Commit Graph

270 Commits

Author SHA1 Message Date
Leo Famulari 09748a3527
gnu: wpa-supplicant: Fix "KRACK" key reinstallation attacks [security fixes].
Fixes CVE-2017-{13078,13079,13080,13081,13082,13087,13088}.

See these announcements for more information:
https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
https://www.krackattacks.com/

* gnu/packages/patches/wpa-supplicant-CVE-2017-13082.patch,
gnu/packages/patches/wpa-supplicant-fix-key-reuse.patch,
gnu/packages/patches/wpa-supplicant-fix-nonce-reuse.patch
gnu/packages/patches/wpa-supplicant-fix-zeroed-keys.patch,
gnu/packages/patches/wpa-supplicant-krack-followups.patch: New files.
* gnu/packages/admin.scm (wpa-supplicant-minimal)[source]: Use them.
* gnu/local.mk (dist_patch_DATA): Add them.
2017-10-16 14:17:27 -04:00
Marius Bakke 1c055d7258
Merge branch 'staging' 2017-10-10 21:44:32 +02:00
Tobias Geerinckx-Rice 51b6a1dd13
gnu: smartmontools: Use HTTPS home page.
* gnu/packages/admin.scm (smartmontools)[home-page]: Use HTTPS.
2017-10-09 20:40:15 +02:00
Tobias Geerinckx-Rice 5578a9c64b
gnu: munge: Update to 0.5.13.
* gnu/packages/admin.scm (munge): Update to 0.5.13.
2017-10-08 17:06:14 +02:00
Kei Kebreau dc1d3cdef7
gnu: Use 'modify-phases' syntax.
* gnu/packages/admin.scm (mingetty, clusterssh, wpa-supplicant-minimal,
wpa-supplicant, wakelan, acpica, tree, direvent, dstat)[arguments]: Use
'modify-phases' syntax.
* gnu/packages/algebra.scm (arb)[arguments]: Likewise.
* gnu/packages/apr.scm (apr-util)[arguments]: Likewise.
* gnu/packages/audio.scm (clalsadrv, fluidsynth, faad2, lv2-mda-piano,
lv2-mda-epiano, timidity++, vamp, soundtouch, portaudio, rsound,
zita-convolver, zita-alsa-pcmi)[arguments]: Likewise.
* gnu/packages/backup.scm (rdup, btar)[arguments]: Likewise.
* gnu/packages/bioinformatics.scm (bedops, bwa, crossmap, express,
flexbar, grit, hisat, ngs-sdk, subread)[arguments]: Likewise.
* gnu/packages/bittorrent.scm (transmission)[arguments]: Likewise.
* gnu/packages/cdrom.scm (cd-discid)[arguments]: Likewise.
* gnu/packages/compression.scm (sharutils)[arguments]: Likewise.
* gnu/packages/conky.scm (conky)[arguments]: Likewise.
* gnu/packages/databases.scm (bdb, bdb-5.3)[arguments]: Likewise.
* gnu/packages/debug.scm (delta, c-reduce)[arguments]: Likewise.
* gnu/packages/display-managers.scm (slim)[arguments]: Likewise.
* gnu/packages/dns.scm (dnsmasq)[arguments]: Likewise.
* gnu/packages/emacs.scm (geiser, emacs-wget, bbdb)[arguments]: Likewise.
* gnu/packages/engineering.scm (pcb)[arguments]: Likewise.
* gnu/packages/firmware.scm (ath9k-htc-firmware)[arguments]: Likewise.
* gnu/packages/flashing-tools.scm (flashrom)[arguments]: Likewise.
* gnu/packages/fltk.scm (fltk)[arguments]: Likewise.
* gnu/packages/freedesktop.scm (python-pyxdg)[arguments]: Likewise.
* gnu/packages/gd.scm (perl-gd)[arguments]: Likewise.
* gnu/packages/gkrellm.scm (gkrellm)[arguments]: Likewise.
* gnu/packages/glib.scm (glibmm)[arguments]: Likewise.
* gnu/packages/gl.scm (glew)[arguments]: Likewise.
* gnu/packages/gnome.scm (icon-naming-utils, orbit2, libbonobo, gnome-vfs,
libgnome, libbonoboui, goffice-0.8, dconf)[arguments]: Likewise.
* gnu/packages/gprolog.scm (gprolog)[arguments]: Likewise.
* gnu/packages/gps.scm (gpscorrelate)[arguments]: Likewise.
* gnu/packages/graphics.scm (agg)[arguments]: Likewise.
* gnu/packages/gtk.scm (ganv, girara, gtksourceview-2, guile-present,
python2-pycairo)[arguments]: Likewise.
* gnu/packages/guile.scm (guile-1.8)[arguments]: Likewise.
* gnu/packages/guile-wm.scm (guile-wm)[arguments]: Likewise.
* gnu/packages/hugs.scm (hugs)[arguments]: Likewise.
* gnu/packages/hurd.scm (gnumach-headers, hurd-headers, hurd-minimal)
[arguments]: Likewise.
* gnu/packages/image-viewers.scm (feh, sxiv)[arguments]: Likewise.
* gnu/packages/libcanberra.scm (libcanberra)[arguments]: Likewise.
* gnu/packages/linux.scm (bridge-utils, iw, fuse, unionfs-fuse/static,
lm-sensors, i2c-tools, xsensors, perf, mdadm, libaio, module-init-tools)
[arguments]: Likewise.
* gnu/packages/lisp.scm (ccl)[arguments]: Likewise.
* gnu/packages/lout.scm (lout)[arguments]: Likewise.
* gnu/packages/lua.scm (luajit)[arguments]: Likewise.
* gnu/packages/machine-learning.scm (shogun)[arguments]: Likewise.
* gnu/packages/mail.scm (exim)[arguments]: Likewise.
* gnu/packages/man.scm (man-pages, txt2man)[arguments]: Likewise.
* gnu/packages/maths.scm (lapack, superlu-dist, openlibm, openspecfun)
[arguments]: Likewise.
* gnu/packages/messaging.scm (bitlbee)[arguments]: Likewise.
* gnu/packages/mp3.scm (libmad, id3lib, mp3info)[arguments]: Likewise.
* gnu/packages/music.scm (solfege)[arguments]: Likewise.
* gnu/packages/noweb.scm (noweb)[arguments]: Likewise.
* gnu/packages/patchutils.scm (patchutils, quilt, colordiff)[arguments]:
Likewise.
* gnu/packages/pdf.scm (xpdf, zathura-cb, zathura-ps, zathura-djvu,
zathura-pdf-poppler, zathura, podofo, fbida)[arguments]: Likewise.
* gnu/packages/perl.scm (perl-file-list, perl-test-harness)[arguments]:
Likewise.
* gnu/packages/photo.scm (gphoto2)[arguments]: Likewise.
* gnu/packages/popt.scm (popt)[arguments]: Likewise.
* gnu/packages/pretty-print.scm (source-highlight, astyle)[arguments]:
Likewise.
* gnu/packages/pumpio.scm (pumpa)[arguments]: Likewise.
* gnu/packages/python.scm (python-passlib, python-pycrypto, python2-empy,
python-sqlalchemy, python-docopt)[arguments]: Likewise.
* gnu/packages/rdf.scm (lrdf)[arguments]: Likewise.
* gnu/packages/regex.scm (tre)[arguments]: Likewise.
* gnu/packages/rrdtool.scm (rrdtool)[arguments]: Likewise.
* gnu/packages/ruby.scm (ruby-2.1, ruby-1.8)[arguments]: Likewise.
* gnu/packages/sawfish.scm (sawfish)[arguments]: Likewise.
* gnu/packages/scheme.scm (racket)[arguments]: Likewise.
* gnu/packages/sdl.scm (guile-sdl)[arguments]: Likewise.
* gnu/packages/serveez.scm (serveez)[arguments]: Likewise.
* gnu/packages/skribilo.scm (skribilo)[arguments]: Likewise.
* gnu/packages/smalltalk.scm (smalltalk)[arguments]: Likewise.
* gnu/packages/suckless.scm (dmenu, slock)[arguments]: Likewise.
* gnu/packages/tcl.scm (expect)[arguments]: Likewise.
* gnu/packages/telephony.scm (commoncpp)[arguments]: Likewise.
* gnu/packages/textutils.scm (recode, libgtextutils)[arguments]:
Likewise.
* gnu/packages/time.scm (time)[arguments]: Likewise.
* gnu/packages/tor.scm (privoxy)[arguments]: Likewise.
* gnu/packages/uucp.scm (uucp)[arguments]: Likewise.
* gnu/packages/video.scm (libdvdnav-4)[arguments]: Likewise.
* gnu/packages/web-browsers.scm (lynx)[arguments]: Likewise.
* gnu/packages/web.scm (tinyproxy)[arguments]: Likewise.
* gnu/packages/wicd.scm (wicd)[arguments]: Likewise.
* gnu/packages/wm.scm (bspwm)[arguments]: Likewise.
* gnu/packages/xdisorg.scm (sxhkd, xcape)[arguments]: Likewise.
* gnu/packages/xfce.scm (xfconf)[arguments]: Likewise.
* gnu/packages/xfig.scm (transfig)[arguments]: Likewise.
* gnu/packages/xorg.scm (imake)[arguments]: Likewise.
2017-09-20 20:58:04 -04:00
Efraim Flashner 4b052c6a4d
gnu: sudo: Update to 1.8.21p2.
* gnu/packages/admin.scm (sudo): Update to 1.8.21p2.
2017-09-14 09:50:04 +03:00
Leo Famulari 73a2ef3697
gnu: tcpdump: Remove alternate source URL.
* gnu/packages/admin.scm (tcpdump)[source]: Remove alternate URL.
2017-09-08 19:36:04 -04:00
Leo Famulari 81635ad03e
gnu: tcpdump: Update to 4.9.2 [security fixes].
Fixes CVE-2017-{12893,12894,12895,12896,12897,12898,12899,12900,12901,12902,
12985,12986,12987,12988,12989,12990,12991,12992,12993,12994,12995,12996,12997,
12998,12999,13000,13001,13002,13003,13004,13005,13006,13007,13008,13009,13010,
13012,13013,13014,13015,13016,13017,13018,13019,13020,13021,13022,13023,13024,
13025,13026,13027,13028,13029,13030,13031,13032,13033,13034,13035,13036,13037,
13038,13039,13040,13041,13042,13043,13044,13045,13046,13047,13048,13049,13050,
13051,13052,13053,13054,13055,13687,13688,13689,13690,13725}.

* gnu/packages/admin.scm (tcpdump): Update to 4.9.2.
[source]: Remove patches and add alternate source URL.
* gnu/packages/patches/tcpdump-CVE-2017-11541.patch,
gnu/packages/patches/tcpdump-CVE-2017-11542.patch,
gnu/packages/patches/tcpdump-CVE-2017-11543.patch: Delete files.
* gnu/local.mk (dist_patch_DATA): Remove them.
2017-09-07 17:44:20 -04:00
Leo Famulari 514c2f4806
gnu: tcpdump: Fix CVE-2017-[11541,11542,11543].
* gnu/packages/patches/tcpdump-CVE-2017-11541.patch,
gnu/packages/patches/tcpdump-CVE-2017-11542.patch
gnu/packages/patches/tcpdump-CVE-2017-11543.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/admin.scm (tcpdump)[source]: Use them.
2017-09-05 14:53:50 -04:00
Leo Famulari 5f13bf0972
gnu: Fetch several Git sources over HTTPS.
* gnu/packages/admin.scm (interrobang)[source]: Use HTTPS URL.
* gnu/packages/audio.scm (ardour)[source]: Likewise.
* gnu/packages/embedded.scm (libjaylink, openocd)[source]: Likewise.
* gnu/packages/gnome.scm (byzanz)[source]: Likewise.
* gnu/packages/gnunet.scm (guile-gnunet)[source]Likewise.
* gnu/packages/java.scm (classpath)[source]: Likewise.
* gnu/packages/microcom.scm (microcom)[source]: Likewise.
* gnu/packages/python.scm (python-axolotl-curve25519)[source]: Likewise.
* gnu/packages/rdesktop.scm (freerdp)[source]: Likewise.
* gnu/packages/shells.scm (rc)[source]: Likewise.
* gnu/packages/web.scm (libwebsockets)[source]: Use new source URL.
2017-08-27 18:24:49 -04:00
Marius Bakke 2718a9cd09
Merge branch 'master' into core-updates 2017-08-21 02:40:37 +02:00
Tobias Geerinckx-Rice e2a4c13023
gnu: cbatticon: Update to 1.6.6.
* gnu/packages/admin.scm (cbatticon): Update to 1.6.6.
2017-08-16 22:35:10 +02:00
Marius Bakke d156c999d0
Merge branch 'master' into core-updates 2017-08-10 00:18:36 +02:00
Marius Bakke 4c6c683862
gnu: nmap: Update to 7.60.
* gnu/packages/admin.scm (nmap): Update to 7.60.
2017-08-10 00:15:35 +02:00
Mark H Weaver cc294bcee6
Merge branch 'master' into core-updates 2017-08-09 17:25:31 -04:00
Tobias Geerinckx-Rice 7fae2063f8
gnu: sudo: Use ‘modify-phases’ syntax.
* gnu/packages/admin.scm (sudo)[arguments]: Use ‘modify-phases’.
2017-08-08 05:23:36 +02:00
Mark H Weaver f167595ba1
Merge branch 'master' into core-updates 2017-08-06 00:23:20 -04:00
Tobias Geerinckx-Rice f58be41761
gnu: fabric: Update to 1.13.2.
* gnu/packages/admin.scm (fabric): Update to 1.13.2.  Remove outdated comments.
[source]: Remove ‘patches’.
* gnu/packages/patches/fabric-tests.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.
2017-08-04 03:46:49 +02:00
Tobias Geerinckx-Rice 0a3ecfd29c
gnu: thefuck: Update to 3.19.
* gnu/packages/admin.scm (thefuck): Update to 3.19.
2017-08-04 01:51:23 +02:00
Marius Bakke e0b9e377f1
Merge branch 'master' into core-updates 2017-07-28 00:34:13 +02:00
Tobias Geerinckx-Rice 56ab0f0c6d
gnu: nnn: Update to 1.3.
* gnu/packages/admin.scm (nnn): Update to 1.3.
2017-07-27 05:03:33 +02:00
Oleg Pykhalov af79852c99
gnu: neofetch: Fix search path.
* gnu/packages/admin.scm (neofetch): Fix "No such file or directory" for distro logo.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-07-25 23:07:37 +02:00
Leo Famulari e9f468dfcd
gnu: tcpdump: Update to 4.9.1 [fixes CVE-2017-11108].
* gnu/packages/admin.scm (tcpdump): Update to 4.9.1.
2017-07-25 15:25:44 -04:00
Leo Famulari e081e2dd0b
Merge branch 'master' into core-updates 2017-07-23 19:06:49 -04:00
Leo Famulari 2472f7a8f1
gnu: isc-dhcp: Update bundled bind to 9.9.10-P3.
This fixes a regression introduced in the fix for CVE-2017-3142, in BIND
9.9.10-P2, commit ecb232bdfc.

See 'CHANGELOG' in the source distribution for more information.

* gnu/packages/admin.scm (isc-dhcp): Update bundled bind to 9.9.10-P3.
2017-07-23 19:05:37 -04:00
Leo Famulari 6c1a317e29
Merge branch 'master' into core-updates 2017-07-23 03:42:12 -04:00
Ludovic Courtès ce6223e68e
gnu: shadow: Fix cross-compilation.
* gnu/packages/admin.scm (shadow)[arguments] <set-nscd-file-name>: Refer
to "cross-libc" when cross-compiling.
2017-07-11 22:40:27 +02:00
Ludovic Courtès e4015e570c
gnu: inetutils: Allow for cross-compilation.
* gnu/packages/admin.scm (inetutils)[arguments]: Pass
"--with-path-procnet-dev".
2017-07-11 22:26:05 +02:00
Leo Famulari c8eb2b8c60
Merge branch 'master' into core-updates 2017-07-10 14:37:53 -04:00
Ludovic Courtès 5dfbd76971
gnu: shadow: Correctly match the system type.
* gnu/packages/admin.scm (shadow)[inputs]: Use 'string-contains' instead
of 'string-prefix?' when matching the system type.
2017-07-07 00:44:55 +02:00
Leo Famulari e048de6098
gnu: inet-utils: Mention `hostname` in description.
* gnu/packages/admin.scm (inetutils)[description]: Update description.
2017-07-05 00:35:28 -04:00
Ludovic Courtès 425ab478ac
gnu: shepherd: Allow cross-compilation.
* gnu/packages/admin.scm (shepherd)[native-inputs]: Add GUILE-2.0.
2017-07-04 23:45:12 +02:00
Tobias Geerinckx-Rice e9e3a69d36
gnu: nnn: Update to 1.2.
* gnu/packages/admin.scm (nnn): Update to 1.2.
2017-07-04 00:51:52 +02:00
Leo Famulari ecb232bdfc
gnu: isc-dhcp: Update bundled bind to 9.9.10-P2 [fixes CVE-2017-{3142,3143}].
* gnu/packages/admin.scm (isc-dhcp): Update bundled bind to 9.9.10-P2.
2017-06-30 11:59:31 -04:00
Leo Famulari 1024c8119c
Merge branch 'master' into core-updates 2017-06-29 18:02:17 -04:00
Efraim Flashner 1b6d3b7a23
gnu: thermald: Add file-name for source.
* gnu/packages/admin.scm (thermald)[source]: Add file-name field.
2017-06-29 23:09:24 +03:00
Efraim Flashner 86ee76254b
gnu: thermald: Only build on i686 and x86_64.
* gnu/packages/admin.scm (thermald)[supported-systems]: New field.
2017-06-29 23:08:17 +03:00
Jelle Licht b786661309
gnu: ansible: Apply experimental patch to deal with wrapping of ansible script.
See <http://lists.gnu.org/archive/html/bug-guix/2017-05/msg00015.html> for the
rationale.

* gnu/packages/patches/ansible-wrap-program-hack.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/admin.scm (ansible)[source]: Use it.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2017-06-29 15:21:18 +02:00
Mark H Weaver ed068b960e
Merge branch 'master' into core-updates 2017-06-26 00:00:58 -04:00
Tobias Geerinckx-Rice 407b086ba5
gnu: neofetch: Update to 3.2.0.
* gnu/packages/admin.scm (neofetch): Update to 3.2.0.
2017-06-23 17:21:19 +02:00
Leo Famulari 001f8cdc48
gnu: isc-dhcp: Update bundled bind to 9.9.10-P1.
* gnu/packages/admin.scm (isc-dhcp): Update bundled bind to 9.9.10-P1.
2017-06-22 17:13:37 -04:00
Mark H Weaver 9d4385634d
Merge branch 'master' into core-updates 2017-06-18 02:36:51 -04:00
Tobias Geerinckx-Rice 6103eb3d03
gnu: thefuck: Update to 3.18.
* gnu/packages/admin.scm (thefuck): Update to 3.18.
2017-06-16 17:56:03 +02:00
Tobias Geerinckx-Rice 2e3297f46d
gnu: ansible: Update to 2.3.1.0.
* gnu/packages/admin.scm (ansible): Update to 2.3.1.0.
2017-06-16 17:56:03 +02:00
Marius Bakke ed77c68ac9
gnu: nmap: Update to 7.50.
* gnu/packages/admin.scm (nmap): Update to 7.50.
2017-06-14 19:40:32 +02:00
Ludovic Courtès 05ffd29d97
gnu: shepherd: Switch to Guile 2.2.
* gnu/packages/admin.scm (shepherd)[inputs]: Switch to GUILE-2.2.
2017-06-11 22:47:00 +02:00
Marius Bakke 3416bed277
gnu: sudo: Update to 1.8.20p2.
* gnu/packages/admin.scm (sudo): Update to 1.8.20p2.
2017-06-03 00:28:18 +02:00
Marius Bakke 6b7f1b6ce9
gnu: sudo: Unbundle zlib.
* gnu/packages/admin.scm (sudo)[source]: Add 'snippet'.
[inputs]: Add ZLIB.
2017-05-30 19:49:19 +02:00
Marius Bakke eea879d74c
gnu: sudo: Update to 1.8.20p1 [fixes CVE-2017-1000367].
* gnu/packages/admin.scm (sudo): Update to 1.8.20p1.
2017-05-30 17:40:23 +02:00
Danny Milosavljevic faa6bdf8ad
gnu: sunxi-tools: Build armhf target tools.
* gnu/packages/admin.scm (sunxi-tools)
[native-inputs]: Add cross-gcc, cross-libc.
[arguments]: Add "set-environment-up" phase.
Replace "build" phase.
Add "build-armhf" phase.
Update make-flags.
2017-05-25 11:37:29 +02:00