summary refs log tree commit diff
path: root/pkgs
AgeCommit message (Collapse)AuthorFilesLines
2017-03-26pcre2: 10.22 -> 10.23 + security fixRobin Gloster1-3/+20
CVE-2017-7186 refs nixos/security#57 #24319
2017-03-26Merge pull request #24058 from LnL7/go-cacertDaniel Peebles4-10/+10
go: use NIX_SSL_CERT_FILE for crypto/x509
2017-03-26torbrowser: hard-code path to wrapper in desktop fileJoachim Fasting1-0/+2
2017-03-26torbrowser: correct internal note about geoipJoachim Fasting1-2/+4
2017-03-26vogl: pin to Qt 5.6Thomas Tuegel1-1/+1
2017-03-26Merge pull request #24299 from ttuegel/master--drop-qt-5.7Thomas Tuegel114-4389/+59
Drop Qt 5.5 and Qt 5.7 from master
2017-03-26ocamlPackages.fmt: 0.8.0 -> 0.8.2Vincent Laporte1-4/+5
2017-03-26linux: 4.4.56 -> 4.4.57Tim Steinbach1-2/+2
2017-03-26linux: 4.10.5 -> 4.10.6Tim Steinbach1-2/+2
2017-03-26linux: 4.9.17 -> 4.9.18Tim Steinbach1-2/+2
2017-03-26citrix-receiver: fix wrapper, direct dl url, $PWD needs escapingDmitry Kalinkin1-6/+10
(edited by @obadz, closes #24320)
2017-03-26jasper: 2.0.10 -> 2.0.12ndowens1-4/+4
2017-03-26libguestfs: add qemu to wrapped PATHLeon Isenberg1-1/+1
virt-df doesn't find qemu-img otherwise.
2017-03-26Merge pull request #24002 from deepfire/voglJörg Thalheim2-0/+49
vogl: init at 2016-05-13
2017-03-26sile: on Darwin, use AppKit for font selectionVincent Laporte1-5/+13
2017-03-26Merge pull request #24342 from WilliButz/masterJoachim F1-2/+2
spotify: 1.0.49.125.g72ee7853-111 -> 1.0.52.717.g2f08534a-47
2017-03-26vogl: init at 2016-05-13Kosyrev Serge2-0/+49
2017-03-26Merge pull request #24208 from lsix/update_django_1_10Frederik Rietdijk2-30/+37
pythonPackages.django: 1.10.5 -> 1.10.6
2017-03-25obs-studio: use upstream crash fixes, drop patchCray Elliott2-44/+2
2017-03-25Merge pull request #24310 from ndowens/advancecompndowens1-27/+22
advancecomp: 1.19 -> 1.23
2017-03-26spotify: 1.0.49.125.g72ee7853-111 -> 1.0.52.717.g2f08534a-47Willi Butz1-2/+2
2017-03-26ibus-engines: use wrapPythonProgramsNikolay Amiantov8-34/+39
This is needed now that PYTHONPATH is not propagated. Also several packages with additional dependencies are now properly wrapped.
2017-03-26ibus: wrap with GTK dependenciesNikolay Amiantov2-14/+10
Without this ibus can't load its settings. Also don't propagate PYTHONPATH.
2017-03-25texlive: fix CVE-2016-10243Vladimír Čunát1-0/+1
https://github.com/NixOS/security/issues/104
2017-03-25i2pd: 2.11.0 -> 2.12.0Edward Tjörnhammar1-2/+2
2017-03-25keepassx-community: 2.1.2 -> 2.1.3Jörg Thalheim1-2/+2
fixes https://github.com/NixOS/security/issues/105
2017-03-25radarr: init at 0.2.0.553 + nixos moduleEdward Tjörnhammar2-0/+33
2017-03-25jackett: init at 0.7.1197 + nixos moduleEdward Tjörnhammar2-0/+32
2017-03-25Merge pull request #24329 from cko/nodejs-4_8_1Daiderd Jordan1-2/+2
nodejs-4_x: 4.6.0 -> 4.8.1
2017-03-25Merge pull request #24321 from rbasso/exercism-2.4.0Pascal Wittmann1-2/+2
exercism: 2.3.0 -> 2.4.0
2017-03-25Merge pull request #24276 from jluttine/yadm-1.07Pascal Wittmann1-2/+2
yadm: 1.05 -> 1.07
2017-03-25graphicsmagick: patch for CVE-2017-6335Michael Raskin2-0/+37
2017-03-25irssi: 1.0.1 -> 1.0.2 for CVE-2017-7191Franz Pletz1-2/+2
See https://irssi.org/security/irssi_sa_2017_03.txt.
2017-03-25Merge pull request #24324 from NeQuissimus/kotlin_1_1_1Pascal Wittmann1-2/+2
kotlin: 1.1 -> 1.1.1
2017-03-25prosody: 0.9.10 -> 0.9.12 (#24269)uwap1-2/+2
2017-03-25Merge pull request #24332 from WilliButz/masterRobin Gloster1-1/+13
manticore: fix compiling pml sources
2017-03-25manticore: fix compiling pml sourcesWilli Butz1-1/+13
Compiler depends on sources that weren't present in the output.
2017-03-25nodejs-4_x: 4.6.0 -> 4.8.1Christine Koppelt1-2/+2
2017-03-25drumkv1: 0.8.0 -> 0.8.1Cillian de Róiste1-2/+2
2017-03-25drumgizmo: 0.9.11 -> 0.9.12Cillian de Róiste1-2/+2
2017-03-25Merge pull request #24313 from womfoo/bump/iterm2-3.0.14Joachim F1-2/+5
iterm2: 3.0.4 -> 3.0.14 + fix build
2017-03-25dropbox: use vendored Qt 5 librariesThomas Tuegel2-17/+9
2017-03-25nix-buffer support: Make process-environment changes actually localShea Levy1-0/+2
2017-03-25manticore: fix build, remove builder.sh (see #23253)Willi Butz2-31/+22
2017-03-25kotlin: 1.1 -> 1.1.1.Tim Steinbach1-2/+2
2017-03-25Merge pull request #24323 from NeQuissimus/git_2_12_2Tim Steinbach1-2/+2
git: 2.12.0 -> 2.12.2
2017-03-25torbrowser: reduce risk of stale Nix store referencesJoachim Fasting3-104/+302
This patch restructures the expression and wrapper to minimize Nix store references captured by the user's state directory. The previous version would write lots of references to the Nix store into the user's state directory, resulting in synchronization issues between the Store and the local state directory. At best, this would cause TBB to stop working when the version used to instantiate the local state was garbage collected; at worst, a user would continue to use the old version even after an upgrade. To solve the issue, hard-code as much as possible at the Store side and minimize the amount of stuff being copied into the local state dir. Currently, only a few files generated at firefox startup and fontconfig cache files end up capturing store paths; these files are simply removed upon every startup. Otherwise, no capture should occur and the user should always be using the TBB associated with the tor-browser wrapper script. To check for stale Store paths, do `grep -Ero '/nix/store/[^/]+' ~/.local/share/tor-browser` This command should *never* return any other store path than the one associated with the current tor-browser wrapper script, even after an update (assuming you've run tor-browser at least once after updating). Deviations from this general rule are considered bugs from now on. Note that no attempt has been made to support pluggable transports; they are still broken with this patch (to be fixed in a follow-up patch). User visible changes: - Wrapper retains only environment variables required for TBB to work - pulseaudioSupport can be toggled independently of mediaSupport (the latter weakly implies the former). - Store local state under $TBB_HOME. Defaults to $XDG_DATA_HOME/tor-browser - Stop obnoxious first-run stuff (NoScript redirect, in particular) - Set desktop item GenericName to Web Browser Some minor enhancements: - Disable Hydra builds - Specify system -> source mapping to make it easier to extend supported platforms.
2017-03-25exercism: 2.3.0 -> 2.4.0rbasso1-2/+2
2017-03-25git: 2.12.0 -> 2.12.2Tim Steinbach1-2/+2
2017-03-25rapcad: pin to Qt 5.6Thomas Tuegel1-2/+9