Commit graph

2162 commits

Author SHA1 Message Date
Eelco Dolstra
b7fe9712dd Merge pull request #13824 from aneeshusa/update-openssh-to-7.2p2
openssh: 7.2p1 -> 7.2p2 for OSA x11fwd.adv
2016-03-11 10:52:14 +01:00
Tobias Geerinckx-Rice
e834a7c05b dropbear: 2015.71 -> 2016.72
Bugfix release:
- Validate X11 forwarding input. Could allow bypass of
  authorized_keys command= restrictions.
2016-03-11 03:08:02 +01:00
Aneesh Agrawal
2dd09b634e openssh: update homepage link
Unfortunately, the site is not available over HTTPS.
2016-03-10 18:40:00 -05:00
Aneesh Agrawal
e5ca25eb7a openssh: 7.2p1 -> 7.2p2 for OSA x11fwd.adv
Fixes OpenSSH Security Advisory x11fwd.adv, which is available at
http://www.openssh.com/txt/x11fwd.adv.
2016-03-10 18:01:33 -05:00
Domen Kožar
83766949c1 speedtest-cli: 0.3.1 -> 0.3.4 (fix runtime) 2016-03-10 20:42:37 +00:00
Aneesh Agrawal
ce74aac132 openssh: update GSSAPI patch to openssh 7.2 2016-03-08 16:11:56 -05:00
Aneesh Agrawal
9e86984fe0 openssh: decouple gssapi patch from kerberos
The GSSAPI patch is useful but maintained by Debian, not upstream, and
can be slow to update. To avoid breaking openssh_with_kerberos when
the openssh version is bumped but the GSSAPI patch has not been updated,
don't enable the GSSAPI patch implicitly but require it to be explicitly
enabled.
2016-03-08 15:14:25 -05:00
Vladimír Čunát
09af15654f Merge master into closure-size
The kde-5 stuff still didn't merge well.
I hand-fixed what I saw, but there may be more problems.
2016-03-08 09:58:19 +01:00
joachifm
453686a24a Merge pull request #13705 from aneeshusa/use-bin-instead-of-sbin-for-openssh
openssh: use bin instead of sbin folder
2016-03-07 12:03:37 +00:00
joachifm
884627a6ef Merge pull request #13720 from aneeshusa/allow-compiling-openssh-without-linking-openssl
openssh: allow building without linking openssl
2016-03-07 11:55:36 +00:00
Aneesh Agrawal
14201da332 openssh: allow building without linking openssl
http://undeadly.org/cgi?action=article&sid=20140430045723 has the
original announcement of this option. Note, openssl headers are still
required at build time, see this comment:
http://www.gossamer-threads.com/lists/openssh/dev/61125#61125
2016-03-06 16:36:55 -05:00
Marius Bakke
7135553cf1 unbound: drop sbin directory 2016-03-06 12:50:41 +00:00
Marius Bakke
14e6b7aeb9 unbound: 1.5.7 -> 1.5.8 2016-03-06 12:11:40 +00:00
Vladimír Čunát
a458a9f78f curl: use an official download link
It works now that we have e6f61b4cf3.
2016-03-06 11:12:23 +01:00
Aneesh Agrawal
bb39304ce6 openssh: use bin instead of sbin folder
References #11939.
2016-03-05 23:56:32 -05:00
joachifm
1b1379a68d Merge pull request #13531 from magnetophon/connman-dmenu-master
connman-dmenu: init at git-29-9-2015
2016-03-03 13:07:44 +00:00
Nikolay Amiantov
f442830c55 libreswan: specify that we don't support parallel building 2016-03-02 18:56:32 +03:00
Nikolay Amiantov
23dd97ee88 Merge commit 'refs/pull/13412/head' of git://github.com/NixOS/nixpkgs 2016-03-02 18:56:24 +03:00
Marius Bakke
c5f177cb5d dnscrypt-proxy: 1.6.0 -> 1.6.1 2016-03-02 15:12:06 +00:00
Alex Franchuk
69d8cb4a6b libreswan: add package and service to nixos 2016-03-02 09:44:30 -05:00
Eelco Dolstra
cc71804ab0 openssh: Fix build 2016-03-01 22:25:17 +01:00
Aneesh Agrawal
7f8d50b443 openssh: 7.1p2 -> 7.2p1 2016-03-01 22:25:16 +01:00
zimbatm
69ce5cb656 use the sourceforge mirrors everywhere
find pkgs -name "*.nix" -exec sed -r \
    "s|https?://downloads.sourceforge.net/|mirror://sourceforge/|g" -i {} \;
2016-02-28 12:07:42 +00:00
Franz Pletz
b871649530 quicktun: init at 2.2.4 2016-02-28 12:23:12 +01:00
Domen Kožar
67b9053d29 Merge pull request #13530 from danielfullmer/zerotier-fix
zerotierone: hardcoded path fix
2016-02-28 10:20:04 +00:00
Bart Brouns
8fa1fb4920 connman-dmenu: init at git-29-9-2015
fix indentation
2016-02-28 05:18:35 +01:00
Daniel Fullmer
110dfca988 zerotierone: hardcoded path fix
New code in zerotier broke the previous substitution where we refer to
the correct path for "ip".
2016-02-27 22:13:41 -05:00
Arseniy Seroka
824a1fb5b9 Merge pull request #13496 from zimbatm/no-dots-at-end-of-description
Remove all dots at end of descriptions
2016-02-27 21:34:06 +03:00
Franz Pletz
0a9076b5f8 socat: 2.0.0-b8 -> 2.0.0-b9 (CVE-2016-2217)
https://lwn.net/Vulnerabilities/674840/

http://www.dest-unreach.org/socat/contrib/socat-secadv7.html
http://www.dest-unreach.org/socat/contrib/socat-secadv8.html
2016-02-27 19:10:38 +01:00
Franz Pletz
88d1564985 socat: 1.7.3.0 -> 1.7.3.1 (CVE-2016-2217)
https://lwn.net/Vulnerabilities/674840/

http://www.dest-unreach.org/socat/contrib/socat-secadv7.html
http://www.dest-unreach.org/socat/contrib/socat-secadv8.html
2016-02-27 19:10:38 +01:00
zimbatm
17348dc094 Remove all dots at end of descriptions
Specially crafted for @JagaJaga

    find pkgs -name "*.nix" -exec \
      sed -e 's|\(description.*\)\.";|\1";|g' -i {} \;
2016-02-27 17:30:29 +00:00
Franz Pletz
158ff99ae4 chrony: 2.2 -> 2.3 2016-02-27 18:00:07 +01:00
Christoph Hrdinka
0c0312d342 Merge pull request #13048 from bendlas/update-i2p
i2p: 0.9.23 -> 0.9.24
2016-02-27 17:49:20 +01:00
Franz Pletz
c691b6a858 ntp: 4.2.8p4 -> 4.2.8p6 (multiple CVEs)
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
2016-02-27 16:34:02 +01:00
zimbatm
2f38c1be69 Merge pull request #11142 from cresh/darwin-sshpass
sshpass: Enable on OS X.
2016-02-27 00:00:01 +00:00
Arseniy Seroka
766ad682f1 Merge pull request #13471 from Profpatsch/networkmanager-link-local
networkmanager: fix link-local ip addresses
2016-02-27 02:55:31 +03:00
zimbatm
35ab3d301f Merge remote-tracking branch 'upstream/staging' 2016-02-26 22:37:04 +00:00
Domen Kožar
fe9f5dbbbc Merge pull request #6600 from 4z3/tlsdate
tlsdate doesn't build on x86_64-darwin
2016-02-26 10:59:00 +00:00
Profpatsch
70c02402c8 networkmanager: fix link-local ip addresses
NetworkManager needs an additional avahi-user to use link-local
IPv4 (and probably IPv6) addresses. avahi-autoipd also needs to be
patched to the right path.
2016-02-26 03:28:56 +01:00
zimbatm
853a213698 Merge pull request #13323 from rycee/ddclient/platform
ddclient: add meta.platforms
2016-02-26 00:02:06 +00:00
Franz Pletz
c459ba8f85 ratools: init at 0.6.2 2016-02-25 16:56:48 +01:00
Franz Pletz
6a27fc57b7 radvd: 2.11 -> 2.12 2016-02-25 16:56:48 +01:00
Tobias Geerinckx-Rice
818263ce46 miniupnpd: 1.9.20160216 -> 1.9.20160222
- set IPv6 Hop limit to 10
- fix HOST: header of event notifications in IPv6
- be more compliant on 64bit machines : ui4 in [0;2^32-1]
2016-02-25 16:19:42 +01:00
Vladimír Čunát
93f6af1071 Merge branch 'master' into staging 2016-02-25 09:01:48 +01:00
Arseniy Seroka
e3aa635e68 Merge pull request #13419 from k0ral/nixos-unstable
aria2: 1.19.3 -> 1.20.0
2016-02-24 19:02:38 +03:00
koral
29809666cb aria2: 1.19.3 -> 1.20.0 2016-02-24 12:56:15 +01:00
Frederik Rietdijk
40ca841c5c Merge pull request #13124 from FRidh/buildPythonApplication
buildPythonApplication: use new function for Python applications
2016-02-23 16:02:10 +01:00
Tobias Geerinckx-Rice
3675366f81 miniupnpd: 1.9.20160212 -> 1.9.20160216
Changes:
- minor changes to follow UDA 1.1 more closely.
- more argument checking in Soap methods.

Log: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-02-22 19:42:27 +01:00
Eelco Dolstra
389d04cbe7 curl: 7.47.0 -> 7.47.1 2016-02-22 11:41:34 +01:00
Franz Pletz
d31f58c688 tinc_pre: 2015-11-07 -> 2016-01-27
Also fixes `--version` parameter in exectuables.
2016-02-22 04:59:59 +01:00
Robin Gloster
60290c69e4 Merge pull request #13357 from zimbatm/curl-7.15-fixup
curl: fixes installation of 7.15
2016-02-22 01:19:17 +00:00
zimbatm
6908e75441 curl: fixes installation of 7.15
It was trying to install /etc/ssl/cert/ca-certificates.pem

See https://hydra.nixos.org/build/32167398/nixlog/1
2016-02-21 23:57:20 +00:00
Robert Helgesson
5d8c4443f1 ddclient: add meta.platforms 2016-02-21 20:24:20 +01:00
Benjamin Staffin
29711967a2 openssh: update gssapi patch to match openssh version
Should fix the openssh_with_kerberos build.

Fixes #13140

(cherry picked from commit 3dae6c7e1e1eb64b3ceb2796eea1ad0ae1596688)
2016-02-20 22:22:01 -08:00
Arseniy Seroka
7d22996df0 Merge pull request #13146 from rycee/bump/ddclient
ddclient: 3.8.2 -> 3.8.3
2016-02-21 00:40:51 +03:00
Robert Helgesson
113106df1b ddclient: 3.8.2 -> 3.8.3
Also remove patch for issue that has been fixed upstream, add simple
meta section, and minor other cleanups.
2016-02-20 18:30:36 +01:00
Arseniy Seroka
cbb06df02f Merge pull request #13142 from zimbatm/zerotierone-1.1.4
Zerotierone 1.1.4
2016-02-20 17:09:59 +03:00
zimbatm
99910d97c2 zerotierone: 1.1.0 -> 1.1.4 2016-02-19 23:01:30 +00:00
Jinjing Wang
6f466c9dad shadowsocks-libev: init at 2.4.5 2016-02-19 20:58:12 +08:00
Frederik Rietdijk
4d06bf70f4 buildPythonApplication: use new function for Python applications 2016-02-19 13:16:41 +01:00
Eelco Dolstra
1ab14aad7a glibc: Drop hurd support
This hasn't been maintained since 2012.

Also, renamed glibc's kernelHeaders argument to linuxHeaders.
2016-02-18 21:11:15 +01:00
Vladimír Čunát
e9520e81b3 Merge branch 'master' into staging 2016-02-17 10:06:31 +01:00
Vladimír Čunát
ee994dfae6 bootstrap tools: have curl without http2 support
I assume there's not much use for it during bootstrapping.
This fixes them as well, as curl was compiled against libnghttp2 but the
lib wasn't copied to the bootstrap tools.
2016-02-17 10:04:32 +01:00
Arseniy Seroka
ef4ea6d673 Merge pull request #12901 from sheenobu/pkgs/new/sipsak
sipsak - init at 4.1.2.1
2016-02-17 02:19:36 +03:00
Herwig Hochleitner
8e0bc53f94 i2p: 0.9.23 -> 0.9.24 2016-02-16 21:13:51 +01:00
Nikolay Amiantov
1c8a21dfad Merge branch 'pdnsd-service' of https://github.com/nfjinjing/nixpkgs
Closes #12932
2016-02-16 20:35:01 +03:00
Franz Pletz
32eeb8658f babeld: 1.6.1 -> 1.7.1 2016-02-16 05:12:56 +01:00
Franz Pletz
932d2cbd2c Merge pull request #13000 from mayflower/feat/unbound-dnssec
unbound: 1.5.3 -> 1.5.7, hardening, DNSSEC support & cleanup
2016-02-16 02:13:35 +01:00
Rok Garbas
443072799d tahoelafs: 1.10.0 -> 1.10.2 and refractor expression, fixes #12004 2016-02-15 21:58:23 +01:00
Alexander V. Nikolaev
745a11fad5 connman: 1.30 -> 1.31 2016-02-15 08:34:15 +02:00
Franz Pletz
f415c07703 unbound: enable compilation with PIE & relro/now 2016-02-15 04:29:25 +01:00
Franz Pletz
7bf80c9875 unbound: 1.5.3 -> 1.5.7 2016-02-15 04:29:03 +01:00
Tobias Geerinckx-Rice
54e82445cb miniupnpd: 1.9.20160209 -> 1.9.20160212
Changes:
- return error 729 - ConflictWithOtherMechanisms if IGD v2 is enabled.
- add iptc_init() check in iptcrdr.c/init_redirect()
- add update_portmapping() / update_portmapping_desc_timestamp() functions
- use Linux libuuid uuid_generate() / BSD uuid_create() API

Changes: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-02-15 03:33:44 +01:00
Michael Raskin
4715783d2e getmail: 4.48.0 -> 4.49.0 2016-02-14 21:17:07 +01:00
Vladimír Čunát
d039c87984 Merge branch 'master' into closure-size 2016-02-14 08:33:51 +01:00
Jinjing Wang
1d6f590844 pdnsd: enable IPv6 by default 2016-02-12 19:32:29 +08:00
Edward Tjörnhammar
5bb195bda2 i2pd: 2.3.0 -> 2.4.0 2016-02-12 07:00:37 +01:00
Tobias Geerinckx-Rice
be0abb32f6 miniupnpd: 1.9.20160113 -> 1.9.20160209
Changes: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-02-11 21:37:41 +01:00
Eelco Dolstra
aea262f654 Fix misspelled meta.maintainers attributes 2016-02-10 14:59:50 +01:00
Matej Cotman
06ce6ba757 Merge pull request #12862 from ericsagnes/pkg/cmst
cmst: 2014.12.05 -> 2016.01.28
2016-02-10 01:17:05 +01:00
Sheena Artrip
8993b65225 sipsak - init at 4.1.2.1 2016-02-09 16:48:08 -05:00
Vladimír Čunát
a115bff08c Merge branch 'master' into staging 2016-02-07 13:52:42 +01:00
Tony White
98ffc61e2f curl: Change default src url (close #12851)
- Changes the default src url away from http://curl.haxx.se
to an official mirror because haxx.se resolves to https and
bootstrap curl doesn't have https support.
Please see https://github.com/NixOS/nixpkgs/issues/12816
for more info.
2016-02-07 13:39:45 +01:00
Eric Sagnes
20bb296be6 cmst: 2014.12.05 -> 2016.01.28 2016-02-07 18:51:28 +09:00
Vladimír Čunát
54299b60c4 Merge #12779: Mass replace pkg}/bin-style strings
... to refer to correct outputs
2016-02-03 17:25:22 +01:00
Vladimír Čunát
ae74c356d9 Merge recent 'staging' into closure-size
Let's get rid of those merge conflicts.
2016-02-03 16:57:19 +01:00
Guillaume Maudoux
9f358f809d Configure a default trust store for openssl 2016-02-03 12:42:01 +01:00
Robin Gloster
0876a44169 curl: 7.45 -> 7.47 and enable HTTP/2 (close #12723)
This fixes CVE-2016-0755:
https://curl.haxx.se/docs/adv_20160127A.html

vcunat removed *propagation* of pkgconfig and perl.
2016-02-03 10:50:24 +01:00
Eelco Dolstra
a5d5736692 Typo 2016-02-02 19:59:27 +01:00
Luca Bruno
a7d2947e33 Merge pull request #12708 from jerith666/email-init
email: init at d9fd259f
2016-02-01 23:50:55 +01:00
Domen Kožar
0b3becb269 Merge pull request #12701 from mayflower/builder-def-cleanup
builderDefsPackage cleanup
2016-02-01 21:09:34 +00:00
Tuomas Tynkkynen
13b3f3f246 treewide: Mass replace 'openssl}/bin' to refer the 'bin' output 2016-02-01 20:46:16 +02:00
Eelco Dolstra
a7b7ac8bfb openssh: Enable DSA host/client keys
This applies a patch from Fedora to make HostKeyAlgorithms do the
right thing, fixing the issue described in
401782cb67.
2016-02-01 16:31:43 +01:00
koral
a7f09e9773 openssh: 6.9p1 -> 7.1p2 2016-02-01 16:31:43 +01:00
Matt McHenry
23d1aa8516 email: init at d9fd259f 2016-01-31 17:36:26 -05:00
Gabriel Ebner
bca9042663 mu: 0.9.13 -> 0.9.16 2016-01-31 11:19:35 +01:00
Robin Gloster
ea9c2fad54 altermime: use mkDerivation 2016-01-30 20:31:05 +00:00
Tony White
627f7bf6a5 privoxy: 3.0.22 - > 3.0.24
- Security fixes
- Bug fixes
- General improvements
- Action file improvements
- Documentation improvements

Please see http://www.privoxy.org/announce.txt
for more detail.
2016-01-30 14:21:20 +00:00
Tobias Geerinckx-Rice
ac33b4724a More version attribute tidying where maintainers |= nckx 2016-01-25 20:08:34 +01:00
Tobias Geerinckx-Rice
9fb8020e4e Add version attribute where maintainers |= nckx
This will probably be mandatory soon, and is a step in the right
direction. Removes the deprecated meta.version, and move some meta
sections to the end of the file where I should have put them in
the first place.
2016-01-25 17:35:21 +01:00