Commit Graph
131578 Commits
Author SHA1 Message Date
Andreas Rammhold 761ed40c5c miniupnpc_2: 2.0.20170509 -> 2.0.20171212
This potentially addresses CVE-2017-1000494.

Changes since last version bump:

  2017/12/11:
    Fix buffer over run in minixml.c
    Fix uninitialized variable access in upnpreplyparse.c
2018-01-15 17:55:00 +01:00
Andreas Rammhold addf1d5da3 miniupnpd: 2.0 -> 2.0.20171212 (fixes CVE-2017-1000494)
changelog since the last version bump:

  2017/12/12:
    Fix a few buffer overrun in SSDP and SOAP parsing

  2017/11/02:
    PCP : reset epoch after address change

  2017/05/26:
    merge https://github.com/miniupnp/miniupnp/tree/randomize_url branch

  2017/05/24:
    get SSDP packet receiving interface index and use it to check if the
      packet is from a LAN

  2017/03/13:
    default to client address for AddPortMapping when <NewInternalClient>
      is empty
    pass ext_if_name to add_pinhole()

  2016/12/23:
    Fix UDA-1.2.10 Man header empty or invalid

  2016/12/16:
    Do not try to open IPv6 sockets once it is disabled

  2016/12/01:
    Fix "AddPinhole Twice" test

  2016/11/11:
    fixes build for Solaris/SunOS

  2016/07/23:
    fixes build error on DragonFly BSD
2018-01-15 17:51:19 +01:00
Jörg Thalheim 5d8b359db7 Merge pull request #33901 from sifmelcara/fix/rstudio
rstudio: 1.1.383 -> 1.1.414
2018-01-15 15:33:52 +00:00
mingchuan fb2a43f8ad rstudio: 1.1.383 -> 1.1.414 2018-01-15 22:12:55 +08:00
Jörg Thalheim 1cfdc98410 Merge pull request #33896 from guibou/guibou_bump_ispc
ispc: 20170807 -> 1.9.2
2018-01-15 14:00:31 +00:00
Florian Klink 994e5ddd0c apache-directory-studio: add missing desktop item (#33893)
* apache-directory-studio: add missing desktop item

* apache-directory-studio: use install command to copy icons
2018-01-15 13:53:49 +00:00
Jörg Thalheim 4c63cc8c4b Merge pull request #33895 from dywedir/tokei
tokei: 6.1.2 -> 7.0.0
2018-01-15 13:49:17 +00:00
Jörg Thalheim 272ecfccb9 Merge pull request #33899 from antonxy/lightworks2
Lightworks: use old portaudio 2014
2018-01-15 13:32:50 +00:00
adisbladis 9c6e5b37bc Merge pull request #33883 from ashgillman/add-dcm2niix
dcm2niix: init at 1.0.20170130
2018-01-15 21:27:37 +08:00
Piotr Bogdan 4340ee75fe yajl: small clean up
- ruby dependency is no longer needed
- cmake belongs in nativeBuildInputs
2018-01-15 13:01:59 +00:00
Jan Tojnar 41d252d7a4 nixos/nginx: allow using existing ACME certificate
When a domain has a lot of subdomains, it is quite easy to hit the rate limit:

https://letsencrypt.org/docs/rate-limits/

Instead you can define the certificate manually in `security.acme.certs` and list the subdomains in the `extraDomains` option.
2018-01-15 13:48:45 +01:00
Michael Raskin ffb383eca0 Merge pull request #33652 from thefloweringash/libvncserver-deps
libvncserver: reduce dependencies; only use systemd on linux
2018-01-15 12:32:31 +00:00
Anton Schirg e0af7de6de lightworks: use portaudio 2014
There was an ABI change in portaudio 2016 which caused lightworks to
fail to start
2018-01-15 13:21:01 +01:00
Anton Schirg be776435ce portaudio: add old 2014 version
Needed e.g. for lightworks package as there was a breaking ABI change
between portaudio 2014 and 2016
2018-01-15 13:20:34 +01:00
Guillaume Bouchard 156b8029f2 ispc: 20170807 -> 1.9.2
Version bump, fixes #29979
2018-01-15 12:25:03 +01:00
zimbatm 1775b036bb Revert "awscli: move to pythonPackages"
This reverts commit 29b8e5fb6f.
2018-01-15 10:49:07 +00:00
zimbatm fad6250276 Revert "aws_shell: move to pythonPackages"
This reverts commit ffd35a7849.
2018-01-15 10:47:52 +00:00
dywedir c6c3344cc4 tokei: 6.1.2 -> 7.0.0 2018-01-15 12:33:15 +02:00
Tuomas Tynkkynen 6e84522610 linux_testing: 4.15-rc7 -> 4.15-rc8 2018-01-15 12:14:39 +02:00
Jörg Thalheim 092aaf22f6 Merge pull request #33888 from kamilchm/ponyc
ponyc: 0.21.2 -> 0.21.3
2018-01-15 09:28:04 +00:00
adisbladis 6e8290ec31 solc: 0.4.17 -> 0.4.19 2018-01-15 17:11:33 +08:00
adisbladis edd712e521 Merge pull request #33857 from adisbladis/kde-frameworks-5_42
kde-frameworks: 5.41 -> 5.42
2018-01-15 17:10:10 +08:00
Andrew Childs 48bf2c3e81 libvncserver: reduce dependencies; only use systemd on linux
Permits building on macOS.
2018-01-15 17:25:59 +09:00
Bjørn Forsman b13230ce24 wildmidi: 0.3.9 -> 0.4.2
0.4.2 fixes the following CVEs:
CVE-2017-11661
CVE-2017-11662
CVE-2017-11663
CVE-2017-11664

Fixes #33877.
2018-01-15 08:53:43 +01:00
Leon Schuermann e45a06ebd1 openvpn: add option to store credentials 2018-01-15 14:34:58 +07:00
Kamil Chmielewski 282934ca8e ponyc: 0.21.2 -> 0.21.3
https://github.com/ponylang/ponyc/issues/2478
2018-01-15 08:15:01 +01:00
Ashley Gillman 245a67df8b dcm2niix: cmake is native, style 2018-01-15 16:53:28 +10:00
Ashley Gillman 271d4a7ca0 dcm2niix: init at 1.0.20170130 2018-01-15 16:45:03 +10:00
Vincent Laporte 550136f516 ocamlPackages.asn1-combinators: 0.1.3 -> 0.2.0 (#33566)
* ocamlPackages.asn1-combinators: 0.1.3 -> 0.2.0

* ocamlPackages.x509: 0.5.3 -> 0.6.0

* ocamlPackages.x509: 0.6.0 -> 0.6.1

* ocamlPackages.tls: 0.7.1 -> 0.9.0

* jackline: fix build with ocaml-tls ≥ 0.9.0
2018-01-15 05:01:50 +01:00
adisbladis 9bbaa2a1de Merge pull request #33870 from dtzWill/update/wireshark-2.4.4
wireshark: 2.4.3 -> 2.4.4
2018-01-15 10:05:57 +08:00
adisbladis ebc090c125 Merge pull request #33867 from dtzWill/update/mendeley-1.17.13-and-update-checker
mendeley: add update script, use it, add myself as maintainer
2018-01-15 09:49:52 +08:00
adisbladis 9af3b9d7b2 Merge pull request #33868 from dtzWill/snowman-deprecate-qt4
snowman: deprecate qt4 variant
2018-01-15 09:37:35 +08:00
adisbladis 554104e6b9 Merge pull request #33864 from adisbladis/mendeley-qt59
mendeley: Re-link with qt 5.9
2018-01-15 09:30:52 +08:00
Andreas Rammhold 87947ca8de Merge pull request #33873 from andir/transmission-dns-rebinding-rce
transmission: fix RCE via dns rebinding attach
2018-01-14 23:53:59 +00:00
Andreas Rammhold 50f48fce09 transmission: fix RCE via dns rebinding attach
For further details see [1] & [2].

[1] https://github.com/transmission/transmission/pull/468
[2] http://www.openwall.com/lists/oss-security/2018/01/12/1
2018-01-15 00:22:31 +01:00
Andreas Rammhold 890c8047ed Merge pull request #33869 from dotlambda/spectre-meltdown-checker
spectre-meltdown-checker: 0.29 -> 0.31
2018-01-14 22:22:05 +00:00
Tuomas Tynkkynen 0ed9de2546 gnuplot: Use quoting syntax that's compatible with old and new Nix versions
There is probably a way to have it work with substituteInPlace, but
using sed is a cheap solution to not having to figure out how to escape
"'$'" in Nix that works in both versions.

Issue #31179.
Fixes #33833.
2018-01-15 00:03:38 +02:00
Robert Schütz 898ac01eb8 spectre-meltdown-checker: 0.29 -> 0.31 2018-01-14 22:58:04 +01:00
Will Dietz fecfd3b7ae wireshark: 2.4.3 -> 2.4.4
https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html
2018-01-14 15:43:42 -06:00
Will Dietz 17453b2310 snowman: Drop qt4 variant
cc #33248
2018-01-14 14:56:17 -06:00
Vladimír Čunát 67e8392383 Merge #33057: stdenv meta checks: make them lazy
Closes #22277 - it's superseded;  I have some WIP on evaluation
performance, but best do that in a separate PR/thread.
2018-01-14 21:41:31 +01:00
Will Dietz 0e4fd35147 mendeley: 1.17.12 -> 1.17.13 2018-01-14 14:37:43 -06:00
Will Dietz 332389611a mendeley: Add update-checker script, add myself as maintainer
Doesn't actually edit the file,
but reports when an update is available
and provides useful information.
2018-01-14 14:37:43 -06:00
Dan Peebles 1a054480d3 mono54: init
Still trying to figure out how msbuild should fit into the picture...
2018-01-14 15:36:00 -05:00
Vladimír Čunát 799b941a2b release notes: mention removal of lib.addPassthru 2018-01-14 21:34:55 +01:00
Vladimír Čunát 4de01b6723 rebuild-amount.sh: add --print option (PR #33693)
to allow additionally listing all the rebuilt packages.
2018-01-14 21:12:29 +01:00
Jan Malakhovski 41df994001 lib: deprecate addPassthru 2018-01-14 19:54:47 +00:00
Jesper Geertsen Jonsson 8c0558dbb2 sg/newgrp should always be available, not chfn
sg and newgrp only changes the current user session and should be
available to users even if the "users.mutableUsers" option is set.
These are common, useful commands.

chfn does modify the /etc/passwd GECOS field which is also controlled
by the option "users.users.<name?>.description", so it's less
appropriate to make it available when "users.mutableUsers" is set.

However, because CHFN_RESTRICT in login.defs is never set in current
NixOS the chfn functionality is never available to users anyway and
may as well have its SUID disabled, as only root is able to use it.
This is recommended in the chfn man page in this case.
2018-01-14 20:54:40 +01:00
Jan Malakhovski 85cd22cf7d treewide: replace addPassthru 2018-01-14 19:53:57 +00:00
adisbladis a904ffa756 Merge pull request #33865 from romildo/upd.uget
uget: 2.0.10 -> 2.2.0
2018-01-15 03:52:00 +08:00