Commit graph

101176 commits

Author SHA1 Message Date
Bjørn Forsman ce0a52f9bf nixos/security.wrappers: improve documentation
* The source attribute is mandatory, not optional
* The program attribute is optional
* Move the info about the mandatory attribute first (most important,
  IMHO)
2017-02-15 20:05:27 +01:00
Ross MacLeod aba35a5c2d python2.7-future: #22590 remove platform restriction (#22837)
Per #22590, `haskellPackages.servant` and by extension any package which transitively depends on `pythonX.Y-future` will fail to build on darwin even though there's apparently no reason why it can't be built there.
2017-02-15 18:02:22 +01:00
Peter Simons d583e013e1 Merge pull request #22825 from areina/add-catalan-to-aspell
aspell-dict-ca: init at 2.1.5-1
2017-02-15 17:47:44 +01:00
Aycan iRiCAN 2ce7dd7fbb emacs: fix sha256 hashes of savannah patches 2017-02-15 18:33:01 +03:00
Kristoffer Søholm 0ed06bcce7 pypandoc: 1.2.0 (broken) -> 1.3.3 (#22782) 2017-02-15 15:28:23 +00:00
Jaanus Torp 8978a9ee48 sway: 0.9 -> 0.11 (#22835) 2017-02-15 16:28:01 +01:00
Arseniy Seroka c16bfb8ac1 Merge pull request #22832 from rnhmjoj/zathura
zathura: 0.3.6 -> 0.3.7
2017-02-15 18:19:06 +03:00
Arseniy Seroka e6ea10414c Merge pull request #22831 from rnhmjoj/girara
girara: 0.2.6 -> 0.2.7
2017-02-15 18:18:41 +03:00
Peter Simons 1a0cddad80 Merge pull request #22834 from Profpatsch/data-pprint
haskellPackages: data-pprint jailbreak
2017-02-15 16:06:58 +01:00
Profpatsch d6fdba7f45 haskellPackages: data-pprint jailbreak 2017-02-15 15:44:30 +01:00
rnhmjoj 8066835454
zathura: 0.3.6 -> 0.3.7 2017-02-15 15:43:57 +01:00
Profpatsch 21cdf340db pythonPackages: use a more direct mirror (#22833)
The pypi.io domain is redirected two (!) times and lands on the URL added by
this commit.
2017-02-15 15:40:31 +01:00
Michael Raskin 2155b1eaba Merge pull request #22827 from peterhoeg/u/gtkvnc
gtk-vnc: 0.6.0 -> 0.7.0
2017-02-15 14:36:33 +00:00
Michael Raskin 13a1d38f55 irssi: 1.0.0 -> 1.0.1 2017-02-15 15:28:24 +01:00
Graham Christensen ac9222f03b
gnome3.gnome-boxes: 3.22.0 -> 3.22.4 2017-02-15 09:09:42 -05:00
Michael Raskin c731738ecc graphviz_2_0: hide inside monotoneViz
The old Graphviz version is vulnerable, but monotone-viz will never feed
it bad input.
2017-02-15 15:10:00 +01:00
rnhmjoj 6462775193
girara: 0.2.6 -> 0.2.7 2017-02-15 14:58:19 +01:00
Peter Hoeg bf86a268df gtk-vnc: 0.6.0 -> 0.7.0 2017-02-15 21:00:49 +08:00
Profpatsch 91d0260feb modules/filesystems: disallow non-empty fstab fields (#22803)
It was possible to pass empty strings / strings with only separator characters;
this lead to broken fstab formatting.
2017-02-15 13:22:48 +01:00
Peter Simons cb2499acd0 Merge pull request #22805 from LumiGuide/fix-hoogle-ghcjs
ghcWithHoogle: fix for ghcjs
2017-02-15 13:05:06 +01:00
Peter Simons 9e0867586c Merge pull request #21396 from laMudri/stdlib-v0.13
AgdaStdlib: v0.12 -> v0.13
2017-02-15 13:03:50 +01:00
Frederik Rietdijk 397e59b4c9 pythonPackages.Keras: 1.0.3 -> 1.2.2 2017-02-15 12:56:58 +01:00
Frederik Rietdijk 97c3bebd92 tensorflowCuDNN -> tensorflowWithCuda
and move expression
2017-02-15 12:32:44 +01:00
Frederik Rietdijk a069c16c22 tensorflowNoGpuSupport -> tensorflowWithoutCuda
and move expression
2017-02-15 12:32:44 +01:00
Peter Hoeg f53900d142 Merge pull request #22821 from peterhoeg/u/tg
terragrunt: 0.10.0 -> 0.10.1
2017-02-15 18:01:51 +08:00
Rahul Gopinath e69f76470a aenum: Init at 1.4.7 2017-02-15 10:25:37 +01:00
Rahul Gopinath ce8af120f2 leather: Init at 0.3.3 2017-02-15 10:24:53 +01:00
Vladimír Čunát e5ac6bc999
knot-resolver: use embedded lmdb on Darwin for now
I don't know what's wrong there, and Darwin isn't among primary platforms
for kresd.
2017-02-15 10:23:44 +01:00
Jean-Pierre PRUNARET 59639ad8b0 opengrok: 0.12.1 (broken) -> 0.12.5 2017-02-15 10:22:02 +01:00
Peter Hoeg e1165abcb8 terragrunt: 0.10.0 -> 0.10.1 2017-02-15 17:08:23 +08:00
Kamil Chmielewski 1a77e4141d chromium: flashplayer: 24.0.0.194 -> 24.0.0.221
[Critical security fix] - see #22792
2017-02-15 09:51:55 +01:00
Franz Pletz 1e65d0b9e9
gnutls: 3.5.8 -> 3.5.9
Bugfix release.
2017-02-15 09:35:28 +01:00
Franz Pletz 07309d740a
webkitgtk: 2.14.3 -> 2.14.4 for multiple CVEs
Fixes:

  * CVE-2017-2350
  * CVE-2017-2354
  * CVE-2017-2355
  * CVE-2017-2356
  * CVE-2017-2362
  * CVE-2017-2363
  * CVE-2017-2364
  * CVE-2017-2365
  * CVE-2017-2366
  * CVE-2017-2369
  * CVE-2017-2371
  * CVE-2017-2373

See https://webkitgtk.org/security/WSA-2017-0002.html.
2017-02-15 09:35:28 +01:00
Franz Pletz e8af5dcd8e
ffmpeg: 3.2.2 -> 3.2.4 for multiple CVEs
Fixes CVE-2017-5024 & CVE-2017-5025.

See https://ffmpeg.org/security.html.
2017-02-15 09:35:28 +01:00
Franz Pletz d2426f0aa8
ffmpeg: 3.1.6 -> 3.1.7 for multiple CVEs
Fixes CVE-2017-5024 & CVE-2017-5025.

See https://ffmpeg.org/security.html.
2017-02-15 09:35:27 +01:00
Franz Pletz 78f59f1223
ffmpeg: 2.8.10 -> 2.8.11 for multiple CVEs
Fixes CVE-2017-5024 & CVE-2017-5025.

See https://ffmpeg.org/security.html.
2017-02-15 09:35:27 +01:00
Franz Pletz 188526da3d
prometheus.blackboxExporter service: add CAP_NET_RAW
The blackbox-exporter for prometheus needs CAP_NET_RAW for sending icmp
probes.
2017-02-15 09:35:27 +01:00
Franz Pletz a73afa89b4
prometheus: 1.4.2 -> 1.5.2 2017-02-15 09:35:27 +01:00
Bjørn Forsman f9cb2b5640 nixos/security.wrappers: use literalExample in documentation
It's much more readable when the example attrset is pretty printed
instead of written as one line.
2017-02-15 09:08:41 +01:00
Bjørn Forsman a45821e7a8 nixos/cron: unbreak since new security.wrapper 2017-02-15 08:30:58 +01:00
Bjørn Forsman aaac02f6c4 nixos/atd: unbreak after new security.wrappers
* convert list -> attrset
* 'atd' doesn't exist, 'at' does
2017-02-15 08:25:59 +01:00
Bjørn Forsman b1bfe9d3db nixos: hint about security.setuidOwners/Programs -> security.wrappers
Let users know about the option rename / change during nixos-rebuild
with a useful message instead of an error (with no way forward).
2017-02-15 07:25:33 +01:00
Bjørn Forsman 34c1b74421 nixos/virtualbox: unbreak wrt. new security.wrappers
The new option takes an attrset, not a list.
2017-02-15 07:25:33 +01:00
Bjørn Forsman 448acd8e5e nixos: remove remaining reference to setuidPrograms
The option doesn't exist anymore.
2017-02-15 07:25:33 +01:00
rardiol 195ca7393c widelands: 18 -> 19 (#22796) 2017-02-15 07:11:59 +01:00
Philipp 01e5b8527d dehydrated: 0.3.1 -> 0.4.0 (#22804) 2017-02-15 07:05:22 +01:00
Profpatsch 7ee777d784 picard: 1.32. -> 1.4 2017-02-15 07:04:12 +01:00
Franz Pletz 9ddaa71b6d Merge pull request #22809 from mimadrid/update/shotwell-0.25.5
shotwell: 0.25.2 -> 0.25.5
2017-02-15 06:49:49 +01:00
Joachim Fasting 9d8a0f8dd8
pax-utils: 1.1.7 -> 1.2.2
Fixes at least a few out-of-bounds reads[1][2]

[1]: http://seclists.org/oss-sec/2017/q1/256
[2]: http://seclists.org/oss-sec/2017/q1/308
2017-02-15 05:37:50 +01:00
Ian-Woo Kim b7a24e0a2b nixos-container: added test for port forwarding ( nixos/tests/containers-portforward.nix ) 2017-02-15 05:12:46 +01:00