Commit Graph
16530 Commits
Author SHA1 Message Date
Robert Scott 751c22c7f5 onionshare: mark as vulnerable to CVE-2021-41867, CVE-2021-41868
bumping to a fixed version would require bumping tor, and patching
doesn't appear simple.
2021-10-06 18:32:43 +01:00
Michael Weiss 36a05ec28e Merge pull request #140680 from NixOS/backport-140659-to-release-21.05
[Backport release-21.05] signal-desktop: 5.18.0 -> 5.18.1
2021-10-06 19:15:06 +02:00
Martin Weinelt 9fc7bea600 firefox-bin: 92.0.1 -> 93.0
(cherry picked from commit 50bf075202f773a18227c8e19872317fa85953a8)
2021-10-06 15:00:32 +02:00
Martin Weinelt 93e9e59d63 firefox-esr-78: 78.14.0esr -> 78.15.0esr
(cherry picked from commit e4574610ca25c4c69e97f57de02acc2a484154ba)
2021-10-06 15:00:23 +02:00
Martin Weinelt e09bee748f firefox-esr-91: 91.1.0esr -> 91.2.0esr
(cherry picked from commit 1edb8c9622ea3a4157e27ce6577c4590d11aaaee)
2021-10-06 14:59:54 +02:00
Martin Weinelt 5c7df0b18c firefox: 92.0.1 -> 93.0
(cherry picked from commit 7dfcaf5e73feebe12606dbc4c08128af75797fa4)
2021-10-06 14:59:13 +02:00
Martin Weinelt 980a9792cd Merge pull request #140653 from alyssais/firefox-bin-21.05 2021-10-06 14:55:29 +02:00
Michael Weiss 991271a13e signal-desktop: 5.18.0 -> 5.18.1
(cherry picked from commit d98ed0520bbc858398e6385a22e3e1591ffebf62)
2021-10-05 20:57:06 +00:00
Alyssa Ross a73053ed88 firefox-bin: fix license
The Mozilla Trademark Policy is not a license, and applies equally to
our own source builds of Firefox, so it doesn't make sense to mark the
package as unfree because of that.

Quoting <about:license>:

> Binaries of this product have been made available to you by the
> Mozilla Project under the Mozilla Public License 2.0 (MPL).

Since all this does is download a large binary and wrap it, there's
still no point in it ending up in cache.nixos.org, so disable it on
Hydra now that Hydra would otherwise try to build it.

(cherry picked from commit 6a71c7eb1acc70e5cc023dc7e1c9d1a144b9ca82)
2021-10-05 20:02:37 +00:00
Alyssa Ross 9177707228 firefox-bin: 92.0 -> 92.0.1
(cherry picked from commit b256715457b6078d729c64bf91596f808a67e28e)
2021-10-05 17:52:04 +00:00
Tim Steinbach da7dc9f0fe firefox-bin-unwrapped: 91.0.2 -> 92.0
(cherry picked from commit 0247d6f9228789ee440d89ac60c3dd81d80e64c6)
2021-10-05 17:51:02 +00:00
Clemens Lutz 3b736b932c zoom-us: 5.7.31792.0820 -> 5.8.0.16
Old versions have been blacklisted serverside.

(cherry picked from commit 54c3a9d6f8a5da4b2e3bff7d75599f6f212a3db0)
2021-10-05 10:08:41 -07:00
Emmanuel Rosa 0be7f243d7 zoom-us: 5.7.29123.0808 -> 5.7.31792.0820
Old versions have been blacklisted serverside.

(cherry picked from commit 5bb77e3ad96139efe668e81baea2ca064485f4d2)
2021-10-05 10:08:26 -07:00
R. RyanTM c486a1117b zoom-us: 5.7.28991.0726 -> 5.7.29123.0808
Old versions have been blacklisted serverside.

(cherry picked from commit cc7a5e69e396a7860398f3b7b9b33f423b731577)
2021-10-05 10:08:09 -07:00
Vanilla cab4612319 zoom-us: 5.7.28852.0718 -> 5.7.28991.0726
Old versions have been blacklisted serverside.

(cherry picked from commit 8d3fd95037d7283bea828e0b08169c7bcb8fded0)
2021-10-05 10:01:11 -07:00
Michael Adler a3903d58c2 brave: 1.25.68 -> 1.30.87
this fixes many high-severity CVEs

(cherry picked from commit b2f46b6e80c80953a64927bb9333cdef94ccbffe)
2021-10-04 08:56:59 +02:00
Maximilian Bosch 9de38b8522 Merge pull request #138803 from NixOS/backport-138020-to-release-21.05
[Backport release-21.05] tor-browser-bundle-bin: 10.5.5 -> 10.5.6
2021-10-03 19:55:46 +02:00
Michael Weiss 7bc4490174 Merge pull request #140262 from NixOS/backport-140195-to-release-21.05
[Backport release-21.05] ungoogled-chromium: 94.0.4606.61 -> 94.0.4606.71
2021-10-03 13:50:59 +02:00
Vladimír Čunát 400994665e Merge #140243: Revert "fragments: init at 1.5"
...into release-21.05
2021-10-02 18:49:48 +02:00
Michael Weiss 438faef08c ungoogled-chromium: 94.0.4606.61 -> 94.0.4606.71
(cherry picked from commit 360707c5d67a16b26a881237024da3b9305f38aa)
2021-10-02 10:16:06 +00:00
Vladimír Čunát c3e1395498 Revert part of "Merge #140069: transmission: fixes ..."
This reverts commit ff12d52832, reversing
changes made to 92609f3d9b (partially).
2021-10-02 11:06:48 +02:00
Michael Weiss 670ee4d5b6 chromium: 94.0.4606.61 -> 94.0.4606.71
https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html

This update includes 4 security fixes. Google is aware the exploits for
CVE-2021-37975 and CVE-2021-37976 exist in the wild.

CVEs:
CVE-2021-37974 CVE-2021-37975 CVE-2021-37976

(cherry picked from commit ce50eda3949fa3149aea4f0f556dbb63f48e4288)
2021-10-02 08:07:36 +00:00
Vladimír Čunát 7dc32438a8 Revert "[Backport release-21.05] fragments: init at 1.5" 2021-10-02 08:58:27 +02:00
Vladimír Čunát ff12d52832 Merge #140069: transmission: fixes to make a test work
...into release-21.05
2021-10-01 17:45:52 +02:00
Maximilian Bosch 92609f3d9b Merge pull request #139791 from NixOS/backport-139647-to-release-21.05
[Backport release-21.05] element-{web,desktop}: 1.8.5 -> 1.9.0
2021-10-01 12:19:03 +02:00
Vladimír Čunát c28d983bf6 transmission: fixes to make one test work again
Broken by 37134b607 (PR #134007).

(cherry picked from commit ec4a1591007265384c0f036e265e5e38eff83231)
2021-09-30 19:22:15 +00:00
Michael Weiss 5fcf023482 signal-desktop: 5.17.2 -> 5.18.0
(cherry picked from commit 802321a44282f7bf716fce0e4a14ac46d607456e)
2021-09-30 14:06:49 +00:00
Artturi 20e9966c78 Merge pull request #139924 from NixOS/backport-132650-to-release-21.05
[Backport release-21.05] rambox: 0.7.7 -> 0.7.8
2021-09-30 03:47:07 +03:00
Anderson Torres d0ad2b1c52 Merge pull request #138356 from NixOS/backport-138298-to-release-21.05
[Backport release-21.05] palemoon: 29.4.0.2 -> 29.4.1
2021-09-29 12:50:00 -03:00
Adomas Jatužis 064121ec5a rambox: 0.7.7 -> 0.7.8
(cherry picked from commit ff783132f0d9934fde046ed7067d2508e274df18)
2021-09-29 15:21:54 +00:00
Sumner Evans 13edaf4d7d element-desktop: 1.8.5 -> 1.9.0
(cherry picked from commit 406221cda300402d843bcd3dd91cfebf7e57afea)
2021-09-28 17:57:41 +00:00
Sumner Evans 9f0a70ddc3 element-web: 1.8.5 -> 1.9.0
(cherry picked from commit 4484be0a520dccc0ecca7678c1e7473acf1f2108)
2021-09-28 17:57:40 +00:00
Michael Weiss d604d3ee9c ungoogled-chromium: 94.0.4606.54 -> 94.0.4606.61
(cherry picked from commit d66e4eea8550cc10d2f579b4e821639d44deae01)
2021-09-26 14:40:22 +00:00
Michael Weiss 2502b34166 Merge pull request #139329 from NixOS/backport-139318-to-release-21.05
[Backport release-21.05] chromium: 94.0.4606.54 -> 94.0.4606.61
2021-09-25 11:55:23 +02:00
Michael Weiss 0f19ca835b ungoogled-chromium: name -> pname
A partial backport of e4e631ebb81 to keep the diff minimal.
2021-09-25 00:14:35 +02:00
Michael Weiss c20993fbc9 ungoogled-chromium: 93.0.4577.82 -> 94.0.4606.54
(cherry picked from commit afaf8d094b98f8099cf29d789d33b122af6ad1ca)
2021-09-25 00:12:59 +02:00
Michael Weiss 143a7453f0 chromiumBeta: 94.0.4606.54 -> 95.0.4638.17
(cherry picked from commit b9468515932d827651838700969fc6b415590af0)
2021-09-25 00:10:01 +02:00
Michael Weiss df409303ab chromium: 94.0.4606.54 -> 94.0.4606.61
(cherry picked from commit 15bb3ac5a92552e1264bb457084eea72b263e179)
2021-09-24 14:01:33 +00:00
Michael Weiss 2347b9a7db chromium: 93.0.4577.82 -> 94.0.4606.54
https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html

This update includes 19 security fixes.

CVEs:
CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959
CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963
CVE-2021-37964 CVE-2021-37965 CVE-2021-37966 CVE-2021-37967
CVE-2021-37968 CVE-2021-37969 CVE-2021-37970 CVE-2021-37971
CVE-2021-37972

(cherry picked from commit 8d8b451f725b63edec06b033ff2bdaa2f0885b4e)
2021-09-23 21:48:17 +02:00
Michael Weiss a45d7e5e19 chromiumDev: 95.0.4638.10 -> 95.0.4638.17
(cherry picked from commit 56d99a735113e48d2ea51084804c5a59c5603a5f)
2021-09-23 21:48:15 +02:00
Michael Weiss 86f857ec11 chromiumBeta: 94.0.4606.50 -> 94.0.4606.54
(cherry picked from commit 7af2448b6cc227ea85f6076e5b8ee0f517c66d42)
2021-09-23 21:48:14 +02:00
Bernardo Meurer d28990704d Merge pull request #139098 from taku0/thunderbird-bin-91.1.1_release-21.05
[21.05]  thunderbird, thunderbird-bin: 91.1.0 -> 91.1.1
2021-09-23 16:13:25 +00:00
Moritz Hedtke d22c3a6bc1 discord: 0.0.15 → 0.0.16
(cherry picked from commit a22f2688941dd02a69cc422ba349e80030cd474f)
2021-09-22 23:22:11 -07:00
taku0 5a690eb641 thunderbird: 91.1.0 -> 91.1.1
no-buildconfig-90.patch is applied by firefox/common.nix.

D124361.diff is incorporated into the upstream:
https://bugzilla.mozilla.org/show_bug.cgi?id=1727113
2021-09-23 12:38:10 +09:00
taku0 22fb3ec5a0 thunderbird-bin: 91.1.0 -> 91.1.1 2021-09-23 12:34:53 +09:00
Robert Scott 5c8efd0034 Merge pull request #137369 from NixOS/backport-134007-to-release-21.05
[Backport release-21.05] fragments: init at 1.5
2021-09-22 21:32:21 +01:00
FliegendeWurst 64da7fe56f tor-browser-bundle-bin: 10.5.5 -> 10.5.6
(cherry picked from commit 582e0a4926b435715cf4c2b339f458e8917c979f)
2021-09-21 12:13:16 +00:00
Michael Weiss ae29263816 Merge pull request #138567 from primeos/ungoogled-chromium-backport
[21.05] ungoogled-chromium: 92.0.4515.159 -> 93.0.4577.82
2021-09-20 11:07:31 +02:00
Trolli Schmittlauch 8f5774b774 cawbird: 1.4.1 -> 1.4.2
maintenance and bugfix release, see upstream changelog https://github.com/IBBoard/cawbird/releases/tag/v1.4.2

(cherry picked from commit 1e7edcb21f13bfb959cf7fd0d41d52fdb9931164)
2021-09-20 00:20:20 +00:00
Michael Weiss af4338e6e7 ungoogled-chromium: 92.0.4515.159 -> 93.0.4577.82
(cherry picked from commit f8b837c808490644bc7de35108a2212c22c8b262)
2021-09-19 22:27:44 +02:00