nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-31 01:02:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
246,971 Commits 278 Branches 81 Tags
a6007604240ebef2e6b8914d13ed02605bf75dfd
Commit Graph

246971 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
R. RyanTM
a600760424 privoxy: 3.0.30 -> 3.0.31 
(cherry picked from commit e7aedc1e25)
 2021-07-01 22:30:34 +02:00
R. RyanTM
8147cac06e privoxy: 3.0.29 -> 3.0.30 
(cherry picked from commit bedc38c4c6)
 2021-07-01 22:30:27 +02:00
R. RyanTM
87d88376bb privoxy: 3.0.28 -> 3.0.29 
(cherry picked from commit c6fafc6879)
 2021-07-01 22:30:15 +02:00
rnhmjoj
e83ecb4305 mutt: patch for CVE-2021-32055 2021-05-27 20:08:02 +02:00
Claudio Bley
57665799d9 file-roller: 3.36.3 -> 3.36.4 
Fixes #120373 - [CVE-2020-36314](https://nvd.nist.gov/vuln/detail/CVE-2020-36314)
 2021-05-26 08:09:40 -07:00
Michael Weiss
648d2485ea Merge pull request #124424 from primeos/chromium-backport-oldstable 
[20.09] chromium: 90.0.4430.212 -> 91.0.4472.77
 2021-05-26 12:15:56 +02:00
Andreas Rammhold
76ed24ceab Merge pull request #124433 from mweinelt/20.09/nginx 
[20.09] nginx: Fix off-by-one in DNS resolver heap write
 2021-05-26 01:42:31 +02:00
Martin Weinelt
039c2ab9a7 nginx: Fix off-by-one in DNS resolver heap write 
Quoting from oss-security:

An off-by-one error in ngx_resolver_copy() while processing DNS
responses allows a network attacker to write a dot character ('.', 0x2E)
 out of bounds in a heap allocated buffer. The vulnerability can be
triggered by a DNS response in reply to a DNS request from nginx when
the resolver primitive is configured. A specially crafted packet allows
overwriting the least significant byte of next heap chunk metadata with
0x2E. A network attacker capable of providing DNS responses to a nginx
server can achieve Denial-of-Service and likely remote code execution.
Due to the lack of DNS spoofing mitigations in nginx and the fact that
the vulnerable function is called before checking the DNS Transaction
ID, remote attackers might be able to exploit this vulnerability by
flooding the victim server with poisoned DNS responses in a feasible
amount of time.

https://www.openwall.com/lists/oss-security/2021/05/25/5
https://mailman.nginx.org/pipermail/nginx-announce/2021/000300.html

Fixes: CVE-2021-23017
 2021-05-26 00:34:13 +02:00
Robert Scott
1d7bb8d425 Merge pull request #123985 from LeSuisse/vault-1.6.5-20.09 
[20.09] vault: 1.6.4 -> 1.6.5
 2021-05-25 22:12:34 +01:00
Michael Weiss
3cf4e5a15e chromium: 90.0.4430.212 -> 91.0.4472.77 
https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop_25.html

This update includes 32 security fixes.

CVEs:
CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524
CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528
CVE-2021-30529 CVE-2021-30530 CVE-2021-30531 CVE-2021-30532
CVE-2021-30533 CVE-2021-30534 CVE-2021-30535 CVE-2021-21212
CVE-2021-30536 CVE-2021-30537 CVE-2021-30538 CVE-2021-30539
CVE-2021-30540

(cherry picked from commit e522464f9a)
 2021-05-25 22:13:40 +02:00
Martin Weinelt
296198c153 Merge pull request #124327 from sumnerevans/element-1.7.29-backport-20.09 
element: 1.7.28 -> 1.7.29 (backport to 20.09)
 2021-05-25 16:05:41 +02:00
Sandro
bd086a6221 Merge pull request #124369 from ldesgoui/backport-20.09/discord 2021-05-25 14:45:41 +02:00
wearemnr
b5e483a741 discord: 0.0.14 -> 0.0.15 
Discord prevents you from using the application if a new version is out.

(cherry picked from commit 501e54080d)
 2021-05-25 13:47:54 +02:00
Sumner Evans
b39f029def element: 1.7.28 -> 1.7.29 2021-05-24 20:59:25 -06:00
Vladimír Čunát
0ea48ca5d1 Merge branch 'staging-20.09' into release-20.09 2021-05-25 00:34:52 +02:00
LeSuisse
0cc37b730c redis: 6.0.11 -> 6.0.13 (#124252) 
Fixes CVE-2021-29477 and CVE-2021-29478.
https://github.com/redis/redis/blob/6.0.13/00-RELEASENOTES
 2021-05-24 17:32:33 +02:00
Michael Weiss
b8f9625830 Merge pull request #124183 from primeos/chromium-backport 
[20.09] chromiumBeta: Backport patches to fix the build
 2021-05-24 14:52:22 +02:00
Christian Simon
12f2cf84fa containerd: 1.4.3 -> 1.4.6 
The sixth patch release for containerd 1.4 is a security release to
update runc for CVE-2021-30465

Signed-off-by: Christian Simon <simon@swine.de>
 2021-05-23 21:47:36 -07:00
Kim Lindberger
7cbe844368 Merge pull request #124136 from talyz/20.09-php-iconv-errno 
[20.09] php74.extensions.iconv: fix error signalling
 2021-05-23 22:43:37 +02:00
Kerstin Humm
981b1ea86a imagemagick: 7.0.11-12 -> 7.0.11.13 
(cherry picked from commit c2521a6b36)
 2021-05-23 16:29:39 +02:00
Jan Tojnar
ffb99acc06 php74.extensions.iconv: fix error signalling 
The configure script checks whether iconv supports errno. Unfortunately, on PHP < 8, the test program includes $PHP_ICONV_H_PATH, which defaults to FHS path so it fails to build:

	conftest.c:13:10: fatal error: /usr/include/iconv.h: No such file or directory
	   13 | #include </usr/include/iconv.h>
	      |          ^~~~~~~~~~~~~~~~~~~~~~

That causes the feature check to report a false negative, leading PHP to use a degraded code that returns PHP_ICONV_ERR_UNKNOWN when error occurs, breaking granular error handling in applications.

To prevent this, let’s just include <iconv.h>.

PHP 8 just uses include path so the detection works there: 7bd1d70341

(cherry picked from commit 024243bac4)
 2021-05-23 13:10:10 +02:00
Michael Weiss
04ab42729d chromiumDev: 92.0.4503.0 -> 92.0.4512.4 
(cherry picked from commit 6581cd7f5c)
 2021-05-23 12:08:27 +02:00
Michael Weiss
8b3c3ec1f2 chromiumBeta: 91.0.4472.57 -> 91.0.4472.69 
(cherry picked from commit 57983646b1)
 2021-05-23 12:08:26 +02:00
Michael Weiss
904adfa865 chromiumBeta: 91.0.4472.38 -> 91.0.4472.57 
(cherry picked from commit 63ff7e430b)
 2021-05-23 12:08:25 +02:00
Michael Weiss
a6438778aa chromiumDev: Fix the build 
python.withPackages avoids the problem with mixed Python 2 and Python 3
dependencies.

(cherry picked from commit e2adee6827)
 2021-05-23 12:08:22 +02:00
Michael Weiss
6794ee3884 chromiumDev: 92.0.4496.0 -> 92.0.4503.0 
(cherry picked from commit ee727dfdb7)
 2021-05-23 11:48:48 +02:00
Michael Weiss
edcf6c1ee2 chromiumBeta: Add curl as dependency to fix the build 
This fixes the following build error:
[14969/46739] CXX obj/third_party/crashpad/crashpad/util/util/http_transport_libcurl.o[KK[K.o[KKy_reader.or.od.ooor_linux.mojom-shared.o
FAILED: obj/third_party/crashpad/crashpad/util/util/http_transport_libcurl.o
clang++ [...]
../../third_party/crashpad/crashpad/util/net/http_transport_libcurl.cc:17:10: fatal error: 'curl/curl.h' file not found
#include <curl/curl.h>
         ^~~~~~~~~~~~~
1 error generated.

(cherry picked from commit c0ead3d0c4)
 2021-05-23 11:48:47 +02:00
Michael Weiss
01e5b83bdf chromiumBeta: 91.0.4472.27 -> 91.0.4472.38 
(cherry picked from commit 6f6ec9e6f0)
 2021-05-23 11:48:47 +02:00
Michael Weiss
fb9a387788 chromiumDev: 92.0.4491.6 -> 92.0.4496.0 
(cherry picked from commit ac681c966a)
 2021-05-23 11:48:46 +02:00
Michael Weiss
a7d64fb041 chromiumDev: 92.0.4484.7 -> 92.0.4491.6 
(cherry picked from commit 0d7f9f8ac3)
 2021-05-23 11:48:45 +02:00
Michael Weiss
d7b2665724 chromiumBeta: 91.0.4472.19 -> 91.0.4472.27 
(cherry picked from commit 716d176974)
 2021-05-23 11:47:36 +02:00
Michael Weiss
7fc687e174 chromium: Warn about and cleanup old chromiumVersionAtLeast conditionals 
(cherry picked from commit eb335f697e)
 2021-05-23 11:47:35 +02:00
Michael Weiss
3b3292d176 chromiumDev: Fix the configuration phase (#120464) 
The Python 3 support still isn't ready...

(cherry picked from commit 0dee033ce7)
 2021-05-23 11:45:04 +02:00
Michael Weiss
fe4e8217b4 chromiumDev: 91.0.4472.19 -> 92.0.4484.7 
(cherry picked from commit a75b5add13)
 2021-05-23 11:42:31 +02:00
Michael Weiss
0436b59c83 chromiumBeta: 90.0.4430.85 -> 91.0.4472.19 
(cherry picked from commit 6664b74af1)
 2021-05-23 11:42:30 +02:00
Michael Weiss
4cacc4011c chromiumDev: 91.0.4472.10 -> 91.0.4472.19 
(cherry picked from commit 7495ee4f5f)
 2021-05-23 11:42:30 +02:00
Michael Weiss
f0347f99ee chromiumBeta: 90.0.4430.72 -> 90.0.4430.85 
(cherry picked from commit 951e888cbd)
 2021-05-23 11:42:29 +02:00
Michael Weiss
6c5890a181 chromiumDev: Fix the patch phase 
(cherry picked from commit 80f4cce6fa)
 2021-05-23 11:42:28 +02:00
Michael Weiss
ba703219e4 chromiumDev: 91.0.4469.4 -> 91.0.4472.10 
(cherry picked from commit 37f8212780)
 2021-05-23 11:42:28 +02:00
Maximilian Bosch
ac60476ed9 Merge pull request #124061 from mweinelt/20.09/matrix-synapse 
[20.09] matrix-synapse: protect created files
 2021-05-22 23:14:25 +02:00
Martin Weinelt
381cf04eb8 nixos/matrix-synapse: protect created files 
Enforce UMask on the systemd unit to restrict the permissions of files
created. Especially the homeserver signing key should not be world
readable, and media is served through synapse itself, so no other user
needs access to these files.

Use a prestart chmod to fixup the permissions on the signing key.

(cherry picked from commit 79e675444c)
 2021-05-22 22:57:27 +02:00
Michael Raskin
c67af61aad nixos/service-runner: fix evaluation 
Follow-up to: nixos/systemd: allow preStart with other ExecStartPre cmdlines #109976

As the additional ExecStartPre and ExecStartPost are now lists, update
their processing by service-runner.nix

(cherry picked from commit 9486375887)
 2021-05-22 22:57:27 +02:00
Robert Hensing
885dbb2835 nixos/systemd: allow preStart with other ExecStartPre cmdlines 
Declaring them as lists enables the concatenation, supporting
lib.mkBefore, lib.mkOrder, etc.

This is useful when you need to extend a service with a pre-start
script that needs to run as root.

(cherry picked from commit 3936d85ec3)
 2021-05-22 22:39:47 +02:00
Thomas Gerbet
8fdc9d2020 vault: 1.6.4 -> 1.6.5 
Fixes CVE-2021-32923.
 2021-05-22 09:15:45 +02:00
Robbert Gurdeep Singh
1f7155200f nextcloud: add preInstall and postInstall hook calls 
(cherry picked from commit fa4aa72508)
 2021-05-21 22:53:37 +02:00
Robbert Gurdeep Singh
dc7e260a19 nextcloud: 21.0.1 -> 21.0.2 
(cherry picked from commit 63542dbf0a)
 2021-05-21 22:53:36 +02:00
Maximilian Bosch
0eb45c3d1e grafana: 7.5.6 -> 7.5.7 
ChangeLog: https://github.com/grafana/grafana/releases/tag/v7.5.7
(cherry picked from commit 86ee847aaf)
 2021-05-21 22:01:46 +02:00
V
8b5335fd3e nixos/mailman: fix documentation option links 
(cherry picked from commit f4c5ebea50)
 2021-05-21 22:01:29 +02:00
Vladimír Čunát
f8c3c65484 Merge branch 'release-20.09' into staging-20.09 2021-05-21 11:32:02 +02:00
Vladimír Čunát
c8ba00251e xorg.libX11: patch CVE-2021-31535 
On master we have 1.7.x and took update instead in PR #123622
(commit fa8d1b3).  Fortunately the patch is really trivial.
 2021-05-21 11:31:28 +02:00