Commit graph

349841 commits

Author SHA1 Message Date
Samuel Ainsworth 93f88be7d1 python3Packages.treex: jaxlib belongs in buildInputs 2022-01-27 20:52:33 +00:00
Samuel Ainsworth 236bab3f1f python3Packages.optax: jaxlib belongs in buildInputs 2022-01-27 20:52:20 +00:00
Samuel Ainsworth c674a64ce6 python3Packages.flax: jaxlib belongs in buildInputs 2022-01-27 20:52:07 +00:00
Samuel Ainsworth 9d9a54adea python3Packages.elegy: jaxlib belongs in buildInputs 2022-01-27 20:51:58 +00:00
Samuel Ainsworth 97a90b8d6f python3Packages.treeo: jaxlib is a test dependency 2022-01-27 20:51:07 +00:00
Samuel Ainsworth 501df061ed python3Packages.jmp: jaxlib is a test dependency 2022-01-27 20:50:47 +00:00
Samuel Ainsworth 6c2acb04c2 python3Packages.dm-haiku: jaxlib is a test dependency 2022-01-27 20:50:30 +00:00
Ryan Hendrickson 617d557d3b gnome-2048: init at 3.38.2 2022-01-27 15:40:02 -05:00
Thomas Gerbet 1387fd0fd1 keepalived: 2.2.4 -> 2.2.7
Fixes CVE-2021-44225.
https://www.keepalived.org/release-notes/Release-2.2.7.html
2022-01-27 12:39:54 -08:00
Thomas Gerbet f8c8a8918a flatpak-builder: 1.2.0 -> 1.2.2
Changes:
https://github.com/flatpak/flatpak-builder/releases/tag/1.2.2
https://github.com/flatpak/flatpak-builder/releases/tag/1.2.1

Security advisory:
https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx
2022-01-27 12:38:04 -08:00
R. Ryantm 8909cf13be python310Packages.azure-mgmt-applicationinsights: 2.0.0 -> 2.1.0 2022-01-27 12:26:51 -08:00
R. Ryantm f329ced6f2 python310Packages.sqlite-utils: 3.22 -> 3.22.1 2022-01-27 12:25:20 -08:00
R. Ryantm 1b12139305 python39Packages.mautrix: 0.14.5 -> 0.14.6 2022-01-27 12:25:10 -08:00
R. Ryantm eff0fc087c python310Packages.sagemaker: 2.73.0 -> 2.74.0 2022-01-27 12:24:50 -08:00
Tom Fitzhenry 4e8deff9c8 spot: 0.3.0 -> 0.3.1
https://github.com/xou816/spot/releases/tag/0.3.1
2022-01-28 07:15:32 +11:00
Thomas Gerbet 846fafa68e lighttpd: 1.4.63 -> 1.4.64
https://www.lighttpd.net/2022/1/19/1.4.64/
2022-01-27 21:12:21 +01:00
Sandro 896ab6a275
Merge pull request #156899 from drupol/php/add-ds-extension 2022-01-27 20:58:44 +01:00
Alexander Tsvyashchenko fa7b83fa48
python3Packages.objax: fix tensorboard dependency (#156909)
Also moved `jaxlib` to `buildInputs` to avoid injecting it into dependent packages.
2022-01-27 11:45:32 -08:00
Michael Weiss e5808c2f62
Merge pull request #154003 from primeos/signal-desktop
signal-desktop: 5.27.1 -> 5.29.1
2022-01-27 20:44:01 +01:00
Robert Scott 7b13bb9479
Merge pull request #156698 from bachp/poco-1.11.0
poco: 1.10.1 -> 1.11.1
2022-01-27 19:42:47 +00:00
R. Ryantm 13b987abce linode-cli: 5.14.0 -> 5.15.0 2022-01-27 19:10:32 +00:00
Michael Weiss eeb0e220cd
signal-desktop: 5.29.0 -> 5.29.1 2022-01-27 20:01:19 +01:00
Bernardo Meurer 319850d2a3
Merge pull request #156663 from lovesegfault/nix-refactor
nix: factor out common.nix
2022-01-27 10:58:17 -08:00
Renaud 4dc70faa6f
twa: 1.9.1 -> 1.10.0
(#156769)
2022-01-27 19:46:26 +01:00
Robert Scott cf2bdd298b varnish60: 6.0.9 -> 6.0.10 2022-01-27 18:24:09 +00:00
Robert Scott 683d5696e3 varnish70: 7.0.1 -> 7.0.2 2022-01-27 18:24:09 +00:00
Jörg Thalheim 956dab36a3 nextcloud: use tmpfiles to create group-readable home
users.users.*.createHome makes home only owner-readable.
This breaks nginx reading static assets from nextcloud's home,
after a nixos-rebuild that did not restart nextcloud-setup.

Closes #112639
2022-01-27 19:13:50 +01:00
Will Cohen 7ec99ea7cf
qt5.qtwebkit: add disambiguate handle for darwin (#156809) 2022-01-27 13:00:11 -05:00
Fabian Affolter f90310a12f
Merge pull request #157016 from applePrincess/exploitdb-2022-01-26
exploitdb: 2022-01-25 -> 2022-01-26
2022-01-27 18:54:34 +01:00
Bernardo Meurer fe55576eea
Merge pull request #156997 from TredwellGit/linux
Kernels 2022-01-27
2022-01-27 09:52:03 -08:00
ajs124 47a2176ec8
Merge pull request #156998 from mweinelt/smartctl-exporter-fixups
prometheus.exporters.smartctl: fixes
2022-01-27 18:49:49 +01:00
Martin Weinelt 3a4bed480a
Merge pull request #156937 from mweinelt/firefox 2022-01-27 18:41:56 +01:00
Bernardo Meurer 5f9b470ff0
Merge pull request #154809 from helsinki-systems/feat/stc-proper-unit-file-parser
nixos/switch-to-configuration: Proper unit file parser and clean/fix lower part of the script
2022-01-27 09:35:34 -08:00
Jan Tojnar 46c427535a scribusUnstable: fix build with latest poppler
Poppler 22.01.0 requires std=c++17:

https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1027

It will be enforced in next release:

0b1abeff08
2022-01-27 18:07:23 +01:00
Jan Tojnar d8bcc674c4 gdal: fix build with latest poppler
Poppler 22.01.0 requires std=c++17:

https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1027
2022-01-27 18:07:23 +01:00
Aaron Andersen 3cafa47a66
Merge pull request #157019 from dali99/fix-mx-puppet-discord-module
nixos/mx-puppet-discord: Change systemd unit description to avoid new…
2022-01-27 12:02:59 -05:00
maralorn 037eb0a617
Merge pull request #156491 from NixOS/haskell-updates
haskellPackages: update stackage and hackage
2022-01-27 18:01:42 +01:00
Aaron Andersen a18bad9ba3 kodi.packages.controller-topology-project: init at unstable-2022-01-22 2022-01-27 11:56:46 -05:00
Jan Tojnar c4b9851332 inkscape: fix build with Poppler 21.11.0 2022-01-27 17:49:12 +01:00
Jan Tojnar 490b9b0fa0 poppler-data: clean up
https://lists.freedesktop.org/archives/poppler/2021-September/014871.html
2022-01-27 17:49:12 +01:00
R. Ryantm 8e7c58dc44 poppler: 21.06.1 → 22.01.0
- https://lists.freedesktop.org/archives/poppler/2021-July/014803.html
- https://lists.freedesktop.org/archives/poppler/2021-August/014836.html
- https://lists.freedesktop.org/archives/poppler/2021-September/014870.html
- https://lists.freedesktop.org/archives/poppler/2021-October/014910.html
- https://lists.freedesktop.org/archives/poppler/2021-November/014954.html
- https://lists.freedesktop.org/archives/poppler/2021-December/014991.html
- https://lists.freedesktop.org/archives/poppler/2022-January/015023.html

c++17 is now minimum
2022-01-27 17:49:12 +01:00
Malte Brandy caef341934 Merge branch 'master' into haskell-updates 2022-01-27 17:48:01 +01:00
Malte Brandy c1e2f12203 haskellPackages: mark builds failing on hydra as broken
This commit has been generated by maintainers/scripts/haskell/mark-broken.sh
2022-01-27 17:47:21 +01:00
Stig 196873f601
Merge pull request #155116 from wentasah/amc-add-oodoc
auto-multiple-choice: add OpenOfficeOODoc perl module as dependency
2022-01-27 17:37:02 +01:00
Ilan Joselevich a68c4e1d28 nextcloud-client: 3.4.1 -> 3.4.2 2022-01-27 18:35:15 +02:00
Martin Weinelt 12c26aca1f
prometheus.exporters.smartctl: Fix autodiscovery
When no devices are given the exporter tries to autodiscover available
disks. The previous DevicePolicy was however preventing the exporter
from accessing any device at all, since only explicitly mentioned ones
were allowed.

This commit adds an allow rule for several device classes that I could
find on my machines, that gets set when no devices are explicitly
configured.

There is an existing problem with nvme devices, that expose a character
device at `/dev/nvme0`, and a (namespaced) block device at
`/dev/nvme0n1`. The character device does not come with permissions that
we could give to the exporter without further impacting the hardening.

  crw------- 1 root root 247, 0 27. Jan 03:10 /dev/nvme0
  brw-rw---- 1 root disk 259, 0 27. Jan 03:10 /dev/nvme0n1

The autodiscovery only finds the character device, which the exporter
unfortunately does not have access to.

However a simple udev rule can be used to resolve this:

  services.udev.extraRules = ''
    SUBSYSTEM=="nvme", KERNEL=="nvme[0-9]*", GROUP="disk"
  '';

Unfortunately I'm not fully aware of the security implications this
change carries and we should question upstream (systemd) why they did
not include such a rule.
The disk group has no members on any of my machines.

  ❯ getent group disk
  disk6:
2022-01-27 17:33:27 +01:00
R. RyanTM 899778e8cf
tev: 1.19 -> 1.22
* tev: 1.19 -> 1.22 (#156914)

* tev: don't build on aarch64-linux

Co-authored-by: Renaud <c0bw3b@users.noreply.github.com>
2022-01-27 17:06:22 +01:00
Daniel Olsen 5288bcab0a nixos/mx-puppet-discord: Change systemd unit description to avoid newline 2022-01-27 16:49:40 +01:00
Lein Matsumaru 93fb37332b
exploitdb: 2022-01-25 -> 2022-01-26 2022-01-27 15:22:33 +00:00
Luflosi 1df6380151
lsirec: init at unstable-2019-03-03
This adds lsirec, a utility that can be used to modify and recover certain LSI HBA PCIe cards.
My Dell R610 Server has an anti-feature that prevents the machine from booting, if any PCIe card not blessed by Dell for such usage is installed in the "storage slot" of the server. I used lsiutil to flash a different firmware to my "Dell PERC H310" to convert it into a "Dell 6Gbps SAS HBA Adapter". I was then able to use lsirec and the included sbrtool python script to modify my "Dell 6Gbps SAS HBA Adapter" card into pretending to be a "Dell PERC H200 Integrated" card, finally making it work in the storage slot and circumventing the stupid firmware check.
2022-01-27 16:12:23 +01:00