Commit Graph
100 Commits
Author SHA1 Message Date
Robert Scott 3c0f229486 Merge pull request #143303 from r-burns/qemu-security-2105
[21.05] qemu: fix CVE-2021-3527, CVE-2021-3682, CVE-2021-3713
2021-10-31 16:09:30 +00:00
Robert Scott 2b8743c7f7 Merge pull request #141243 from risicle/ris-tremor-rs-0.11.6-r21.05
[21.05] tremor-rs: 0.11.2 -> 0.11.6
2021-10-14 21:28:01 +01:00
Robert Scott 6bc516c45c tremor-rs: 0.11.5 -> 0.11.6
(cherry picked from commit 183710009626e81af20afeb055b47c866a18c69c)
2021-10-10 23:18:53 +01:00
Robert Scott 96cf5a2b2d Merge pull request #140785 from risicle/ris-onionshare-known-vulnerabilities-r21.05
[21.05] onionshare: mark as vulnerable to CVE-2021-41867, CVE-2021-41868
2021-10-07 20:33:54 +01:00
Robert Scott 751c22c7f5 onionshare: mark as vulnerable to CVE-2021-41867, CVE-2021-41868
bumping to a fixed version would require bumping tor, and patching
doesn't appear simple.
2021-10-06 18:32:43 +01:00
Robert Scott 7baaef39fe Merge pull request #139575 from NixOS/backport-124297-to-release-21.05
[Backport release-21.05] lief: 0.11.4 -> 0.11.5
2021-09-27 00:00:01 +01:00
Robert Scott 47b0bee8b4 Merge pull request #139440 from NixOS/backport-139401-to-release-21.05
[Backport release-21.05] perlPackages.ConvertASN1: 0.27 -> 0.33
2021-09-25 22:48:27 +01:00
Robert Scott 5c8efd0034 Merge pull request #137369 from NixOS/backport-134007-to-release-21.05
[Backport release-21.05] fragments: init at 1.5
2021-09-22 21:32:21 +01:00
Robert Scott 2216c1b659 Merge pull request #138851 from NixOS/revert-138557-backport-138417-to-staging-21.05
Revert "[Backport staging-21.05] gd: 2.3.0 -> 2.3.3"
2021-09-22 00:39:19 +01:00
Robert Scott fc4cae6760 gd: 2.3.0 -> 2.3.3
remove now-included patch

this partially resolves CVE-2021-40812

(cherry picked from commit d6f49708212822b6a3c0fe598f3a20abf8676990)
2021-09-19 18:06:44 +00:00
Robert Scott d7789bdd9f Merge pull request #138543 from NixOS/backport-138522-to-release-21.05
[Backport release-21.05] wget: 1.21.1 -> 1.21.2
2021-09-19 18:02:19 +01:00
Robert Scott 2bfe1df1f9 atftp: enable tests
(cherry picked from commit 70da17646624c7d24daacc644c3c870a938b2f94)
2021-09-18 20:04:01 +00:00
Robert Scott d62d02793c atftp: 0.7.4 -> 0.7.5
(cherry picked from commit 108423388944d94a080fc5f04f213777f78f11b1)
2021-09-18 20:04:00 +00:00
Robert Scott ef698f793f apr: add patch for CVE-2021-35940
(cherry picked from commit c6c39b5944d1ebc7f294ea9b78350beec67b21a8)
2021-09-16 18:45:22 +00:00
Robert Scott 667c06be31 Merge pull request #137428 from risicle/ris-flask-appbuilder-3.3.2-r21.05
[21.05] python3Packages.flask-appbuilder: 3.3.0 -> 3.3.2
2021-09-14 01:20:28 +01:00
Robert Scott bf76456a65 ghostscript: add passthru.tests.test-corpus-render
this simply attempts rendering every ps/eps/pdf file in the ghostscript
test corpus

(cherry picked from commit 57692f6d3e48766a7c50fa00f6157ece953595ca)
2021-09-12 16:40:49 +00:00
Robert Scott 8125cc6fa7 python3Packages.flask-appbuilder: 3.3.1 -> 3.3.2
(cherry picked from commit 3f795e071dd0e368f09c308248743653c9bb5903)
2021-09-11 19:49:58 +01:00
Robert Scott fbef3e574e python38Packages.flask-restx: add patch for CVE-2021-32838 2021-09-11 13:35:56 +01:00
Robert Scott 2addd4e3ca botan: mark as vulnerable to CVE-2021-40529
(cherry picked from commit 785fa836a105d64e9a0dd93b20240005b473b1fb)
2021-09-08 05:07:42 +00:00
Robert Scott e8fe5c4eb4 botan2: add patch for CVE-2021-40529
(cherry picked from commit 63bf10c8487963d50d67024859178178f776164a)
2021-09-08 05:07:41 +00:00
Robert Scott 57ff6689cc botan2: 2.18.0 -> 2.18.1
(cherry picked from commit 509b969a1804c5060bc9c34183b0752e1df4588a)
2021-09-08 05:07:40 +00:00
Robert Scott 0f6e8f74d2 libgcrypt: 1.9.3 -> 1.9.4
(cherry picked from commit e75b181a6a732e942f7ce66901e1fb806dde0204)
2021-09-08 00:26:28 +00:00
Robert Scott 1bfd789f3f python3Packages.pillow: 8.3.1 -> 8.3.2
disable test test_pyroma

(cherry picked from commit 9683168300c78f6e0001a6098251d3252048df0c)
2021-09-05 18:16:43 +01:00
Robert Scott 8ecb35368a Merge pull request #136787 from NixOS/backport-136364-to-release-21.05
[Backport release-21.05] fig2dev: 3.2.8a -> 3.2.8b
2021-09-05 17:36:35 +01:00
Robert Scott 67cacbf02e inetutils: add patch for CVE-2021-40491 2021-09-04 22:00:18 +01:00
Robert Scott 90de298d15 Merge pull request #136504 from wamserma/backport-mc-135690
[21.05] mc: 4.8.26 -> 4.8.27
2021-09-04 00:44:42 +01:00
Robert Scott 792dba27aa squashfsTools: add patch for CVE-2021-40153 2021-09-02 19:22:21 +01:00
Robert Scott df7a756cbc Merge pull request #136325 from NixOS/backport-136167-to-release-21.05
[Backport release-21.05] grilo: add patch for CVE-2021-39365
2021-08-31 21:48:58 +01:00
Robert Scott 5d3e86447d fossil: 2.14 -> 2.14.2 2021-08-31 19:58:02 +01:00
Robert Scott 867aab7eed grilo: add patch for CVE-2021-39365
(cherry picked from commit f4153fb02c10e63a6fbb501876f609c8a55f262d)
2021-08-31 18:35:55 +00:00
Robert Scott 6a01d735d9 icinga2: 2.12.4 -> 2.12.6 2021-08-25 21:39:25 +01:00
Robert Scott 7255b8c354 Merge pull request #135648 from NixOS/backport-135592-to-release-21.05
[Backport release-21.05] haproxy: 2.3.10 -> 2.3.13
2021-08-25 20:42:28 +01:00
Robert Scott f74adda653 haproxy: 2.3.10 -> 2.3.13
(cherry picked from commit b919ded180a5c72b26a523197c5d9444b25db4f7)
2021-08-25 08:30:58 +00:00
Robert Scott 2bafc080b4 tor: 0.4.5.9 -> 0.4.5.10 2021-08-23 19:43:53 +01:00
Robert Scott 871e8c4d58 Merge pull request #135305 from NixOS/backport-135250-to-release-21.05
[Backport release-21.05] python3Packages.markdown2: 2.4.0 -> 2.4.1
2021-08-22 23:57:30 +01:00
Robert Scott 938357ce19 python3Packages.yamale: 3.0.4 -> 3.0.8
(cherry picked from commit 58078da425264785882e120edd5b28f6a9b92ea6)
2021-08-22 07:22:05 +00:00
Robert Scott 422b95f54f Merge pull request #135086 from risicle/ris-radare2-CVE-2021-3673
[21.05] radare2: add patch for CVE-2021-3673
2021-08-21 23:38:55 +01:00
Robert Scott 0be4a28183 Merge pull request #135001 from jasonrm/backport/134767-to-21.05
[21.05] mysql80: fix build on darwin
2021-08-21 23:22:06 +01:00
Robert Scott 12a8c6cdce radare2: add patch for CVE-2021-3673 2021-08-21 17:09:51 +01:00
Robert Scott 1c8ff5cfc7 ffmpeg-full: enable basic tests
(cherry picked from commit 4b658eda801752204f8be29a8f8db343d12572dc)
2021-08-21 02:46:00 +00:00
Robert Scott 7361aaeb5e ffmpeg: enable basic tests
(cherry picked from commit 649f0ed1a88f6e4cf00705b1cb2f1fbdf1fb780c)
2021-08-21 02:46:00 +00:00
Robert Scott 41a38db165 rsync: add patch for CVE-2020-14387
(cherry picked from commit a08ee2292caa8a676332c695d7d46bd38c235931)
2021-08-19 19:24:10 +01:00
Robert Scott 6d41a79a0e Merge pull request #134013 from NixOS/backport-131867-to-release-21.05
[Backport release-21.05] traefik: 2.4.8 -> 2.4.13
2021-08-16 20:40:19 +01:00
Robert Scott c44b9fa44b Merge pull request #134083 from NixOS/backport-134001-to-release-21.05
[Backport release-21.05] redmine: 4.2.1 -> 4.2.2
2021-08-16 20:39:41 +01:00
Robert Scott 9c7404d96f Merge pull request #134004 from NixOS/backport-132689-to-staging-21.05
[Backport staging-21.05] libsndfile: 1.0.30 -> 1.0.31
2021-08-16 19:12:29 +01:00
Robert Scott 7b11c26712 ndpi: add patch for CVE-2021-36082 2021-08-15 19:11:48 +01:00
Robert Scott 61a9a2d6d7 openvswitch: add patch for CVE-2021-36980 2021-08-14 22:26:16 +01:00
Robert Scott 08252a1cc4 tor: 0.4.5.7 -> 0.4.5.9 2021-08-08 18:29:32 +01:00
Robert Scott 192a522abb wolfssl: add patches for CVE-2021-37155 2021-08-08 15:52:25 +01:00
Robert Scott 348bc5de8b Merge pull request #133111 from NixOS/backport-125133-to-release-21.05
[Backport release-21.05] vhd2vl: fix build error
2021-08-08 13:55:51 +01:00
Robert Scott 712325e1db gnome.caribou: add patch for CVE-2021-3567
adding vala requirement as patching triggers a rerun on valac, also
needing a fix for semi-modern vala support

(cherry picked from commit f13ed324902308e118475c08128c22e91cde982b)
2021-08-06 08:35:59 +00:00
Robert Scott 733682c329 Merge pull request #128675 from NixOS/backport-127172-to-release-21.05
[Backport release-21.05] exiv2: 0.27.3 -> 0.27.4
2021-08-05 19:09:32 +01:00
Robert Scott 368e8bcf0c Merge pull request #132671 from NixOS/backport-132594-to-release-21.05
[Backport release-21.05] putty: 0.75 -> 0.76
2021-08-04 22:28:34 +01:00
Robert Scott 0c98790627 Merge pull request #132662 from NixOS/backport-130833-to-release-21.05
[Backport release-21.05] convos: 6.24 -> 6.26
2021-08-04 20:42:19 +01:00
Robert Scott 3e83eba072 rabbitmq-server: add patches for multiple CVEs
CVE-2021-22116
CVE-2021-32718
CVE-2021-32719
2021-08-04 12:09:05 +09:00
Robert Scott d4590d2100 Merge pull request #132276 from NixOS/backport-132099-to-release-21.05
[Backport release-21.05] python3Packages.tensorflow: add patch fixing NotImplementedError with numpy 1.20
2021-08-02 09:27:49 +01:00
Robert Scott ca81552645 python3Packages.tensorflow: add patch fixing NotImplementedError with numpy 1.20
see upstream pr https://github.com/tensorflow/tensorflow/pull/47957

(cherry picked from commit 42bfc113569c242947b7a0f6edf94031fbb8bac5)
2021-08-01 03:41:21 +00:00
Robert Scott 36dd3023be Merge pull request #131923 from NixOS/backport-131898-to-release-21.05
[Backport release-21.05] fetchmail: 6.4.16 -> 6.4.20
2021-07-31 18:08:05 +01:00
Robert Scott da141a2543 python3Packages.tensorflow: 2.4.1 -> 2.4.2
(cherry picked from commit 98fa0f29bc394e3f9048ae18376b4ce08254fe7e)
2021-07-29 23:07:31 +01:00
Robert Scott 33c7f751dc exif: add patches for CVE-2021-27815
(cherry picked from commit 764a102f35757e8916039f4ed3e88ba35d7a2195)
2021-07-28 22:13:23 +00:00
Robert Scott 92760b1dce Merge pull request #131512 from risicle/ris-varnish-CVE-2021-36740
[21.05] varnish: bump, add patches for CVE-2021-36740
2021-07-28 22:36:48 +01:00
Robert Scott e3ebd9cdb7 libgrss: add patch for CVE-2016-20011
(cherry picked from commit b50d7d0683d61bf00a101ce7b67c7b0f065d7ff6)
2021-07-28 17:49:18 +00:00
Robert Scott 8d894f90d4 varnish62, varnish63: add patch for CVE-2021-36740 2021-07-26 22:19:15 +01:00
Robert Scott 88e99266e6 varnish60: 6.0.7 -> 6.0.8 2021-07-26 22:19:15 +01:00
Robert Scott edf50c4c2b lrzsz: add patch for CVE-2018-10195
provide gettext because modifying source files triggers
localization regeneration

(cherry picked from commit edc01d05a925369f518b0f3cef6f3689e561011e)
2021-07-25 09:30:22 +00:00
Robert Scott f3414d7d2b qemu: add patches for CVE-2021-3545 & CVE-2021-3546
(cherry picked from commit cddea297f28ab67d1f2bf0902bfdcc95ec29a8a0)
2021-07-20 16:39:04 +00:00
Robert Scott c41fdc54ac Merge pull request #129339 from paumr/backport_cnijfilter_4_00_bugfix
[21.05] cnijfilter_4_00: fix broken build
2021-07-18 15:09:50 +01:00
Robert Scott fb831daa53 exiv2: fix for darwin by providing libiconv
(cherry picked from commit 698d433e74a6dcc5d02e1d1f43083ca97433069b)
2021-07-18 00:49:13 +01:00
Robert Scott 460f322171 Merge pull request #130293 from NixOS/backport-130290-to-release-21.05
[Backport release-21.05] fig2dev: apply patch for CVE-2021-3561
2021-07-17 13:47:03 +01:00
Robert Scott c6adf089e0 Merge pull request #129336 from NixOS/backport-129239-to-release-21.05
[Backport release-21.05] trafficserver: 9.0.1 -> 9.0.2
2021-07-17 13:35:26 +01:00
Robert Scott 21b696caf3 python3Packages.fastapi: 0.65.0 -> 0.65.2
resolves CVE-2021-32677

(cherry picked from commit f582fd647537619424e49edbb2fad36c20889194)
2021-07-01 14:54:38 -07:00
Robert Scott 0949abcecd python3Packages.pydantic: 1.8.1 -> 1.8.2
resolves CVE-2021-29510

(cherry picked from commit 7bc6972957203c0857a1e1618c78368e898a4f40)
2021-07-01 14:54:38 -07:00
Robert Scott 0c699a515d Merge pull request #128441 from NixOS/backport-126532-to-release-21.05
[Backport release-21.05] olm: 3.2.2 -> 3.2.4
2021-06-29 00:19:57 +01:00
Robert Scott 0e03bcd641 Merge pull request #127596 from elohmeier/sylpheed-bp
[21.05] sylpheed: Use SNI; fixes TLSv1.3 to imap.gmail.com
2021-06-21 22:19:49 +01:00
Robert Scott d38e37ccf1 Merge pull request #126613 from NixOS/backport-125472-to-release-21.05
[Backport release-21.05] llvmPackages_12.compiler-rt: fix build on darwin
2021-06-18 22:45:26 +01:00
Robert Scott cacfad81c1 Merge pull request #127403 from NixOS/backport-127159-to-release-21.05
[Backport release-21.05] bosh-cli: 6.4.3 -> 6.4.4
2021-06-18 21:47:05 +01:00
Robert Scott 0e9b707b1d Merge pull request #126631 from NixOS/backport-126601-to-release-21.05
[Backport release-21.05] bosh-cli: init at 6.4.3
2021-06-18 20:38:20 +01:00
Robert Scott dd24b1bc0a envoy: 1.16.2 -> 1.16.4
resolving CVE-2021-29258
2021-06-12 22:59:29 +01:00
Robert Scott b76c86678d bosh-cli: init at 6.4.3
(cherry picked from commit 8f3bf74e1c1689e8c04f83a2c4cf58b38c17ab33)
2021-06-11 22:45:52 +00:00
Robert Scott a1446cc63d python3Packages.websockets: add patch for CVE-2021-33880
this is a reintroduction of CVE-2018-1000518 which i had been calling
CVE-2018-1000518-redux before it got its own CVE assigned

(cherry picked from commit aba83e7f878d6c48e781a3934a79f98b072bb659)

(yes, a forward cherry-pick because i fully expected the websockets
9.1 to make it into 21.05)
2021-06-09 19:57:36 +01:00
Robert Scott eabf99b8d8 python3Packages.datasette: add patch for CVE-2021-32670
enable included test
2021-06-09 00:04:28 +01:00
Robert Scott 5de44c1575 Merge pull request #125621 from etu/backport-php-upgrades
[21.05] php: php upgrades
2021-06-05 20:40:48 +01:00
Robert Scott f0f9b4ef89 Merge pull request #125782 from NixOS/backport-125645-to-release-21.05
[Backport release-21.05] wireshark: 3.4.5 -> 3.4.6
2021-06-05 13:53:35 +01:00
Robert Scott ee7d49b968 Merge pull request #125784 from NixOS/backport-125566-to-release-21.05
[Backport release-21.05] pam_u2f: 1.1.0 -> 1.1.1
2021-06-05 13:34:11 +01:00
Robert Scott 9cfa9a79cc Merge pull request #125353 from petabyteboy/feature/gitlab-13-12-2-backport
[21.05] gitlab: 13.12.0 -> 13.12.2
2021-06-03 22:33:34 +01:00
Robert Scott 4714dcf148 Merge pull request #125385 from mweinelt/21.05/lasso
[21.05] lasso: Fix signature verification in AuthnResponse messages
2021-06-03 20:44:50 +01:00
Robert Scott 1e0edddaff curl: add patches for CVE-2021-22897, CVE-2021-22898 & CVE-2021-22901
(cherry picked from commit 742c60f6f839e23822d29b668071baa653253656)
2021-06-02 00:35:37 +00:00
Robert Scott 1c1eefa5e6 Merge pull request #125219 from NixOS/backport-125178-to-release-21.05
[Backport release-21.05] deno: 1.10.2 -> 1.10.3
2021-06-02 00:17:53 +01:00
Robert Scott adfdebe96c Merge pull request #125277 from NixOS/backport-125148-to-release-21.05
[Backport release-21.05] stagit: 0.9.5 → 0.9.6
2021-06-01 22:37:25 +01:00
Robert Scott 5237039cc1 Merge pull request #125230 from NixOS/backport-124603-to-release-21.05
[Backport release-21.05] php.buildPecl: Add checkPhase
2021-06-01 21:00:19 +01:00
Robert Scott 7c1d76fbeb Merge pull request #125126 from NixOS/backport-125111-to-release-21.05
[Backport release-21.05] lua5_4: 5.4.2 -> 5.4.3
2021-06-01 19:44:38 +01:00
Robert Scott 0c988f04d7 Merge pull request #125249 from NixOS/backport-124995-to-release-21.05
[Backport release-21.05] ijq: 0.2.3 → 0.3.4
2021-06-01 19:38:40 +01:00
Robert Scott 6f38e99a9e Merge pull request #125248 from NixOS/backport-124986-to-release-21.05
[Backport release-21.05] libccd: fix pkgconfig file paths
2021-06-01 19:32:36 +01:00
Robert Scott dbfaab83a8 Merge pull request #125247 from NixOS/backport-124996-to-release-21.05
[Backport release-21.05] schismtracker: 20200412 -> 20210525
2021-06-01 18:13:16 +01:00
Robert Scott 71de7777c2 Merge pull request #125164 from NixOS/backport-125160-to-release-21.05
[Backport release-21.05] delve: disable source fortify at runtime
2021-06-01 16:15:30 +01:00
Robert Scott 37b13b3d08 Merge pull request #125226 from NixOS/backport-124892-to-release-21.05
[Backport release-21.05] yara: 4.0.5 -> 4.1.1
2021-06-01 15:34:44 +01:00
Robert Scott abc7f8ee12 yara: add enableStatic mode
useful because tests can be enabled in this mode

(cherry picked from commit 8cda1cc59e7cd01ce2ff18bc78f6b7a0e7faed19)
2021-06-01 14:02:39 +00:00
Robert Scott 529b6eee47 yara: 4.0.5 -> 4.1.1
(cherry picked from commit 2d7f554229393ddb0441dd31e37db7ad7b48dab0)
2021-06-01 14:02:39 +00:00
Robert Scott 1c27669fea Merge pull request #125045 from NixOS/backport-124802-to-release-21.05
[Backport release-21.05] tilt: 0.18.10 -> 0.20.5
2021-05-31 17:50:30 +01:00
Robert Scott ab98a6e109 Merge pull request #125057 from NixOS/backport-124730-to-release-21.05
[Backport release-21.05] morph: 1.5.0 -> 1.6.0
2021-05-31 15:53:49 +01:00