
avoid collision warnings by defining priorities. Now it should be
possible to install an arbitrary combination of "fuse", "fuse3", and
"fuse-common" without getting any collision warnings. The end result
should be the same and all changes should be backwards compatible
(assuming that mount.fuse from fuse3 is backwards compatible as stated
by upstream [0] - if not this might break some /etc/fstab definitions
but that should be very unlikely).

My tests with sshfs (version 2 and 3) didn't show any problems.

See #28409 for some additional information.

[0]: https://github.com/libfuse/libfuse/releases/tag/fuse-3.0.0
2017-09-21 23:59:46 +02:00
John Ericson bac21681a1 systemd: Use some nativeBuildInputs
I erred on the side of caution when changing these.
2017-09-21 15:49:54 -04:00
John Ericson ed14223f8c treewide: Manual fix more pkg-config build-inputs 2017-09-21 15:49:54 -04:00
John Ericson f8a18cd4cf misc pkgs: Manual fixup pkgconfig nativeBuildInputs after sed
Importantly, this included regenerating pkgs/servers/x11/xorg, to
clobber the old sed.
2017-09-21 15:49:54 -04:00
John Ericson 531e4b80c9 misc pkgs: Basic sed to get fix pkgconfig and autoreconfHook buildInputs
Only acts on one-line dependency lists.
2017-09-21 15:49:53 -04:00
John Ericson 9f2e05662b treewide: Manually fix miscategorized autoreconfHook buildInputs
These are the ones with odd indentation my script will mess up on.
2017-09-21 15:49:53 -04:00
John Ericson b9bf90ca6c all-packages: Remove gccCrossStageFinal; any gcc will not work 2017-09-21 15:49:18 -04:00
Vladimír Čunát 4683c374fa
Merge branch 'master' into staging
A couple thousand rebuilds again.
2017-09-21 21:09:32 +02:00
Tim Steinbach 7d3d276a16
linux-copperhead: 4.13.2.a -> 4.13.3.a 2017-09-21 14:37:44 -04:00
Ruben Maher 98a2316166 nfs-utils: set /etc/krb5.keytab as default path for rpc-gssd
Currently the `rpc-gssd.service` has a `ConditionPathExists` clause that can
never be met, because it's looking for stateful data inside `/nix/store`.

`auth-rpcgss-module.service` also only starts if this file exists.

Fixes NixOS/nixpkgs#29509.
2017-09-20 15:36:26 +01:00
Tim Steinbach eab480ac3d
linux: 4.13.2 -> 4.13.3 2017-09-20 08:36:27 -04:00
Tim Steinbach 726765404b
linux: 4.12.13 -> 4.12.14 2017-09-20 08:36:13 -04:00
Tim Steinbach 7cfa6895e8
linux: 4.9.50 -> 4.9.51 2017-09-20 08:35:44 -04:00
John Ericson e9c1f64048 Merge branch 'master' into staging 2017-09-20 01:39:59 -04:00
John Ericson 19e3c580ad Merge pull request #29584 from obsidiansystems/no-wrapCCCross
top-level: Remove useless abstractions
2017-09-20 01:25:02 -04:00
John Ericson e19bb868dc all-packages: Remove forcedNativePackages; we no longer need it
Its kept around in the Hurd package set, but all that code is
presumably broken.
2017-09-20 00:59:19 -04:00
Frank Doepper 28dd1158ff circumvent hdaps name clash 2017-09-19 23:57:28 +02:00
Frank Doepper a3e806ef0f tp_smapi with hdaps 2017-09-19 23:57:28 +02:00
Vladimír Čunát d4c33d5e4e
Merge branch 'master' into staging 2017-09-19 18:03:09 +02:00
Robin Gloster 5c18c55062
dmtcp: fix buffer overflow due to too long ld-linux.so path
fixes #29565
2017-09-19 13:41:12 +02:00
Tuomas Tynkkynen 779aea8868 linuxPackages.mxu11x0: Mark broken on >= 4.13
https://hydra.nixos.org/build/61465503
2017-09-19 08:40:01 +03:00
Tuomas Tynkkynen 3e495bfd94 linuxPackages.cryptodev: Mark broken on >= 4.13
https://hydra.nixos.org/build/61470492
2017-09-19 08:37:44 +03:00
Franz Pletz 94bbe7db22
bluez4: remove, unused and probably vulnerable 2017-09-18 21:19:15 +02:00
Franz Pletz dadb16a57f
bluez: 5.43 -> 5.47 for CVE-2017-1000250
Fixes #29289.
2017-09-18 21:19:15 +02:00
Aneesh Agrawal 49fc06ed0a audit: Remove openldap dependency
The openldap dependency is only used for the audisp z/OS plugin.
This is not useful on Linux, so always disable this.
2017-09-18 02:49:01 -07:00
Joachim F aa818c5dbd Merge pull request #29467 from mguentner/wi.fi-urls
hostapd/wpa_supplicant: update urls
2017-09-17 14:59:05 +00:00
Jan Malakhovski 8525b78d05
linuxPackages: properly propagate features and extraConfig
`kernel.override { features = ... }` didn't work before, now it works as
expected.
2017-09-17 16:33:47 +02:00
Tim Steinbach c8f43edaf5
linux: 4.13-rc7 -> 4.14-rc1 2017-09-17 09:11:04 -04:00
Maximilian Güntner daf07c9d62
hostapd/wpa_supplicant: update urls 2017-09-17 13:46:11 +02:00
Joachim Fasting 7d69e5a18f linuxPackages.lttng-modules: broken on kernels >4.11 2017-09-17 09:44:04 +02:00
Joachim Fasting 9e395545e8 linuxPackages.lttng-modules: 2.9.3 -> 2.10.0 2017-09-17 09:44:04 +02:00