public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
295,242 Commits 1 Branch 0 Tags
e33cbdc2de088a8047aaddc0867a66dd1c31044d
Commit Graph
295242 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Maximilian Bosch e33cbdc2de nixos/nextcloud: put secrets into the environment of nextcloud-setup.service 
The `$(</path/to/file)`-expansion appears verbatim in the cmdline of
`nextcloud-occ` which means that an unprivileged user could find
sensitive values (i.e. admin password & database password) by monitoring
`/proc/<pid>/cmdline`.

Now, these values don't appear in a command line anymore, but will be
passed as environment variables to `nextcloud-occ`.

(cherry picked from commit 9f37d6aee028679b8a94be59d74984e708acaa85)
 2021-10-09 20:05:38 +02:00
Michael Weiss e358eec704 Merge pull request #141030 from NixOS/backport-141020-to-release-21.05 
[Backport release-21.05] chromium: 94.0.4606.71 -> 94.0.4606.81
 2021-10-09 19:01:09 +02:00
Pavol Rusnak 7cdc04db5a Merge pull request #140352 from prusnak/electron-21.05 
electron_12: 12.1.2 -> 12.2.1
 2021-10-09 17:56:41 +02:00
Maximilian Bosch 0c106b8ef3 Merge pull request #140748 from Ma27/bump-grafana-2105 
[21.05] grafana: 7.5.10 -> 7.5.11, fix CVE-2021-39226
 2021-10-09 13:33:45 +02:00
Maximilian Bosch 0f4ceae398 Merge pull request #140522 from sternenseemann/stable-lowdown-0.9.0 
[21.05]  nixUnstable: 2.4pre20210922 -> 2.4pre20211006 ; init lowdown-0-9
 2021-10-09 01:57:33 +02:00
Maximilian Bosch 0dde2c5c55 Merge pull request #140991 from NixOS/backport-139916-to-release-21.05 
[Backport release-21.05] matrix-synapse: 1.43.0 -> 1.44.0
 2021-10-09 00:44:08 +02:00
Michael Weiss b68a066466 chromium: 94.0.4606.71 -> 94.0.4606.81 
https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html

This update includes 4 security fixes.

CVEs:
CVE-2021-37977 CVE-2021-37978 CVE-2021-37979 CVE-2021-37980

(cherry picked from commit d406bca7461e94cb3c9544e7ccfb3c3bba6df1d2)
 2021-10-08 21:38:26 +00:00
Bruno BELANYI ac9ea0dbd9 python3Packages.pypdf3: init at 1.0.5 
(cherry picked from commit fb81b076729e0675df8475ad340e7e275c1e8769)
 2021-10-08 11:14:44 -07:00
Pavel Borzenkov 73fbbdab68 calibre-web: 0.6.12 -> 0.6.13 
calibre-web no longer starts without proper calibre DB path configured,
so the default testcase (completely unconfigured) is removed.

(cherry picked from commit 80f7656229efee8817880250b2ca097a69898330)
 2021-10-08 11:14:44 -07:00
Bruno BELANYI 89a82934e3 calibre-web: 0.6.11 -> 0.6.12 
(cherry picked from commit 62bdc5114a08040f2e03bac9f0c6a38f343ce29e)
 2021-10-08 11:14:44 -07:00
Domen Kožar ce7a1190a0 Merge pull request #140986 from NixOS/backport-140972-to-release-21.05 
[Backport release-21.05] vscode: 1.60.2 -> 1.61.0
 2021-10-08 11:14:43 -05:00
Sumner Evans ece2e27a1f matrix-synapse: 1.43.0 -> 1.44.0 
(cherry picked from commit 4813681933a1c6b16a8c0ea3f02ea306cb6bccba)
 2021-10-08 15:33:12 +00:00
nixpkgs-upkeep-bot 9380a68a99 vscode: 1.60.2 -> 1.61.0 
(cherry picked from commit ebf42c50c7bb613a590b8bd263d9043569087b37)
 2021-10-08 14:47:56 +00:00
Maximilian Bosch bc66bad58c Merge pull request #140903 from NixOS/backport-140765-to-release-21.05 
[Backport release-21.05] Kernels 2021-10-07
 2021-10-08 15:50:23 +02:00
figsoda 0fcfd8743d Merge pull request #140978 from NixOS/backport-140736-to-release-21.05 
[Backport release-21.05] github-runner: 2.283.1 -> 2.283.3
 2021-10-08 09:45:09 -04:00
Vincent Haupert 287cf39c34 github-runner: 2.283.1 -> 2.283.3 
(cherry picked from commit f6db2063862470a1edc9592222e18b8cf00a114e)
 2021-10-08 13:27:25 +00:00
figsoda af281087f8 Merge pull request #140936 from NixOS/backport-139023-to-release-21.05 
[Backport release-21.05] github-runner: 2.282.1 -> 2.283.1
 2021-10-08 08:09:04 -04:00
R. RyanTM 55c082a0b4 github-runner: 2.282.1 -> 2.283.1 
(cherry picked from commit e095423d1b01e18fc315306619d3e7671a0d5655)
 2021-10-08 06:24:50 +00:00
figsoda 2f47065bcd Merge pull request #134922 from NixOS/backport-126035-to-release-21.05 
[Backport release-21.05] gitui: 0.16.0 -> 0.16.1
 2021-10-07 22:50:48 -04:00
figsoda b9e787a6c4 Merge pull request #135304 from NixOS/backport-135150-to-release-21.05 
[Backport release-21.05] nixos/rspamd: Avoid empty postfix service
 2021-10-07 22:49:12 -04:00
figsoda 7b0b7ff241 Merge pull request #138194 from NixOS/backport-138115-to-release-21.05 
[Backport release-21.05] github-runner: 2.282.0 -> 2.282.1
 2021-10-07 22:46:40 -04:00
figsoda b6d56faa55 Merge pull request #137036 from NixOS/backport-137016-to-release-21.05 
[Backport release-21.05] ccloud-cli: 1.25 > 1.39
 2021-10-07 22:45:42 -04:00
figsoda 89ac315820 Merge pull request #139584 from NixOS/backport-139457-to-release-21.05 
[Backport release-21.05] feh: 3.7.1 -> 3.7.2
 2021-10-07 22:43:00 -04:00
TredwellGit f6bf69beca linux: 5.4.150 -> 5.4.151 
(cherry picked from commit d609f3d79b34c606bdaa62bc93a8ac0703ae2528)
 2021-10-07 22:04:20 +00:00
TredwellGit 2e9cb70a2a linux: 5.14.9 -> 5.14.10 
(cherry picked from commit 86eb5c0943f42026efed0bcd956094b1463d0281)
 2021-10-07 22:04:19 +00:00
TredwellGit 4388bb53c9 linux: 5.10.70 -> 5.10.71 
(cherry picked from commit 6a1f12372598386f525524ff2d9a5ef49e4a6ac9)
 2021-10-07 22:04:18 +00:00
TredwellGit 50e3d6910d linux: 4.9.284 -> 4.9.285 
(cherry picked from commit e7e463220d2cd24d786be0f96c4e67c27577c0a3)
 2021-10-07 22:04:17 +00:00
TredwellGit c3b82359c4 linux: 4.4.285 -> 4.4.287 
(cherry picked from commit 1dfb79c8874d7bf86c0575c2ea0b449f06106774)
 2021-10-07 22:04:16 +00:00
TredwellGit f818ceb30a linux: 4.19.208 -> 4.19.209 
(cherry picked from commit 098ad9636ca54ac644177a193638fb2ec7c9fad6)
 2021-10-07 22:04:15 +00:00
TredwellGit 9785fffe00 linux: 4.14.248 -> 4.14.249 
(cherry picked from commit 8d2f3a9fb1a0a56ca58a10a6c3631b4d48baa2cc)
 2021-10-07 22:04:14 +00:00
Robert Scott 96cf5a2b2d Merge pull request #140785 from risicle/ris-onionshare-known-vulnerabilities-r21.05 
[21.05] onionshare: mark as vulnerable to CVE-2021-41867, CVE-2021-41868
 2021-10-07 20:33:54 +01:00
Doron Behar b1f47c7167 Merge pull request #140654 from kini/backport/zoom-us-version-updates 2021-10-07 19:16:47 +00:00
Timothy DeHerrera 781b1f8e3a create-amis.sh: fix typo 
(cherry picked from commit 3988440b124fc0576fda52d9753a640c1304dcd1)
 2021-10-07 09:43:49 -07:00
Timothy DeHerrera db82eef3ec create-amis.sh: use status message 
The progress ID is fairly useless. Status message is more useful for
humans.

(cherry picked from commit 4410ccc211c9127f343d8dceada26e9ba0f72687)
 2021-10-07 09:43:49 -07:00
Timothy DeHerrera ff568a49ec create-amis.sh: add support for the ZFS AMIs 
(cherry picked from commit 46bbf738eaebf82cf59391d38f5a9d77ecf53049)
 2021-10-07 09:43:49 -07:00
Timothy DeHerrera 9e5f907d1d create-amis.sh: allow uploading private AMIs 
(cherry picked from commit 423a70d4ee31bc9b1bbac3ccbb87b7085826fd81)
 2021-10-07 09:43:49 -07:00
Timothy DeHerrera e33873f610 create-amis.sh: make vars overridable from env 
(cherry picked from commit 0ffd7d80cab0e5e3e152d678e0107be3438cfda8)
 2021-10-07 09:43:49 -07:00
Neubauer, Sebastian b61229ffe8 arcanist: Update certs to fix letsencrypt 
Due to the old root certificate used by letsencrypt expiring, arcanist
could not connect anymore to servers using letsencrypt (like
reviews.llvm.org).

Fix it by using the default nix certificates.

(cherry picked from commit 93eb7786c9365981854a98e508d5b1cae5ee2fcf)
 2021-10-07 11:50:20 -04:00
Artturi ab54145047 Merge pull request #140859 from NixOS/backport-132077-to-release-21.05 
[Backport release-21.05] cargo-criterion: 1.0.1 -> 1.1.0
 2021-10-07 17:47:54 +03:00
R. RyanTM bb3fe4d426 cargo-criterion: 1.0.1 -> 1.1.0 
(cherry picked from commit 4e0d282b7f92ba5d7b46d39068cb01a046d09c05)
 2021-10-07 14:22:46 +00:00
Sergei Trofimovich 4bf640bb9b nixUnstable: pre20211001 -> pre20211006 
The specific reason to update is to pull in logging fix:
  c6718a9d950214 "Don't reset the logger in a vfork"

Otherwise 'nix build' does not report build progress correctly.

(cherry picked from commit 5323bc0f144890c23915e8d54d996a5cff97a05c)
 2021-10-07 12:12:49 +02:00
Martin Weinelt 215c25348c Merge pull request #140759 from mweinelt/21.05/firefox 2021-10-07 10:39:40 +02:00
Artturi 49017a1c5a Merge pull request #140728 from NixOS/backport-140716-to-release-21.05 
[Backport release-21.05] steam: 1.0.0.70 -> 1.0.0.72
 2021-10-07 02:49:07 +03:00
Artturi 378104a43e Merge pull request #140729 from NixOS/backport-140711-to-release-21.05 
[Backport release-21.05] steamPackages.steam-runtime: 0.20210630.0 -> 0.20210906.1
 2021-10-07 02:48:17 +03:00
John Ericson 07c32b3213 Merge pull request #138322 from obsidiansystems/fix-build-rust-crate-cross-21.05 
[Backport release-21.05] buildRustCrate: Fix some things for cross builds
 2021-10-06 19:20:03 -04:00
John Ericson da95ae8e3d buildRustCrate: Don't override the linker during cross 
lld is sometimes need. The caller can do that instead.
 2021-10-06 19:02:32 -04:00
John Ericson 680ff1bb81 buildRustCrate: Add extraRustcOptsForBuildRs 
`extraRustcOpts` should not be used for build.rs, lest it contain
host-platform-specific options during cross builds.
 2021-10-06 19:02:27 -04:00
Michael Weiss b8f6eb7300 Merge pull request #140793 from NixOS/backport-140782-to-release-21.05 
[Backport release-21.05] signal-desktop: 5.18.1 -> 5.19.0
 2021-10-06 22:01:19 +02:00
Michael Weiss 4600fc24a2 signal-desktop: 5.18.1 -> 5.19.0 
(cherry picked from commit b9bc0b9480b619d3d41cd0ad38d0850ccd3294ae)
 2021-10-06 19:07:32 +00:00
Robert Scott 751c22c7f5 onionshare: mark as vulnerable to CVE-2021-41867, CVE-2021-41868 
bumping to a fixed version would require bumping tor, and patching
doesn't appear simple.
 2021-10-06 18:32:43 +01:00