Commit graph

2954 commits

Author SHA1 Message Date
Jörg Thalheim
080c799f38
jwhois: fix service name
after an update of iana-etc the service name of whois changed
2017-04-20 07:33:38 +02:00
Tim Steinbach
55e334e62a
curl: 7.53.1 -> 7.54.0 2017-04-19 11:31:09 -04:00
Joachim F
901a0bb9fa Merge pull request #24908 from adamruzicka/cjdns-v19.1
cjdns: 18 -> 19.1
2017-04-16 12:10:59 +01:00
Nikolay Amiantov
3507da085f dropbear: fix static build
Fixes #24839. Also change default sftp-server path to a more canonical.
2017-04-16 12:58:27 +03:00
Michael Raskin
3368583e32 Merge pull request #24918 from sigma/pr/lftp
lftp: 4.7.6 -> 4.7.7
2017-04-15 08:15:25 +02:00
John Ericson
3bff114d95 Merge pull request #24871 from elitak/cross-staging
Various small crossDrv fixes
2017-04-15 01:27:05 -04:00
Yann Hodique
7a8ef9c6bd lftp: 4.7.6 -> 4.7.7 2017-04-14 21:43:24 -07:00
ndowens
896432e4ac speedtest-cli: 1.0.3 > 1.0.4 2017-04-14 15:50:53 -05:00
Adam Ruzicka
21efba54ca cjdns: 18 -> 19.1 2017-04-14 22:09:20 +02:00
Tristan Helmich
c395568b7a
openssh_hpn: use new sources and version (7_5_P1)
Close #23990.
2017-04-14 12:22:15 +02:00
Vladimír Čunát
5b3f807597
Merge #24179: openssh: 7.4p1 -> 7.5p1 2017-04-14 12:16:26 +02:00
Eric Litak
6b73c0f198 netcat-openbsd: pkgconfig is a nativeBuildInput 2017-04-14 01:59:28 -07:00
Jörg Thalheim
e09b950f54
openvpn: remove no longer correct systemd-notify.patch
This patch was only necessary for 2.3.x, while 2.4.0 improved
its own systemd notify support.

See: https://github.com/NixOS/nixpkgs/issues/24817
2017-04-11 08:51:56 +02:00
Aneesh Agrawal
769b991be6 openssh: 7.4p1 -> 7.5p1
Release notes are available at https://www.openssh.com/txt/release-7.5.
Mostly a bugfix release, no major backwards-incompatible changes.

Remove deprecated `UsePrivilegeSeparation` option,
which is now mandatory.
2017-04-10 19:39:22 -04:00
Daiderd Jordan
f8230518a2 Merge pull request #24762 from matthewbauer/darwin-misc-fixes
darwin: miscellaneous fixes
2017-04-10 08:50:15 +02:00
Tuomas Tynkkynen
997b77cd38 iperf: 3.1.3 -> 3.1.7 2017-04-09 21:48:25 +03:00
Matthew Bauer
d983235155
nuttcp: fix macOS build 2017-04-08 23:28:03 -05:00
Jörg Thalheim
cb6d1fdfd9 Merge pull request #24331 from LumiGuide/ssmtp-AuthPassFile
ssmtp: use the authPassFile option instead of authPass
2017-04-08 17:22:26 +02:00
Bas van Dijk
bd948391e6 strongswan: 5.5.1 -> 5.5.2 2017-04-06 15:57:50 +02:00
Joachim F
bb771e0405 Merge pull request #24573 from ambrop72/ntpd-fix
ntpd: Add patch to allow getpid syscall in seccomp filter.
2017-04-06 11:06:13 +01:00
Jörg Thalheim
052cd88921 Merge pull request #24625 from Mic92/networkmanager
networkmanager: 1.4.4 -> 1.6.4
2017-04-05 12:49:58 +02:00
Jörg Thalheim
b552de7525
network-manager_l2tp: set 1.2.4 explicity 2017-04-04 17:01:14 +02:00
Jörg Thalheim
7903ccbdf8
network-manager-applet: 1.4.4 -> 1.4.6 2017-04-04 17:01:14 +02:00
Jörg Thalheim
6bb303cd85
network-manager: 1.4.4 -> 1.6.4 2017-04-04 17:01:13 +02:00
David Guibert
f0ba178a3c zerotierone: 1.1.14 -> 1.2.2 (#24614) 2017-04-04 15:36:46 +01:00
Vladimír Čunát
59b548069c
Merge #24574: ntp: security 4.2.8p9 -> 4.2.8p10 2017-04-03 18:55:28 +02:00
Thomas Tuegel
5cf9cbdc17
isyncUnstable: 20161218 -> 20170329 2017-04-03 07:23:09 -05:00
Thomas Tuegel
5f8d6a56a8
ua: init at 2017-02-24 2017-04-03 07:22:48 -05:00
Jörg Thalheim
500818b997
ntp: 4.2.8p9 -> 4.2.8p10; fix 10 medium/4 low CVEs
http://nwtime.org/network-time-foundation-publishes-ntp-4-2-8-p10/
2017-04-02 23:06:43 +02:00
Ambroz Bizjak
35e0eea053 ntpd: Allow additional syscalls in seccomp filter.
Fixes issue #21136.

The problem is that the seccomp system call filter configured by ntpd did not
include some system calls that were apparently needed. For example the
program hanged in getpid just after the filter was installed:

prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)  = 0
seccomp(SECCOMP_SET_MODE_STRICT, 1, NULL) = -1 EINVAL (Invalid argument)
seccomp(SECCOMP_SET_MODE_FILTER, 0, {len=41, filter=0x5620d7f0bd90}) = 0
getpid()                                = ?

I do not know exactly why this is a problem on NixOS only, perhaps we have getpid
caching disabled.

The fcntl and setsockopt system calls also had to be added.
2017-04-02 21:44:06 +02:00
ndowens
498a2f5e61 speedtest-cli: 1.0.2 -> 1.0.3 (#24535) 2017-04-01 14:45:58 +01:00
Daiderd Jordan
607a21b7c0 Merge pull request #24380 from fuzzy-id/haproxy-overworked4
haproxy: PCRE and LUA support via configurable options
2017-03-31 08:46:14 +02:00
Tim Steinbach
f48cd9503d Merge pull request #24260 from mbrgm/upgrade-keepalived
keepalived: 1.3.4 -> 1.3.5
2017-03-30 22:36:46 -04:00
pmahoney
ae696ba3d6 wrk: use packaged openssl, luajit (#24481)
This has the side effect of now building on darwin. Previously, the
vendored luajit would fail to build.
2017-03-30 23:09:42 +01:00
Robin Gloster
a79891f6b2
sitecopy: remove 2017-03-30 12:06:09 +02:00
Rob Vermaas
35dfdc9277
dd-agent: fix by adding uptime as dependency.
(cherry picked from commit f79be2cfa321617314aa253a8a6341a2f0ab7816)
2017-03-29 14:56:01 +00:00
Thomas Bach
ea80cd1f11 haproxy: added fuzzy-id to the list of maintainers 2017-03-29 12:27:50 +02:00
Thomas Bach
45788aeebe haproxy: Provide LUA and PCRE support as configurable options
Both are enabled by default. Except for LUA on Darwin where
compilation fails. (See #23901.)
2017-03-29 12:23:05 +02:00
Bas van Dijk
1d52c677be ssmtp: use the authPassFile option instead of authPass
This gives users the option of storing the authPass outside the
world-readable Nix store.
2017-03-29 00:34:23 +02:00
Eelco Dolstra
6d1049fab5
minio-client: 20160821 -> 20170206 2017-03-28 20:04:53 +02:00
Vladimír Čunát
96d41e393d
treewide: purge maintainers.urkud
It's sad, but he's been inactive for the last five years.
Keeping such people in meta.maintainers is counter-productive.
2017-03-27 19:52:29 +02:00
Thomas Bach
e58e681d9f haproxy: refactor
`preConfigure` line became too long to edit comfortably. Split up
flags into ones necessary during both build and install phase and
install phase only. Makefile defines a target for OS X/Darwin which
automatically sets the `KQUEUE` flag.
2017-03-27 09:54:31 +02:00
Dan Peebles
c46600d47b iperf2: 2.0.5 -> 2.0.9
This also fixes the build on clang 4
2017-03-26 21:41:22 -04:00
Patrick Mahoney
09a5007797 skarnet.org packages: fix darwin build
The configure scripts have been changed so that `--build` is now the
way to specify (non-cross compiling) build target, which is necessary
on darwin for binary compatibility across darwin versions.
2017-03-26 17:30:41 -05:00
Patrick Mahoney
72a0d65d3d update skarnet.org packages
execline:          2.1.4.5 -> 2.2.0.0
s6-dns:            2.0.0.7 -> 2.1.0.0
s6-linux-utils:    2.0.2.3 -> 2.2.0.0
s6-networking:     2.1.0.4 -> 2.2.1.0
s6-portable-utils: 2.1.0.0 -> 2.1.0.0 (no version change)
s6-rc:             0.0.2.1 -> 0.1.0.0
s6:                2.2.4.3 -> 2.4.0.0
skalibs:           2.3.9.0 -> 2.4.0.1

Also use new --enable-absolute-paths configure arg to correctly set
paths to runtime executables to point within the nix store rather than
relying on PATH resolution.
2017-03-26 14:19:44 -05:00
Edward Tjörnhammar
dc514b246e
i2pd: 2.11.0 -> 2.12.0 2017-03-25 21:42:32 +01:00
Vladimír Čunát
455ce3528c
Merge branch 'staging' 2017-03-24 21:07:55 +01:00
Tobias Geerinckx-Rice
ef69326e99 Merge pull request #23360 from ndowens/pcapc
pcapc: 2015-03.06 -> 1.0.0
2017-03-24 18:44:53 +00:00
Marius Bergmann
427d33bfaa keepalived: 1.3.4 -> 1.3.5 2017-03-24 00:28:43 +01:00
Eelco Dolstra
f0875982d1 Merge pull request #24203 from layus/nix-ssl-cert-file
git, curl, openssl: Refactor $NIX_SSL_CERT_FILE handling
2017-03-22 13:40:57 +01:00
Guillaume Maudoux
8ecb94bb97 curl: Use default trust store of TLS backend
Having curl fall back to openssl's CA means that we need not patch curl
to respect NIX_SSL_CERT_FILE. It will work in all the cases.

This reverts commit fb4c43dd8a "curl: Use CA bundle in nix default profile by default"
If we want to reintroduce that feature, this needs to go inside openssl
2017-03-22 11:54:20 +01:00
Guillaume Maudoux
525a663174 curl, git: Fix curl default CA, let git use it
Improve patching of curl to use NIX_SSL_CERT_FILE as default CA
Remove patches from git, as git uses curl and passes its environment
variables to curl.
2017-03-22 11:22:53 +01:00
Frederik Rietdijk
94eb74eaad Merge remote-tracking branch 'upstream/master' into HEAD 2017-03-21 13:04:37 +01:00
Domen Kožar
c3c9412c7d
git, openssl, curl: Respect $NIX_SSL_CERT_FILE
Slightly modified version of 942dbf89c6
2017-03-20 14:11:20 +01:00
Sander van der Burg
20194e2696 dd-agent: bind to pymongo 2.9.1 to fix the MongoDB monitoring 2017-03-20 10:42:43 +01:00
Vladimír Čunát
742b120ddc
Merge branch 'master' into staging
Nontrivial rebuilds from master, again :-/
2017-03-18 11:00:31 +01:00
Lluís Batlle i Rossell
f77ae4e726 amule: 2.3.1 -> 2.3.2 2017-03-18 09:36:08 +01:00
Joachim Fasting
0526467494
dnscrypt-proxy: enable additional plugins
Adding ldns builds additional plugins for rewriting DNS queries,
such as blocking and forwarding.

For example, to use a custom domain blocklist, you can do
```nix
let
  myBlockListFile = writeText "blocked-domains" ''
    *.example.com
  '';
in
{
  services.dnscrypt-proxy.extraArgs = [
    "-X libdcplugin_example_ldns_blocking.so,--domains=${myBlockListFile}"
  ];
}
```
2017-03-16 16:15:33 +01:00
Vladimír Čunát
e99bc64552
Merge branch 'master' into staging
More larger rebuilds from master, unfortunately.
2017-03-15 19:09:56 +01:00
Tuomas Tynkkynen
aba0b45b86 Merge remote-tracking branch 'upstream/master' into staging
Conflicts:
      pkgs/development/libraries/qt-5/5.7/qtbase/default.nix
2017-03-14 00:49:22 +02:00
Thomas Bach
36bb283941 haproxy: 1.7.2 -> 1.7.3 2017-03-13 23:17:03 +01:00
Benno Fünfstück
c8c4902ee1 Merge pull request #23828 from ndowens/gupnp-tools
gupnp-tools: 0.8.8 -> 0.8.13
2017-03-13 14:58:02 +01:00
Orivej Desh
c272796806 mtr: 0.86 -> 0.87 2017-03-13 04:31:00 +00:00
ndowens
912b956b07 gupnp-tools: 0.8.8 -> 0.8.13 2017-03-12 20:55:07 -05:00
ndowens
c52b7510b5 olsrd: 0.6.6.1 -> 0.9.6.1 2017-03-12 08:38:24 +01:00
Franz Pletz
39e8db7849
wget: add patch for CVE-2017-6508 2017-03-11 08:18:57 +01:00
Joachim Fasting
8db26dbee4
packetdrill: minor packaging tweaks
- native build inputs
- allow building with hardening
2017-03-10 23:35:29 +01:00
David Johnson
2151e3b8eb
packetdrill: init at 1.0
Closes https://github.com/NixOS/nixpkgs/pull/23679
2017-03-10 23:35:26 +01:00
Daiderd Jordan
8b7f5e8db2 Merge pull request #23578 from nicknovitski/dnsmasq-plist
dnsmasq: install launchd plist on darwin
2017-03-10 22:01:12 +01:00
Daiderd Jordan
f0f77af897 Merge pull request #23567 from LnL7/darwin-pdnsd
pdnsd: fix darwin build
2017-03-10 21:59:38 +01:00
Shea Levy
fb4c43dd8a curl: Use CA bundle in nix default profile by default 2017-03-10 14:56:22 -05:00
Susan Potter
35f9f63a39 dd-agent: 5.5.2 -> 5.11.2 2017-03-10 17:35:27 +01:00
Susan Potter
17a8d19032 dd-agent: fix Python missing dependencies and versions 2017-03-10 17:35:27 +01:00
Nikolay Amiantov
7dcc40b674 networkmanagerapplet: add dconf and glib_networking
Fixes #23700.
2017-03-10 16:14:34 +03:00
ndowens
a69d92c4df gvpe: 2.25 -> 3.0 2017-03-09 03:12:26 +02:00
Nick Novitski
44cf3c44b0 dnsmasq: install launchd plist on darwin 2017-03-09 11:30:50 +13:00
Daiderd Jordan
f9f31ff83e
pdnsd: fix darwin build 2017-03-08 00:25:15 +01:00
Vladimír Čunát
09c7601c20
Merge #23583: inetutils: fix whois for canadian domains 2017-03-07 21:31:13 +01:00
Neil Mayhew
ba8b6b4a7a
inetutils: Add patch for Canadian TLD server
Cherry-picked from upstream (inetutils-1_9_4-31-g73e2811).

Could be a long time before a new inetutils release is made.
vcunat amended the patch to apply.
2017-03-07 21:30:03 +01:00
Daiderd Jordan
b05dc8d4bf Merge pull request #23608 from pmahoney/haproxy-darwin
haproxy: build on darwin
2017-03-07 21:03:29 +01:00
Patrick Mahoney
ce03c08567 haproxy: build on darwin 2017-03-07 11:50:45 -06:00
Neil Mayhew
c78251f17c inetutils: Add perl to buildInputs
`whois' uses perl for various things during its build. Without it,
whois fails to build .
2017-03-06 21:05:42 -07:00
Renaud
9256383bc2 lftp: 4.7.3 -> 4.7.6
Package update : minor updates and fixes 
See http://lftp.tech/news.html
2017-03-06 22:06:43 +01:00
Peter Hoeg
8ac336b539 mu: run tests 2017-03-06 21:46:25 +08:00
Jörg Thalheim
af27d6efa7 Merge pull request #23370 from ndowens/horst
horst: git-2016-03-15 -> 5.0
2017-03-06 14:16:56 +01:00
ndowens
2ad7e759c4
driftnet: 0.7 -> 1.1.5 2017-03-06 07:58:38 -05:00
ndowens
3686e1bbc8
ocproxy: 1.50 -> 1.60 2017-03-06 07:50:50 -05:00
Joachim F
64138b3334 Merge pull request #23359 from ndowens/pptp
pptp: 1.8.0 -> 1.9.0
2017-03-05 21:55:04 +01:00
Joachim F
bf73afe9cb Merge pull request #23355 from ndowens/sstp
sstp: 1.0.10 -> 1.0.11
2017-03-05 21:54:33 +01:00
ndowens
b478df1349 openresolv: 3.8.1 -> 3.9.0 (#23362) 2017-03-05 21:49:48 +01:00
Michael Raskin
a7645c293f getmail: 4.53.0 -> 4.54.0 2017-03-05 00:48:29 +01:00
Joachim Fasting
7b914b2986
mu: leave mug off by default
This unbreaks the package after marking legacy webkit as
insecure.  Per upstream, mug is a toy.
2017-03-04 19:07:02 +01:00
rnhmjoj
6c08b145ab mitmproxy: 1.0.2 -> 2.0.6 2017-03-04 12:58:29 +02:00
Joachim Schiele
d6b0c87bda tlspool: init at 20170123 (#23437) 2017-03-03 17:38:33 +01:00
Pradeep Chhetri
6c99a31c89 httplab: init at 0.1.0 2017-03-03 17:35:31 +01:00
Jörg Thalheim
53b059ade5
miniupnpc: switch to old version by default
miniupnpc 2.0.20161216 change its api
2017-03-02 19:30:37 +01:00
Renaud
b0ae3c14fb httping 2.5: fetch over https + license 2017-03-02 19:20:26 +01:00
Jörg Thalheim
4103fa5257 Merge pull request #23371 from ndowens/hans
hans: 0.4.4 -> 1.0
2017-03-02 11:43:52 +01:00
Domen Kožar
4064889e96 Merge pull request #23377 from ndowens/connect
connect: 1.104 -> 1.105
2017-03-02 11:36:04 +01:00
Jörg Thalheim
0e07b7b6be Merge pull request #23369 from ndowens/httping
httping: 2.4 -> 2.5
2017-03-02 11:27:11 +01:00