qtkeychain uses pkg-config to detect whether libsecret is available,
otherwise it just builds a stub object file.
We need libsecret support to allow nextcloud-client storing passwords
on Freedesktop platforms.
I also fixed the Darwin dependencies not being used with Qt5,
even though the build did not complain.
(cherry picked from commit 48316aeec1)
Signed-off-by: Maximilian Bosch <maximilian@mbosch.me>
CVE-2019-13012 Description:
The keyfile settings backend in GLib before 2.59.1 creates directories
using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and
files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE,
G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
Consequently, it does not properly restrict directory (and file) permissions.
Instead, for directories, 0777 permissions are used; for files, default file
permissions are used.
Patch Summary:
Changes the permissions when a directory is created,
using 700 instead 777 in gio/gkeyfilesettingsbackend.c
and changes test to run in a temp directory in gio/tests/gsettings.c.
Upstream Issue: https://gitlab.gnome.org/GNOME/glib/issues/1658
Upstream MR: https://gitlab.gnome.org/GNOME/glib/merge_requests/604Fixes#64657
Bump to the latest revision of `mautrix-whatsapp` to regain
compatibility with matrix-synapse 0.99.5.
Please note that it was necessary to alter some of the sources in
`deps.nix`, please read the comment at the top of the file for further
information.
(cherry picked from commit b86a3e46b3)
19.03: I'm really sorry to pull a "major" update, but the security
fixes are rather hard to backport correctly. Please contact me in case
you run into problems when upgrading.
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000189.html
Fixes DNS spoofing problems: CVE-2019-10190 CVE-2019-10191
but also minor things, adds new features, etc.
In particular aarch64 should work now, at least as long as not using
some lua library that suffers from the same problem with lightuserdata,
e.g. cqueues does suffer from this.
(cherry picked from commit f15625a6c0)
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000136.html
Similar commit worked fine for me, including the nixos service.
I'd like to still improve the service to support easy passing of sockets
to http module.
(cherry picked from commit 9efdd2e434)
I'm really sorry to pull a "major" update, but the upcoming security
fixes are rather hard to backport correctly. Please contact me in case
you run into problems when upgrading.
