Nathan Zadoks
d0b8080062
.github/PULL_REQUEST_TEMPLATE.md: use individual checkboxes for tested OSes
2016-03-16 09:46:05 +01:00
Nathan Zadoks
0360e410b7
bird module: run as user/group bird, not ircd
2016-03-07 02:02:58 +01:00
Nathan Zadoks
819dab0203
git-remote-hg: fix the derivation name
...
-v0.2 isn't parsed as a version by Nix, and makes it inconvenient to
install git-remote-hg through nix-env.
2016-03-03 14:51:31 +01:00
Nathan Zadoks
bf18a34f97
musl: pass the correct syslibdir
...
This fixes dynamic linking (the specfile contains the correct path, and
the dynamic loader is symlinked in place)
Fixes #8543
2016-03-03 14:46:44 +01:00
Nathan Zadoks
1904ef7f09
systemd: enable upstream systemd-binfmt.service
...
Since we don't restart sysinit.service in switch-to-configuration, this
additionally overrides systemd-binfmt.service to depend on
proc-sys-fs-binfmt_misc.automount, which is normally provided by
sysinit.service.
2016-03-02 21:00:47 +01:00
Nathan Zadoks
010271d47a
fish: fix hidden dependency on ${glibc}/bin/getent on Linux
2016-02-28 22:27:53 +01:00
Nathan Zadoks
da1f465b94
fish: fix hidden dependency on utillinux on Linux
2016-02-28 22:27:53 +01:00
Nathan Zadoks
2610986991
chromium/plugins: use jshon for extracting the Flash version from JSON
2016-02-19 12:31:08 +01:00
Nathan Zadoks
673bc7f32a
go: add 1.6 compiler and packages
2016-02-19 12:26:47 +01:00
Nathan Zadoks
fc48bf5a2c
glibc: fix cve-2015-7547.patch so it applies cleanly
2016-02-16 17:23:35 +01:00
Nathan Zadoks
b5aa8a4e64
glibc: patch CVE-2015-7547
...
The glibc DNS client side resolver is vulnerable to a stack-based buffer
overflow when the getaddrinfo() library function is used. Software using
this function may be exploited with attacker-controlled domain names,
attacker-controlled DNS servers, or through a man-in-the-middle attack.
https://googleonlinesecurity.blogspot.co.uk/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html
2016-02-16 16:15:07 +01:00
Nathan Zadoks
2d3940bd66
scrot: 0.8 -> 0.8-17 (Debian patches), fixes #12954
2016-02-15 15:34:04 +01:00
Nathan Zadoks
9e986c161b
wpa_supplicant module: add an option for accepting raw PSKs
...
fix #12892
2016-02-09 17:20:35 +01:00
Nathan Zadoks
c998447a13
buildRubyGem: pass the gem version through into the derivation name
2016-02-07 16:53:31 +01:00
Nathan Zadoks
b4da3bb88b
buildRubyGem: ensure gem versions don't get misparsed
...
Without this, every nix-env --upgrade replaces ruby with an
arbitrary gem, which makes Ruby unusuable from user environments.
2016-02-07 16:53:27 +01:00
Nathan Zadoks
1072e2bf4d
fish: don't use manpath(1) from PATH in functions/man.fish
...
Close #12762 .
2016-02-02 06:13:12 +01:00
Nathan Zadoks
23f5e3c90f
linux: patch CVE-2016-0728 ( close #12492 )
...
The PoC provided successfully escalates privileges from a local user to
root. The vulnerability affects any Linux Kernel version 3.8 and higher.
http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/
2016-01-20 09:31:53 +01:00
Nathan Zadoks
df82096af0
activation-script module: add environment.usrbinenv option
2016-01-19 23:29:48 +01:00
Nathan Zadoks
9c9a5353f9
docker: enable journald support
2016-01-14 16:01:19 +01:00
Nathan Zadoks
174221b744
go: 1.5.2 -> 1.5.3
...
This addresses CVE-2015-8618 (a vulnerability in math/big)
This issue can affect RSA computations in crypto/rsa, which is used by
crypto/tls. TLS servers on 32-bit systems could plausibly leak their RSA
private key due to this issue. Other protocol implementations that
create many RSA signatures could also be impacted in the same way.
https://groups.google.com/forum/#!topic/golang-dev/MEATuOi_ei4
2016-01-14 14:55:43 +01:00
Nathan Zadoks
8cb22c0a63
consul service: add package option
2016-01-08 01:44:28 +01:00
Nathan Zadoks
d396f1e99b
kmscon service: add extraOptions option
2016-01-02 22:21:54 +01:00
Nathan Zadoks
efd9562df0
fish: pass all of argv to command-not-found
2015-12-28 15:09:48 +01:00
Nathan Zadoks
254eebd8a0
command-not-found: add NIX_AUTO_RUN
2015-12-28 15:09:48 +01:00
Nathan Zadoks
0fda4ff715
tahoelafs: mock is required at runtime for some reason
2015-12-24 11:08:16 +01:00
Nathan Zadoks
77affc495f
despotify: fix missing hash ( close #11913 )
2015-12-23 23:09:26 +01:00
Nathan Zadoks
971d580a00
spotify: fix missing ffmpeg_0_10 dependency, fixes #11877
...
This makes local playback work.
2015-12-23 01:41:01 +01:00
Nathan Zadoks
d5e5a7dbc3
docker: 1.9.0 -> 1.9.1
2015-12-21 12:18:22 +01:00
Nathan Zadoks