6908e75441
curl: fixes installation of 7.15
...
It was trying to install /etc/ssl/cert/ca-certificates.pem
See https://hydra.nixos.org/build/32167398/nixlog/1
2016-02-21 23:57:20 +00:00
e0fa05f662
telnet: turn off format hardening
2016-02-21 22:53:24 +00:00
5d8c4443f1
ddclient: add meta.platforms
2016-02-21 20:24:20 +01:00
99087d9216
trickle: turn off format hardening
2016-02-21 09:44:40 +00:00
29711967a2
openssh: update gssapi patch to match openssh version
...
Should fix the openssh_with_kerberos build.
Fixes #13140
(cherry picked from commit 3dae6c7e1e1eb64b3ceb2796eea1ad0ae1596688)
2016-02-20 22:22:01 -08:00
4036e9ba8c
Merge branch 'up' into hardened-stdenv
2016-02-20 22:27:33 +00:00
7d22996df0
Merge pull request #13146 from rycee/bump/ddclient
...
ddclient: 3.8.2 -> 3.8.3
2016-02-21 00:40:51 +03:00
113106df1b
ddclient: 3.8.2 -> 3.8.3
...
Also remove patch for issue that has been fixed upstream, add simple
meta section, and minor other cleanups.
2016-02-20 18:30:36 +01:00
cbb06df02f
Merge pull request #13142 from zimbatm/zerotierone-1.1.4
...
Zerotierone 1.1.4
2016-02-20 17:09:59 +03:00
99910d97c2
zerotierone: 1.1.0 -> 1.1.4
2016-02-19 23:01:30 +00:00
bc21db3692
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-19 21:16:14 +00:00
6f466c9dad
shadowsocks-libev: init at 2.4.5
2016-02-19 20:58:12 +08:00
4d06bf70f4
buildPythonApplication: use new function for Python applications
2016-02-19 13:16:41 +01:00
1ab14aad7a
glibc: Drop hurd support
...
This hasn't been maintained since 2012.
Also, renamed glibc's kernelHeaders argument to linuxHeaders.
2016-02-18 21:11:15 +01:00
e9520e81b3
Merge branch 'master' into staging
2016-02-17 10:06:31 +01:00
ee994dfae6
bootstrap tools: have curl without http2 support
...
I assume there's not much use for it during bootstrapping.
This fixes them as well, as curl was compiled against libnghttp2 but the
lib wasn't copied to the bootstrap tools.
2016-02-17 10:04:32 +01:00
ef4ea6d673
Merge pull request #12901 from sheenobu/pkgs/new/sipsak
...
sipsak - init at 4.1.2.1
2016-02-17 02:19:36 +03:00
8e0bc53f94
i2p: 0.9.23 -> 0.9.24
2016-02-16 21:13:51 +01:00
1c8a21dfad
Merge branch 'pdnsd-service' of https://github.com/nfjinjing/nixpkgs
...
Closes #12932
2016-02-16 20:35:01 +03:00
32eeb8658f
babeld: 1.6.1 -> 1.7.1
2016-02-16 05:12:56 +01:00
932d2cbd2c
Merge pull request #13000 from mayflower/feat/unbound-dnssec
...
unbound: 1.5.3 -> 1.5.7, hardening, DNSSEC support & cleanup
2016-02-16 02:13:35 +01:00
443072799d
tahoelafs: 1.10.0 -> 1.10.2 and refractor expression, fixes #12004
2016-02-15 21:58:23 +01:00
41698c9efa
Merge branch 'master' into hardened-stdenv
2016-02-15 20:05:29 +01:00
745a11fad5
connman: 1.30 -> 1.31
2016-02-15 08:34:15 +02:00
f415c07703
unbound: enable compilation with PIE & relro/now
2016-02-15 04:29:25 +01:00
7bf80c9875
unbound: 1.5.3 -> 1.5.7
2016-02-15 04:29:03 +01:00
54e82445cb
miniupnpd: 1.9.20160209 -> 1.9.20160212
...
Changes:
- return error 729 - ConflictWithOtherMechanisms if IGD v2 is enabled.
- add iptc_init() check in iptcrdr.c/init_redirect()
- add update_portmapping() / update_portmapping_desc_timestamp() functions
- use Linux libuuid uuid_generate() / BSD uuid_create() API
Changes: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-02-15 03:33:44 +01:00
4715783d2e
getmail: 4.48.0 -> 4.49.0
2016-02-14 21:17:07 +01:00
7e01cafa4b
openfortivpn: turn off format hardening and use autoreconfHook
2016-02-12 13:46:50 +00:00
663ec96a9a
netboot: turn off format hardening
2016-02-12 13:07:20 +00:00
1d6f590844
pdnsd: enable IPv6 by default
2016-02-12 19:32:29 +08:00
5bb195bda2
i2pd: 2.3.0 -> 2.4.0
2016-02-12 07:00:37 +01:00
7e644980cc
mailutils: turn off format hardening
2016-02-12 03:58:56 +00:00
162982544a
dhcpdump: turn off fortify hardening
2016-02-12 00:40:58 +00:00
be0abb32f6
miniupnpd: 1.9.20160113 -> 1.9.20160209
...
Changes: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-02-11 21:37:41 +01:00
e2eca0c24c
Fix misspelled meta.maintainers attributes
2016-02-10 23:27:34 +00:00
ff58b07fc8
cmst: 2014.12.05 -> 2016.01.28
2016-02-10 23:27:30 +00:00
aea262f654
Fix misspelled meta.maintainers attributes
2016-02-10 14:59:50 +01:00
06ce6ba757
Merge pull request #12862 from ericsagnes/pkg/cmst
...
cmst: 2014.12.05 -> 2016.01.28
2016-02-10 01:17:05 +01:00
8993b65225
sipsak - init at 4.1.2.1
2016-02-09 16:48:08 -05:00
0c5b86b607
eggdrop: use git rev to fix compiling with gcc5
2016-02-07 23:07:12 +00:00
65e6aa4a31
uwimap: turn off format hardening
2016-02-07 22:28:15 +00:00
9492e06315
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-07 14:44:27 +00:00
a115bff08c
Merge branch 'master' into staging
2016-02-07 13:52:42 +01:00
98ffc61e2f
curl: Change default src url ( close #12851 )
...
- Changes the default src url away from http://curl.haxx.se
to an official mirror because haxx.se resolves to https and
bootstrap curl doesn't have https support.
Please see https://github.com/NixOS/nixpkgs/issues/12816
for more info.
2016-02-07 13:39:45 +01:00
9229e9c656
Merge remote-tracking branch 'upstream/master' into hardened-stdenv
2016-02-07 11:17:57 +00:00
20bb296be6
cmst: 2014.12.05 -> 2016.01.28
2016-02-07 18:51:28 +09:00
9f358f809d
Configure a default trust store for openssl
2016-02-03 12:42:01 +01:00
0876a44169
curl: 7.45 -> 7.47 and enable HTTP/2 ( close #12723 )
...
This fixes CVE-2016-0755:
https://curl.haxx.se/docs/adv_20160127A.html
vcunat removed *propagation* of pkgconfig and perl.
2016-02-03 10:50:24 +01:00
a5d5736692
Typo
2016-02-02 19:59:27 +01:00
a7d2947e33
Merge pull request #12708 from jerith666/email-init
...
email: init at d9fd259f
2016-02-01 23:50:55 +01:00
0b3becb269
Merge pull request #12701 from mayflower/builder-def-cleanup
...
builderDefsPackage cleanup
2016-02-01 21:09:34 +00:00
a7b7ac8bfb
openssh: Enable DSA host/client keys
...
This applies a patch from Fedora to make HostKeyAlgorithms do the
right thing, fixing the issue described in
401782cb67
2016-02-01 16:31:43 +01:00
a7f09e9773
openssh: 6.9p1 -> 7.1p2
2016-02-01 16:31:43 +01:00
23d1aa8516
email: init at d9fd259f
2016-01-31 17:36:26 -05:00
bca9042663
mu: 0.9.13 -> 0.9.16
2016-01-31 11:19:35 +01:00
ea9c2fad54
altermime: use mkDerivation
2016-01-30 20:31:05 +00:00
73f4c2bdf8
Remove lsh, broken & unmaintained
2016-01-30 16:36:57 +00:00
aacc390769
ncat: Remove old package, available in nmap
2016-01-30 16:36:57 +00:00
f6d3b7a2ae
switch hardening flags
2016-01-30 16:36:57 +00:00
954e9903ad
Use a hardened stdenv by default
2016-01-30 16:36:57 +00:00
627f7bf6a5
privoxy: 3.0.22 - > 3.0.24
...
- Security fixes
- Bug fixes
- General improvements
- Action file improvements
- Documentation improvements
Please see http://www.privoxy.org/announce.txt
for more detail.
2016-01-30 14:21:20 +00:00
ac33b4724a
More version attribute tidying where maintainers |= nckx
2016-01-25 20:08:34 +01:00
9fb8020e4e
Add version attribute where maintainers |= nckx
...
This will probably be mandatory soon, and is a step in the right
direction. Removes the deprecated meta.version, and move some meta
sections to the end of the file where I should have put them in
the first place.
2016-01-25 17:35:21 +01:00
3622038d20
easyrsa2: init at 2.2.0
2016-01-25 12:14:01 +03:00
32d40f0f98
Remove no longer (or never) referenced patches
...
55 files changed, 6041 deletions. Tested with `nix-build -A tarball`.
2016-01-24 02:02:21 +01:00
0957359568
Merge branch 'staging'
2016-01-22 13:48:35 +01:00
8da914cad4
minissdpd: 1.5 -> 1.5.20160119
2016-01-20 02:00:15 +01:00
53b389327e
refactor to use autoreconfHook where possible
...
Close #12446 .
2016-01-18 10:45:31 +01:00
620c147cce
Merge branch 'master' into staging
2016-01-18 09:48:49 +01:00
180655290d
urlwatch: 1.18 -> 2.0
2016-01-17 22:00:39 +01:00
2077895251
aria2: 1.19.2 -> 1.19.3
2016-01-16 15:34:29 +01:00
5b20713041
inadyn: update to 1.99.15
...
It fixes a big bug about IP not getting updated.
https://github.com/troglobit/inadyn/issues/107
2016-01-15 16:14:40 +01:00
2d0893088f
Merge branch 'master' into staging
2016-01-15 13:43:57 +01:00
a25fc6e54d
Merge pull request #12391 from rycee/bump/nethogs
...
nethogs: 0.8.1-git -> 0.8.1
2016-01-15 12:20:25 +01:00
d8fa7f7b06
miniupnpd 1.9.20151212 -> 1.9.20160113
...
Changes: https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/Changelog.txt
2016-01-14 23:55:47 +01:00
b4f03263ec
nethogs: 0.8.1-git -> 0.8.1
...
Also use fetchFromGitHub, use make flags instead of patching Makefile,
and add myself as maintainer since the package is unmaintained.
2016-01-14 20:49:20 +01:00
2d65772950
openssh: Disable roaming (security fix)
...
Fixes CVE-2016-0777 and CVE-0216-0778.
Closes #12385 .
2016-01-14 16:40:27 +01:00
f290a6d026
aircrack-ng: fix description typo; co-maintain
2016-01-14 03:09:51 +01:00
db658a6eb5
aircrack-ng: 1.2-beta3 -> 1.2-rc3
2016-01-14 03:09:51 +01:00
00b06e6d45
minissdpd: 1.4 -> 1.5
2016-01-13 19:16:14 +01:00
9888fbd8d2
gtk-gnutella: 1.0.1 -> 1.1.5
...
Still broken, though.
2016-01-13 03:30:56 +01:00
f85b5c4c07
ntop: remove dead package
...
Broken since 2013. Discontinued. Use ntopng.
2016-01-13 03:30:56 +01:00
3a6c354094
i2pd: 2.2.0 -> 2.3.0
2016-01-12 22:09:31 +01:00
4a9ad20a95
Revert "vde2: support static build"
...
This reverts commit fda6c0d3c7ee6ca494d2
2016-01-12 17:15:14 +03:00
fda6c0d3c7
vde2: support static build
2016-01-12 15:06:23 +03:00
c2b70e6147
easyrsa: 2.2.0 -> 3.0.0
2016-01-10 07:28:55 +03:00
6cd71e5c91
Merge pull request #12268 from sigma/version/stunnel
...
stunnel: 5.26 -> 5.29
2016-01-09 23:52:19 +03:00
d0e1ee6e55
axel: mark as buildable on darwin
2016-01-09 12:37:16 -06:00
a4c3b433ee
stunnel: 5.26 -> 5.29
2016-01-09 09:02:54 -08:00
e11004cdf3
zap: init at 2.4.3
2016-01-08 23:46:45 -05:00
af50b03f50
fuppes: remove obsolete broken package and service
2016-01-07 06:39:05 +00:00
67f4c2a779
openssh: Add gssapi patch used by other major distros
...
This patch is borrowed verbatim from Debian, where it is actively
maintained for each openssh update. It's also included in Fedora's
openssh package, in Arch linux as openssh-gssapi in the AUR, in MacOS
X, and presumably various other platforms and linux distros.
The main relevant parts of this patch:
- Adds several ssh_config options:
GSSAPIKeyExchange, GSSAPITrustDNS,
GSSAPIClientIdentity, GSSAPIServerIdentity
GSSAPIRenewalForcesRekey
- Optionally use an in-memory credentials cache api for security
My primary motivation for wanting the patch is the GSSAPIKeyExchange
and GSSAPITrustDNS features. My user ssh_config is shared across
several OSes, and it's a lot easier to manage if they all support the
same options.
2016-01-05 14:50:05 -08:00
24e0868763
isync: Add unstable variant.
2016-01-05 12:21:10 +01:00
b1acaffe67
Merge branch 'master' into staging
2016-01-05 10:28:58 +01:00
bb288f43af
pingtcp: install README.md
2016-01-04 21:13:46 +01:00
3a9c863150
pcapc: init at 2015-03-06
2016-01-04 21:13:05 +01:00
192fda79e0
Merge pull request #11832 from ktosiek/gupnp-tools-fixes
...
gupnp-tools: add required icons, rename from gupnptools
2016-01-04 17:16:41 +01:00
517d8c8846
pingtcp: init at 0.0.3
2016-01-04 16:09:46 +01:00
62d2a91b2b
gupnp-tools: add required icons, rename from gupnptools
2016-01-04 09:34:51 +01:00
zimbatm
Robin Gloster
Robert Helgesson
Benjamin Staffin
Arseniy Seroka
Jinjing Wang
Frederik Rietdijk
Eelco Dolstra
Vladimír Čunát
Herwig Hochleitner
Nikolay Amiantov
Franz Pletz
Rok Garbas
Alexander V. Nikolaev
Tobias Geerinckx-Rice
Michael Raskin
Edward Tjörnhammar
Eric Sagnes
Matej Cotman
Sheena Artrip
Tony White
Guillaume Maudoux
Luca Bruno
Domen Kožar
koral
Matt McHenry
Gabriel Ebner
tv
Lluís Batlle i Rossell
Allan Espinosa
Yann Hodique
Matthew O'Gorman
Moritz Ulrich
Pascal Wittmann
Tomasz Kontusz