Nathan Zadoks
fcc51d3256
linux: fix installTargets for AArch64
...
[dezgeg: note that we are currently using just 'Image' instead of
'Image.gz' as U-Boot doesn't support the latter yet. We might switch
once it does since the kernel images are quite big]
2017-01-25 00:01:54 +02:00
Nathan Zadoks
15b6374918
spidermonkey_17: add AArch64 support patch
2017-01-25 00:01:54 +02:00
Nathan Zadoks
2a82be9af1
libunwind: add AArch64 support patch
2017-01-25 00:01:53 +02:00
Nathan Zadoks
46991f88f7
gnu-efi: fix discarded const qualifier on aarch64
2017-01-25 00:01:53 +02:00
Nathan Zadoks
bfff3d6e23
busybox: Fix in-store invocation of busybox
...
This fixes the usage for stdenv bootstrap.
Additionally, dezgeg ported the patch from 1.25.1 to 1.26.1
2017-01-25 00:01:52 +02:00
Nathan Zadoks
e38fc7a736
boehm-gc: 7.2g -> 7.6.0
...
fix #20753
2016-12-15 01:16:31 -05:00
Nathan Zadoks
f91f098650
unifi: 5.0.6 -> 5.2.9
2016-10-07 16:03:20 -04:00
Nathan Zadoks
f503f648b3
virtualbox-image module: enable partition / filesystem growth
2016-08-30 16:48:05 -04:00
Nathan Zadoks
346c31000b
amazon-grow-partition module: rename to grow-partition
2016-08-30 16:48:04 -04:00
Nathan Zadoks
1de8e1b02e
amazon-grow-partition module: autodetect the root device
2016-08-30 16:48:04 -04:00
Nathan Zadoks
874e90fd66
protobuf: 3.0.0-beta-3.1 -> 3.0.0
2016-08-16 12:09:36 +02:00
Nathan Zadoks
b9284e445b
dockerTools: disable compression in tarsum.go
...
Previously, tarsum would compress the (discarded) tarball produced.
That's a waste of CPU, and a waste of time.
2016-07-02 02:22:36 -04:00
Nathan Zadoks
23e9e33975
dockerTools: format tarsum.go with gofmt
...
Nearly all Go code on this earth is formatted with gofmt, and it's
somewhat surprising to find a Go file that isn't formatted accordingly.
2016-07-02 02:22:36 -04:00
Nathan Zadoks
936c766fee
pythonPackages.pgspecial: 1.4.0 -> 1.5.0
2016-07-01 13:50:56 -04:00
Nathan Zadoks
8d3df9f6c4
git: 2.8.3 -> 2.9.0
2016-06-15 10:56:29 -04:00
Nathan Zadoks
ff45ea743f
qtpass: 1.1.1 -> 1.1.3
...
Closes #16202 .
2016-06-13 09:30:37 +02:00
Nathan Zadoks
99177c7377
docker: remove enableLxc parameter
...
LXC support was removed in Docker 1.4 (November 2015), and isn't coming
back.
2016-05-24 11:08:20 -04:00
Nathan Zadoks
f8b2c439d6
sqlite: pass --enable-readline when interactive mode is enabled
...
Fix #14378
2016-05-16 13:30:19 -04:00
Nathan Zadoks
bdafc6df04
openssl: 1.0.1s -> 1.0.1t, 1.0.2g -> 1.0.2h
...
CVE-2016-2108, high severity: Memory corruption in the ASN.1 encoder
CVE-2016-2107, high severity: Padding oracle in AES-NI CBC MAC check
CVE-2016-2105, low severity: EVP_EncodeUpdate overflow
CVE-2016-2106, low severity: EVP_EncryptUpdate overflow
CVE-2016-2109, low severity: ASN.1 BIO excessive memory allocation
CVE-2016-2176, low severity: EBCDIC overread
2016-05-03 10:54:15 -04:00
Nathan Zadoks
ddb4ea19bc
minecraft: use makeLibraryPath, so we don't use the dev outputs
2016-05-01 20:13:20 -04:00
Nathan Zadoks
ed6943ecbc
virtualgl: fix libturbojpeg library path
...
Without this, it tries to link to the dev output of libjpeg_turbo, which
breaks the build.
2016-04-24 13:25:57 -04:00
Nathan Zadoks
1e4ebcdf2d
redis: enable Lua scripting support
2016-04-21 14:50:11 -04:00
Nathan Zadoks
ebdd600732
docker: allow disabling btrfs and devicemapper
2016-04-17 00:41:17 +02:00
Nathan Zadoks
9eced61d2a
git: respect $SSL_CERT_FILE
...
This allows git to work on systems without
/etc/ssl/certs/ca-certificates.crt, such as OS X, instead of failing
with "error setting certificate verify locations".
2016-04-12 11:47:56 +02:00
Nathan Zadoks
77d79ef6a4
fsharp: 4.0.0.4 -> 4.0.1.1
2016-03-30 21:46:56 +02:00
Nathan Zadoks
d0b8080062
.github/PULL_REQUEST_TEMPLATE.md: use individual checkboxes for tested OSes
2016-03-16 09:46:05 +01:00
Nathan Zadoks
0360e410b7
bird module: run as user/group bird, not ircd
2016-03-07 02:02:58 +01:00
Nathan Zadoks
819dab0203
git-remote-hg: fix the derivation name
...
-v0.2 isn't parsed as a version by Nix, and makes it inconvenient to
install git-remote-hg through nix-env.
2016-03-03 14:51:31 +01:00
Nathan Zadoks
bf18a34f97
musl: pass the correct syslibdir
...
This fixes dynamic linking (the specfile contains the correct path, and
the dynamic loader is symlinked in place)
Fixes #8543
2016-03-03 14:46:44 +01:00
Nathan Zadoks
1904ef7f09
systemd: enable upstream systemd-binfmt.service
...
Since we don't restart sysinit.service in switch-to-configuration, this
additionally overrides systemd-binfmt.service to depend on
proc-sys-fs-binfmt_misc.automount, which is normally provided by
sysinit.service.
2016-03-02 21:00:47 +01:00
Nathan Zadoks
010271d47a
fish: fix hidden dependency on ${glibc}/bin/getent on Linux
2016-02-28 22:27:53 +01:00
Nathan Zadoks
da1f465b94
fish: fix hidden dependency on utillinux on Linux
2016-02-28 22:27:53 +01:00
Nathan Zadoks
2610986991
chromium/plugins: use jshon for extracting the Flash version from JSON
2016-02-19 12:31:08 +01:00
Nathan Zadoks
673bc7f32a
go: add 1.6 compiler and packages
2016-02-19 12:26:47 +01:00
Nathan Zadoks
fc48bf5a2c
glibc: fix cve-2015-7547.patch so it applies cleanly
2016-02-16 17:23:35 +01:00
Nathan Zadoks
b5aa8a4e64
glibc: patch CVE-2015-7547
...
The glibc DNS client side resolver is vulnerable to a stack-based buffer
overflow when the getaddrinfo() library function is used. Software using
this function may be exploited with attacker-controlled domain names,
attacker-controlled DNS servers, or through a man-in-the-middle attack.
https://googleonlinesecurity.blogspot.co.uk/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html
2016-02-16 16:15:07 +01:00
Nathan Zadoks
2d3940bd66
scrot: 0.8 -> 0.8-17 (Debian patches), fixes #12954
2016-02-15 15:34:04 +01:00
Nathan Zadoks
9e986c161b
wpa_supplicant module: add an option for accepting raw PSKs
...
fix #12892
2016-02-09 17:20:35 +01:00
Nathan Zadoks
c998447a13
buildRubyGem: pass the gem version through into the derivation name
2016-02-07 16:53:31 +01:00
Nathan Zadoks
b4da3bb88b
buildRubyGem: ensure gem versions don't get misparsed
...
Without this, every nix-env --upgrade replaces ruby with an
arbitrary gem, which makes Ruby unusuable from user environments.
2016-02-07 16:53:27 +01:00
Nathan Zadoks
1072e2bf4d
fish: don't use manpath(1) from PATH in functions/man.fish
...
Close #12762 .
2016-02-02 06:13:12 +01:00
Nathan Zadoks
23f5e3c90f
linux: patch CVE-2016-0728 ( close #12492 )
...
The PoC provided successfully escalates privileges from a local user to
root. The vulnerability affects any Linux Kernel version 3.8 and higher.
http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/
2016-01-20 09:31:53 +01:00
Nathan Zadoks
df82096af0
activation-script module: add environment.usrbinenv option
2016-01-19 23:29:48 +01:00
Nathan Zadoks
9c9a5353f9
docker: enable journald support
2016-01-14 16:01:19 +01:00
Nathan Zadoks
174221b744
go: 1.5.2 -> 1.5.3
...
This addresses CVE-2015-8618 (a vulnerability in math/big)
This issue can affect RSA computations in crypto/rsa, which is used by
crypto/tls. TLS servers on 32-bit systems could plausibly leak their RSA
private key due to this issue. Other protocol implementations that
create many RSA signatures could also be impacted in the same way.
https://groups.google.com/forum/#!topic/golang-dev/MEATuOi_ei4
2016-01-14 14:55:43 +01:00
Nathan Zadoks
8cb22c0a63
consul service: add package option
2016-01-08 01:44:28 +01:00
Nathan Zadoks
d396f1e99b
kmscon service: add extraOptions option
2016-01-02 22:21:54 +01:00
Nathan Zadoks
efd9562df0
fish: pass all of argv to command-not-found
2015-12-28 15:09:48 +01:00
Nathan Zadoks
254eebd8a0
command-not-found: add NIX_AUTO_RUN
2015-12-28 15:09:48 +01:00
Nathan Zadoks
0fda4ff715
tahoelafs: mock is required at runtime for some reason
2015-12-24 11:08:16 +01:00
Nathan Zadoks
77affc495f
despotify: fix missing hash ( close #11913 )
2015-12-23 23:09:26 +01:00
Nathan Zadoks
971d580a00
spotify: fix missing ffmpeg_0_10 dependency, fixes #11877
...
This makes local playback work.
2015-12-23 01:41:01 +01:00
Nathan Zadoks
d5e5a7dbc3
docker: 1.9.0 -> 1.9.1
2015-12-21 12:18:22 +01:00