Robert Scott
3c0f229486
Merge pull request #143303 from r-burns/qemu-security-2105
...
[21.05] qemu: fix CVE-2021-3527, CVE-2021-3682, CVE-2021-3713
2021-10-31 16:09:30 +00:00
Robert Scott
2b8743c7f7
Merge pull request #141243 from risicle/ris-tremor-rs-0.11.6-r21.05
...
[21.05] tremor-rs: 0.11.2 -> 0.11.6
2021-10-14 21:28:01 +01:00
Robert Scott
6bc516c45c
tremor-rs: 0.11.5 -> 0.11.6
...
(cherry picked from commit 183710009626e81af20afeb055b47c866a18c69c)
2021-10-10 23:18:53 +01:00
Robert Scott
96cf5a2b2d
Merge pull request #140785 from risicle/ris-onionshare-known-vulnerabilities-r21.05
...
[21.05] onionshare: mark as vulnerable to CVE-2021-41867, CVE-2021-41868
2021-10-07 20:33:54 +01:00
Robert Scott
751c22c7f5
onionshare: mark as vulnerable to CVE-2021-41867, CVE-2021-41868
...
bumping to a fixed version would require bumping tor, and patching
doesn't appear simple.
2021-10-06 18:32:43 +01:00
Robert Scott
7baaef39fe
Merge pull request #139575 from NixOS/backport-124297-to-release-21.05
...
[Backport release-21.05] lief: 0.11.4 -> 0.11.5
2021-09-27 00:00:01 +01:00
Robert Scott
47b0bee8b4
Merge pull request #139440 from NixOS/backport-139401-to-release-21.05
...
[Backport release-21.05] perlPackages.ConvertASN1: 0.27 -> 0.33
2021-09-25 22:48:27 +01:00
Robert Scott
5c8efd0034
Merge pull request #137369 from NixOS/backport-134007-to-release-21.05
...
[Backport release-21.05] fragments: init at 1.5
2021-09-22 21:32:21 +01:00
Robert Scott
2216c1b659
Merge pull request #138851 from NixOS/revert-138557-backport-138417-to-staging-21.05
...
Revert "[Backport staging-21.05] gd: 2.3.0 -> 2.3.3"
2021-09-22 00:39:19 +01:00
Robert Scott
fc4cae6760
gd: 2.3.0 -> 2.3.3
...
remove now-included patch
this partially resolves CVE-2021-40812
(cherry picked from commit d6f49708212822b6a3c0fe598f3a20abf8676990)
2021-09-19 18:06:44 +00:00
Robert Scott
d7789bdd9f
Merge pull request #138543 from NixOS/backport-138522-to-release-21.05
...
[Backport release-21.05] wget: 1.21.1 -> 1.21.2
2021-09-19 18:02:19 +01:00
Robert Scott
2bfe1df1f9
atftp: enable tests
...
(cherry picked from commit 70da17646624c7d24daacc644c3c870a938b2f94)
2021-09-18 20:04:01 +00:00
Robert Scott
d62d02793c
atftp: 0.7.4 -> 0.7.5
...
(cherry picked from commit 108423388944d94a080fc5f04f213777f78f11b1)
2021-09-18 20:04:00 +00:00
Robert Scott
ef698f793f
apr: add patch for CVE-2021-35940
...
(cherry picked from commit c6c39b5944d1ebc7f294ea9b78350beec67b21a8)
2021-09-16 18:45:22 +00:00
Robert Scott
667c06be31
Merge pull request #137428 from risicle/ris-flask-appbuilder-3.3.2-r21.05
...
[21.05] python3Packages.flask-appbuilder: 3.3.0 -> 3.3.2
2021-09-14 01:20:28 +01:00
Robert Scott
bf76456a65
ghostscript: add passthru.tests.test-corpus-render
...
this simply attempts rendering every ps/eps/pdf file in the ghostscript
test corpus
(cherry picked from commit 57692f6d3e48766a7c50fa00f6157ece953595ca)
2021-09-12 16:40:49 +00:00
Robert Scott
8125cc6fa7
python3Packages.flask-appbuilder: 3.3.1 -> 3.3.2
...
(cherry picked from commit 3f795e071dd0e368f09c308248743653c9bb5903)
2021-09-11 19:49:58 +01:00
Robert Scott
fbef3e574e
python38Packages.flask-restx: add patch for CVE-2021-32838
2021-09-11 13:35:56 +01:00
Robert Scott
2addd4e3ca
botan: mark as vulnerable to CVE-2021-40529
...
(cherry picked from commit 785fa836a105d64e9a0dd93b20240005b473b1fb)
2021-09-08 05:07:42 +00:00
Robert Scott
e8fe5c4eb4
botan2: add patch for CVE-2021-40529
...
(cherry picked from commit 63bf10c8487963d50d67024859178178f776164a)
2021-09-08 05:07:41 +00:00
Robert Scott
57ff6689cc
botan2: 2.18.0 -> 2.18.1
...
(cherry picked from commit 509b969a1804c5060bc9c34183b0752e1df4588a)
2021-09-08 05:07:40 +00:00
Robert Scott
0f6e8f74d2
libgcrypt: 1.9.3 -> 1.9.4
...
(cherry picked from commit e75b181a6a732e942f7ce66901e1fb806dde0204)
2021-09-08 00:26:28 +00:00
Robert Scott
1bfd789f3f
python3Packages.pillow: 8.3.1 -> 8.3.2
...
disable test test_pyroma
(cherry picked from commit 9683168300c78f6e0001a6098251d3252048df0c)
2021-09-05 18:16:43 +01:00
Robert Scott
8ecb35368a
Merge pull request #136787 from NixOS/backport-136364-to-release-21.05
...
[Backport release-21.05] fig2dev: 3.2.8a -> 3.2.8b
2021-09-05 17:36:35 +01:00
Robert Scott
67cacbf02e
inetutils: add patch for CVE-2021-40491
2021-09-04 22:00:18 +01:00
Robert Scott
90de298d15
Merge pull request #136504 from wamserma/backport-mc-135690
...
[21.05] mc: 4.8.26 -> 4.8.27
2021-09-04 00:44:42 +01:00
Robert Scott
792dba27aa
squashfsTools: add patch for CVE-2021-40153
2021-09-02 19:22:21 +01:00
Robert Scott
df7a756cbc
Merge pull request #136325 from NixOS/backport-136167-to-release-21.05
...
[Backport release-21.05] grilo: add patch for CVE-2021-39365
2021-08-31 21:48:58 +01:00
Robert Scott
5d3e86447d
fossil: 2.14 -> 2.14.2
2021-08-31 19:58:02 +01:00
Robert Scott
867aab7eed
grilo: add patch for CVE-2021-39365
...
(cherry picked from commit f4153fb02c10e63a6fbb501876f609c8a55f262d)
2021-08-31 18:35:55 +00:00
Robert Scott
6a01d735d9
icinga2: 2.12.4 -> 2.12.6
2021-08-25 21:39:25 +01:00
Robert Scott
7255b8c354
Merge pull request #135648 from NixOS/backport-135592-to-release-21.05
...
[Backport release-21.05] haproxy: 2.3.10 -> 2.3.13
2021-08-25 20:42:28 +01:00
Robert Scott
f74adda653
haproxy: 2.3.10 -> 2.3.13
...
(cherry picked from commit b919ded180a5c72b26a523197c5d9444b25db4f7)
2021-08-25 08:30:58 +00:00
Robert Scott
2bafc080b4
tor: 0.4.5.9 -> 0.4.5.10
2021-08-23 19:43:53 +01:00
Robert Scott
871e8c4d58
Merge pull request #135305 from NixOS/backport-135250-to-release-21.05
...
[Backport release-21.05] python3Packages.markdown2: 2.4.0 -> 2.4.1
2021-08-22 23:57:30 +01:00
Robert Scott
938357ce19
python3Packages.yamale: 3.0.4 -> 3.0.8
...
(cherry picked from commit 58078da425264785882e120edd5b28f6a9b92ea6)
2021-08-22 07:22:05 +00:00
Robert Scott
422b95f54f
Merge pull request #135086 from risicle/ris-radare2-CVE-2021-3673
...
[21.05] radare2: add patch for CVE-2021-3673
2021-08-21 23:38:55 +01:00
Robert Scott
0be4a28183
Merge pull request #135001 from jasonrm/backport/134767-to-21.05
...
[21.05] mysql80: fix build on darwin
2021-08-21 23:22:06 +01:00
Robert Scott
12a8c6cdce
radare2: add patch for CVE-2021-3673
2021-08-21 17:09:51 +01:00
Robert Scott
1c8ff5cfc7
ffmpeg-full: enable basic tests
...
(cherry picked from commit 4b658eda801752204f8be29a8f8db343d12572dc)
2021-08-21 02:46:00 +00:00
Robert Scott
7361aaeb5e
ffmpeg: enable basic tests
...
(cherry picked from commit 649f0ed1a88f6e4cf00705b1cb2f1fbdf1fb780c)
2021-08-21 02:46:00 +00:00
Robert Scott
41a38db165
rsync: add patch for CVE-2020-14387
...
(cherry picked from commit a08ee2292caa8a676332c695d7d46bd38c235931)
2021-08-19 19:24:10 +01:00
Robert Scott
6d41a79a0e
Merge pull request #134013 from NixOS/backport-131867-to-release-21.05
...
[Backport release-21.05] traefik: 2.4.8 -> 2.4.13
2021-08-16 20:40:19 +01:00
Robert Scott
c44b9fa44b
Merge pull request #134083 from NixOS/backport-134001-to-release-21.05
...
[Backport release-21.05] redmine: 4.2.1 -> 4.2.2
2021-08-16 20:39:41 +01:00
Robert Scott
9c7404d96f
Merge pull request #134004 from NixOS/backport-132689-to-staging-21.05
...
[Backport staging-21.05] libsndfile: 1.0.30 -> 1.0.31
2021-08-16 19:12:29 +01:00
Robert Scott
7b11c26712
ndpi: add patch for CVE-2021-36082
2021-08-15 19:11:48 +01:00
Robert Scott
61a9a2d6d7
openvswitch: add patch for CVE-2021-36980
2021-08-14 22:26:16 +01:00
Robert Scott
08252a1cc4
tor: 0.4.5.7 -> 0.4.5.9
2021-08-08 18:29:32 +01:00
Robert Scott
192a522abb
wolfssl: add patches for CVE-2021-37155
2021-08-08 15:52:25 +01:00
Robert Scott
348bc5de8b
Merge pull request #133111 from NixOS/backport-125133-to-release-21.05
...
[Backport release-21.05] vhd2vl: fix build error
2021-08-08 13:55:51 +01:00
Robert Scott
712325e1db
gnome.caribou: add patch for CVE-2021-3567
...
adding vala requirement as patching triggers a rerun on valac, also
needing a fix for semi-modern vala support
(cherry picked from commit f13ed324902308e118475c08128c22e91cde982b)
2021-08-06 08:35:59 +00:00
Robert Scott
733682c329
Merge pull request #128675 from NixOS/backport-127172-to-release-21.05
...
[Backport release-21.05] exiv2: 0.27.3 -> 0.27.4
2021-08-05 19:09:32 +01:00
Robert Scott
368e8bcf0c
Merge pull request #132671 from NixOS/backport-132594-to-release-21.05
...
[Backport release-21.05] putty: 0.75 -> 0.76
2021-08-04 22:28:34 +01:00
Robert Scott
0c98790627
Merge pull request #132662 from NixOS/backport-130833-to-release-21.05
...
[Backport release-21.05] convos: 6.24 -> 6.26
2021-08-04 20:42:19 +01:00
Robert Scott
3e83eba072
rabbitmq-server: add patches for multiple CVEs
...
CVE-2021-22116
CVE-2021-32718
CVE-2021-32719
2021-08-04 12:09:05 +09:00
Robert Scott
d4590d2100
Merge pull request #132276 from NixOS/backport-132099-to-release-21.05
...
[Backport release-21.05] python3Packages.tensorflow: add patch fixing NotImplementedError with numpy 1.20
2021-08-02 09:27:49 +01:00
Robert Scott
ca81552645
python3Packages.tensorflow: add patch fixing NotImplementedError with numpy 1.20
...
see upstream pr https://github.com/tensorflow/tensorflow/pull/47957
(cherry picked from commit 42bfc113569c242947b7a0f6edf94031fbb8bac5)
2021-08-01 03:41:21 +00:00
Robert Scott
36dd3023be
Merge pull request #131923 from NixOS/backport-131898-to-release-21.05
...
[Backport release-21.05] fetchmail: 6.4.16 -> 6.4.20
2021-07-31 18:08:05 +01:00
Robert Scott
da141a2543
python3Packages.tensorflow: 2.4.1 -> 2.4.2
...
(cherry picked from commit 98fa0f29bc394e3f9048ae18376b4ce08254fe7e)
2021-07-29 23:07:31 +01:00
Robert Scott
33c7f751dc
exif: add patches for CVE-2021-27815
...
(cherry picked from commit 764a102f35757e8916039f4ed3e88ba35d7a2195)
2021-07-28 22:13:23 +00:00
Robert Scott
92760b1dce
Merge pull request #131512 from risicle/ris-varnish-CVE-2021-36740
...
[21.05] varnish: bump, add patches for CVE-2021-36740
2021-07-28 22:36:48 +01:00
Robert Scott
e3ebd9cdb7
libgrss: add patch for CVE-2016-20011
...
(cherry picked from commit b50d7d0683d61bf00a101ce7b67c7b0f065d7ff6)
2021-07-28 17:49:18 +00:00
Robert Scott
8d894f90d4
varnish62, varnish63: add patch for CVE-2021-36740
2021-07-26 22:19:15 +01:00
Robert Scott
88e99266e6
varnish60: 6.0.7 -> 6.0.8
2021-07-26 22:19:15 +01:00
Robert Scott
edf50c4c2b
lrzsz: add patch for CVE-2018-10195
...
provide gettext because modifying source files triggers
localization regeneration
(cherry picked from commit edc01d05a925369f518b0f3cef6f3689e561011e)
2021-07-25 09:30:22 +00:00
Robert Scott
f3414d7d2b
qemu: add patches for CVE-2021-3545 & CVE-2021-3546
...
(cherry picked from commit cddea297f28ab67d1f2bf0902bfdcc95ec29a8a0)
2021-07-20 16:39:04 +00:00
Robert Scott
c41fdc54ac
Merge pull request #129339 from paumr/backport_cnijfilter_4_00_bugfix
...
[21.05] cnijfilter_4_00: fix broken build
2021-07-18 15:09:50 +01:00
Robert Scott
fb831daa53
exiv2: fix for darwin by providing libiconv
...
(cherry picked from commit 698d433e74a6dcc5d02e1d1f43083ca97433069b)
2021-07-18 00:49:13 +01:00
Robert Scott
460f322171
Merge pull request #130293 from NixOS/backport-130290-to-release-21.05
...
[Backport release-21.05] fig2dev: apply patch for CVE-2021-3561
2021-07-17 13:47:03 +01:00
Robert Scott
c6adf089e0
Merge pull request #129336 from NixOS/backport-129239-to-release-21.05
...
[Backport release-21.05] trafficserver: 9.0.1 -> 9.0.2
2021-07-17 13:35:26 +01:00
Robert Scott
21b696caf3
python3Packages.fastapi: 0.65.0 -> 0.65.2
...
resolves CVE-2021-32677
(cherry picked from commit f582fd647537619424e49edbb2fad36c20889194)
2021-07-01 14:54:38 -07:00
Robert Scott
0949abcecd
python3Packages.pydantic: 1.8.1 -> 1.8.2
...
resolves CVE-2021-29510
(cherry picked from commit 7bc6972957203c0857a1e1618c78368e898a4f40)
2021-07-01 14:54:38 -07:00
Robert Scott
0c699a515d
Merge pull request #128441 from NixOS/backport-126532-to-release-21.05
...
[Backport release-21.05] olm: 3.2.2 -> 3.2.4
2021-06-29 00:19:57 +01:00
Robert Scott
0e03bcd641
Merge pull request #127596 from elohmeier/sylpheed-bp
...
[21.05] sylpheed: Use SNI; fixes TLSv1.3 to imap.gmail.com
2021-06-21 22:19:49 +01:00
Robert Scott
d38e37ccf1
Merge pull request #126613 from NixOS/backport-125472-to-release-21.05
...
[Backport release-21.05] llvmPackages_12.compiler-rt: fix build on darwin
2021-06-18 22:45:26 +01:00
Robert Scott
cacfad81c1
Merge pull request #127403 from NixOS/backport-127159-to-release-21.05
...
[Backport release-21.05] bosh-cli: 6.4.3 -> 6.4.4
2021-06-18 21:47:05 +01:00
Robert Scott
0e9b707b1d
Merge pull request #126631 from NixOS/backport-126601-to-release-21.05
...
[Backport release-21.05] bosh-cli: init at 6.4.3
2021-06-18 20:38:20 +01:00
Robert Scott
dd24b1bc0a
envoy: 1.16.2 -> 1.16.4
...
resolving CVE-2021-29258
2021-06-12 22:59:29 +01:00
Robert Scott
b76c86678d
bosh-cli: init at 6.4.3
...
(cherry picked from commit 8f3bf74e1c1689e8c04f83a2c4cf58b38c17ab33)
2021-06-11 22:45:52 +00:00
Robert Scott
a1446cc63d
python3Packages.websockets: add patch for CVE-2021-33880
...
this is a reintroduction of CVE-2018-1000518 which i had been calling
CVE-2018-1000518-redux before it got its own CVE assigned
(cherry picked from commit aba83e7f878d6c48e781a3934a79f98b072bb659)
(yes, a forward cherry-pick because i fully expected the websockets
9.1 to make it into 21.05)
2021-06-09 19:57:36 +01:00
Robert Scott
eabf99b8d8
python3Packages.datasette: add patch for CVE-2021-32670
...
enable included test
2021-06-09 00:04:28 +01:00
Robert Scott
5de44c1575
Merge pull request #125621 from etu/backport-php-upgrades
...
[21.05] php: php upgrades
2021-06-05 20:40:48 +01:00
Robert Scott
f0f9b4ef89
Merge pull request #125782 from NixOS/backport-125645-to-release-21.05
...
[Backport release-21.05] wireshark: 3.4.5 -> 3.4.6
2021-06-05 13:53:35 +01:00
Robert Scott
ee7d49b968
Merge pull request #125784 from NixOS/backport-125566-to-release-21.05
...
[Backport release-21.05] pam_u2f: 1.1.0 -> 1.1.1
2021-06-05 13:34:11 +01:00
Robert Scott
9cfa9a79cc
Merge pull request #125353 from petabyteboy/feature/gitlab-13-12-2-backport
...
[21.05] gitlab: 13.12.0 -> 13.12.2
2021-06-03 22:33:34 +01:00
Robert Scott
4714dcf148
Merge pull request #125385 from mweinelt/21.05/lasso
...
[21.05] lasso: Fix signature verification in AuthnResponse messages
2021-06-03 20:44:50 +01:00
Robert Scott
1e0edddaff
curl: add patches for CVE-2021-22897, CVE-2021-22898 & CVE-2021-22901
...
(cherry picked from commit 742c60f6f839e23822d29b668071baa653253656)
2021-06-02 00:35:37 +00:00
Robert Scott
1c1eefa5e6
Merge pull request #125219 from NixOS/backport-125178-to-release-21.05
...
[Backport release-21.05] deno: 1.10.2 -> 1.10.3
2021-06-02 00:17:53 +01:00
Robert Scott
adfdebe96c
Merge pull request #125277 from NixOS/backport-125148-to-release-21.05
...
[Backport release-21.05] stagit: 0.9.5 → 0.9.6
2021-06-01 22:37:25 +01:00
Robert Scott
5237039cc1
Merge pull request #125230 from NixOS/backport-124603-to-release-21.05
...
[Backport release-21.05] php.buildPecl: Add checkPhase
2021-06-01 21:00:19 +01:00
Robert Scott
7c1d76fbeb
Merge pull request #125126 from NixOS/backport-125111-to-release-21.05
...
[Backport release-21.05] lua5_4: 5.4.2 -> 5.4.3
2021-06-01 19:44:38 +01:00
Robert Scott
0c988f04d7
Merge pull request #125249 from NixOS/backport-124995-to-release-21.05
...
[Backport release-21.05] ijq: 0.2.3 → 0.3.4
2021-06-01 19:38:40 +01:00
Robert Scott
6f38e99a9e
Merge pull request #125248 from NixOS/backport-124986-to-release-21.05
...
[Backport release-21.05] libccd: fix pkgconfig file paths
2021-06-01 19:32:36 +01:00
Robert Scott
dbfaab83a8
Merge pull request #125247 from NixOS/backport-124996-to-release-21.05
...
[Backport release-21.05] schismtracker: 20200412 -> 20210525
2021-06-01 18:13:16 +01:00
Robert Scott
71de7777c2
Merge pull request #125164 from NixOS/backport-125160-to-release-21.05
...
[Backport release-21.05] delve: disable source fortify at runtime
2021-06-01 16:15:30 +01:00
Robert Scott
37b13b3d08
Merge pull request #125226 from NixOS/backport-124892-to-release-21.05
...
[Backport release-21.05] yara: 4.0.5 -> 4.1.1
2021-06-01 15:34:44 +01:00
Robert Scott
abc7f8ee12
yara: add enableStatic mode
...
useful because tests can be enabled in this mode
(cherry picked from commit 8cda1cc59e7cd01ce2ff18bc78f6b7a0e7faed19)
2021-06-01 14:02:39 +00:00
Robert Scott
529b6eee47
yara: 4.0.5 -> 4.1.1
...
(cherry picked from commit 2d7f554229393ddb0441dd31e37db7ad7b48dab0)
2021-06-01 14:02:39 +00:00
Robert Scott
1c27669fea
Merge pull request #125045 from NixOS/backport-124802-to-release-21.05
...
[Backport release-21.05] tilt: 0.18.10 -> 0.20.5
2021-05-31 17:50:30 +01:00
Robert Scott
ab98a6e109
Merge pull request #125057 from NixOS/backport-124730-to-release-21.05
...
[Backport release-21.05] morph: 1.5.0 -> 1.6.0
2021-05-31 15:53:49 +01:00