Commit Graph

294828 Commits

Author SHA1 Message Date
ajs124 2c75ca9c41
Merge pull request #138276 from NeQuissimus/2105_hardened_backport
[21.05] Hardened kernels backports
2021-09-17 18:04:05 +02:00
Maximilian Bosch 9723430b08
Merge pull request #138282 from NixOS/backport-138114-to-release-21.05
[Backport release-21.05] wireguard-tools: 1.0.20210424 -> 1.0.20210914
2021-09-17 16:41:42 +02:00
ajs124 756786068f
linux/hardened/patches/5.14: 5.14.4-hardened1 -> 5.14.5-hardened1
(cherry picked from commit 9f34448a98ecc21726dd5e87b7a61daf76f954de)
2021-09-17 10:16:51 -04:00
ajs124 939149de74
linux/hardened/patches/5.4: 5.4.146-hardened1 -> 5.4.147-hardened1
(cherry picked from commit 36e21638f5f308d8985035bca9c14595c0a3b65f)
2021-09-17 10:16:50 -04:00
ajs124 e6b00f2f5f
linux/hardened/patches/5.13: 5.13.17-hardened1 -> 5.13.18-hardened1
(cherry picked from commit 7c04d2e390a7dbb87a428f625839db42071b7b99)
2021-09-17 10:16:50 -04:00
ajs124 f35f202e06
linux/hardened/patches/5.10: 5.10.65-hardened1 -> 5.10.66-hardened1
(cherry picked from commit 031afe4faa1e390ebdc10eb145aaeab9be978cea)
2021-09-17 10:16:50 -04:00
Maximilian Bosch 0e29479866 wireguard-tools: 1.0.20210424 -> 1.0.20210914
ChangeLog: https://lists.zx2c4.com/pipermail/wireguard/2021-September/007049.html

This doesn't seem to have any implications for NixOS users, but appears
to have a few fixes that seem relevant to Darwin users including:

    wg-quick: darwin: account for "link#XX" gateways

    On macOS, under specific configurations, the `netstat -nr -f inet` and
    `netstat -nr -f inet6` outputs break gateway collection.

(cherry picked from commit d37ab4d0ee6aeb3187a0f0042cfca966c3ef2f78)
2021-09-17 13:55:18 +00:00
Maximilian Bosch cdc1eaf2f4
Merge pull request #138162 from NixOS/backport-138149-to-release-21.05
[Backport release-21.05] Kernels 2021-09-16
2021-09-17 15:51:34 +02:00
happysalada 30d0257247 vscodium: fix sha256 on linux
(cherry picked from commit 65a010bcead26c971fe5b01bb02c4a9f02d02271)
2021-09-17 19:10:27 +09:00
nixpkgs-upkeep-bot 5f4c5d41ea vscodium: 1.60.0 -> 1.60.1
(cherry picked from commit 4828eb7ae4f1105dcebf7245f453c607b9c77c1d)
2021-09-17 19:10:27 +09:00
R. RyanTM 912279a742 symfony-cli: 4.26.0 -> 4.26.3
(cherry picked from commit ff6fb898ac11223e281cffac992246e3b6c31a97)
2021-09-17 09:25:41 +02:00
Pavol Rusnak ebf419e737
Merge pull request #137988 from prusnak/electron-21.05
[21.05] electron_12: 12.1.0 -> 12.1.1
2021-09-17 00:21:07 +02:00
Luke Granger-Brown 6ffcbaf54d
Merge pull request #138171 from NixOS/backport-136194-to-release-21.05
[Backport release-21.05] apr: add patch for CVE-2021-35940
2021-09-16 21:06:57 +01:00
Luke Granger-Brown b9e98053fe
Merge pull request #138170 from NixOS/backport-138136-to-release-21.05
[Backport release-21.05] apacheHttpd: 2.4.48 -> 2.4.49
2021-09-16 21:05:50 +01:00
Robert Scott ef698f793f apr: add patch for CVE-2021-35940
(cherry picked from commit c6c39b5944d1ebc7f294ea9b78350beec67b21a8)
2021-09-16 18:45:22 +00:00
Aaron Andersen 6fbf63ac60 apacheHttpd: 2.4.48 -> 2.4.49
(cherry picked from commit 0518560cf13e1a08a93de6b562d6326c19a3294f)
2021-09-16 18:34:07 +00:00
TredwellGit 6c5790dfb6 linux/hardened/patches/5.4: 5.4.144-hardened1 -> 5.4.146-hardened1
(cherry picked from commit 00c500e9fc975957b4357ce46d5f10e8bf2cd1ba)
2021-09-16 16:18:21 +00:00
TredwellGit fbc340ce50 linux/hardened/patches/5.14: 5.14.2-hardened1 -> 5.14.4-hardened1
(cherry picked from commit 60b711316445f580345d815cfd04be592b136b8a)
2021-09-16 16:18:20 +00:00
TredwellGit cc619f3c02 linux/hardened/patches/5.13: 5.13.15-hardened1 -> 5.13.17-hardened1
(cherry picked from commit a8de1dcd2b5896d141bc89e0fc2cc665cd9581d7)
2021-09-16 16:18:19 +00:00
TredwellGit a1b9329753 linux/hardened/patches/5.10: 5.10.63-hardened1 -> 5.10.65-hardened1
(cherry picked from commit 48e902a2efa3bb149d4526125e57c1429af95014)
2021-09-16 16:18:19 +00:00
TredwellGit 49d3b04cd9 linux: 5.4.145 -> 5.4.147
(cherry picked from commit 100f0569b54abaf1ed49ed8f525678a7eb02ab9a)
2021-09-16 16:18:18 +00:00
TredwellGit 9b42fb070f linux: 5.14.3 -> 5.14.5
(cherry picked from commit 4a05e7297cc766a2e295725bb991a50605cebbea)
2021-09-16 16:18:17 +00:00
TredwellGit 2521537c8f linux: 5.13.16 -> 5.13.18
(cherry picked from commit 4954336e2b81ebcc108ffae0bf3a0a39d301030b)
2021-09-16 16:18:16 +00:00
TredwellGit a3a2df2aaa linux: 5.10.64 -> 5.10.66
(cherry picked from commit 6c829ce0830528f8e0ea78acfedec8a345b1f81b)
2021-09-16 16:18:15 +00:00
Patrick Hilhorst 4d71703763
Merge pull request #137439 from NixOS/backport-137328-to-release-21.05 2021-09-16 13:34:36 +02:00
Jan Solanti 66528906a5 pipewire: enable manpages
(cherry picked from commit 044da009d172482fc8b748bcc92cced3c915bb0e)
2021-09-16 09:48:45 +00:00
Jan Solanti eae9551832 pipewire: 0.3.34 -> 0.3.35
(cherry picked from commit f4fbb211765c265203004014e63a4e149520f6b9)
2021-09-16 09:48:45 +00:00
Jörg Thalheim 8dd8bd8be7
Merge pull request #137984 from NixOS/backport-137673-to-release-21.05
[Backport release-21.05] github-runner: 2.281.1 -> 2.282.0, prevent self-update
2021-09-15 12:44:29 +01:00
TredwellGit e6b75fcb70
electron_12: 12.1.0 -> 12.1.1
https://github.com/electron/electron/releases/tag/v12.1.1
(cherry picked from commit 40d83a9a2159809d2d47fc6598665c184578f1cf)
2021-09-15 11:58:00 +02:00
Vincent Haupert d58baa249b github-runner: 2.281.1 -> 2.282.0
(cherry picked from commit cd641476cfcf8d5494e661debac9a3fe40f4cf32)
2021-09-15 09:50:00 +00:00
Vincent Haupert ca41e07801 github-runner: prevent self-updates
As of yet, a patch caused the runner to discard update messages.
Unfortunately, GitHub keeps sending update messages to outdated runners
causing them to no longer pick up jobs.

This commit causes the runner to send a high version to GitHub which
should be more recent for quite a time. That way, GitHub does not send
update message and keeps scheduling jobs even for outdated runners.

Naturally, an oudated runner can still break at any time as GitHub's
current approach assumes that all runners are always up-to-date. We
should still strive for quick nixpkgs updates but this patch should give
us some time.

(cherry picked from commit e8bbcc79fd07014b146835dfd7f5eba2079d9a55)
2021-09-15 09:49:59 +00:00
Vincent Haupert 04e8a8cd56 github-runner: use dummy SHA-1 as `GitInfoCommitHash`
The runner only references `GitInfoCommitHash`/`CommitHash` to print
informational log entries. To allow for just referencing the tag of a
version instead of the commit hash, this commit sets the value of the
`GitInfoCommitHash` to a static dummy value.

(cherry picked from commit cc5c902fdf94b798c3b68e55ebb7e1a1185113a1)
2021-09-15 09:49:58 +00:00
Jörg Thalheim cffe74fead
Merge pull request #137162 from NixOS/backport-136988-to-release-21.05
[Backport release-21.05] github-runner: 2.279.0 -> 2.281.1
2021-09-15 10:45:26 +01:00
Michael Weiss 4c2e7becf1
Merge pull request #137889 from NixOS/backport-137759-to-release-21.05
[Backport release-21.05] signal-desktop: 5.17.0 -> 5.17.1
2021-09-15 10:54:25 +02:00
Vladimír Čunát a59d9b39f1
Merge branch 'staging-next-21.05' into release-21.05 2021-09-14 23:10:11 +02:00
Michael Weiss 762bb52325 chromium: 93.0.4577.63 -> 93.0.4577.82
https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html

This update includes 11 security fixes. Google is aware that exploits
for CVE-2021-30632 and CVE-2021-30633 exist in the wild.

CVEs:
CVE-2021-30625 CVE-2021-30626 CVE-2021-30627 CVE-2021-30628
CVE-2021-30629 CVE-2021-30630 CVE-2021-30631 CVE-2021-30632
CVE-2021-30633

(cherry picked from commit 61e54424baa413ca1a8efa805813d07e3f1ff00f)
2021-09-14 21:06:36 +00:00
R. RyanTM 224196a661 signal-desktop: 5.17.0 -> 5.17.1
(cherry picked from commit e3c0374da4ff8c9a0ad65a429c6ab030e4ae8cc3)
2021-09-14 20:46:52 +00:00
github-actions[bot] 7f31a4f82d
Merge release-21.05 into staging-next-21.05 2021-09-14 18:02:14 +00:00
Guillaume Girol f7c79f29ac
Merge pull request #137311 from symphorien/evolution-stable-update
[21.05] evolution, evolution-ews, evolution-data-server: backport patch release bumps
2021-09-14 17:21:42 +00:00
Bernardo Meurer f5db08830f
Merge pull request #137683 from NixOS/backport-137671-to-release-21.05
[Backport release-21.05] firefox-unwrapped: workaround issues on non-Gnome wayland WM's on FF 92
2021-09-14 16:24:33 +00:00
github-actions[bot] 1d1b9bf49a
Merge release-21.05 into staging-next-21.05 2021-09-14 12:02:14 +00:00
Maximilian Bosch 626ae0eeba element-desktop: apply patch to run on Wayland (#137666)
See upstream PR#261[1] for further reference. Previously, the
`enable-features`-setting was entirely discarded due to an earlier
regression resulting in an attempt to start `element-desktop` in
Wayland-mode without all necessary components.

Closes #137377

[1] https://github.com/vector-im/element-desktop/pull/261

(cherry picked from commit 5a0d0ec1cf90aae4354a97a2afaff079605ffc82)
2021-09-14 10:30:05 +02:00
github-actions[bot] beeed5079f
Merge release-21.05 into staging-next-21.05 2021-09-14 06:02:32 +00:00
Robert Scott 667c06be31
Merge pull request #137428 from risicle/ris-flask-appbuilder-3.3.2-r21.05
[21.05] python3Packages.flask-appbuilder: 3.3.0 -> 3.3.2
2021-09-14 01:20:28 +01:00
github-actions[bot] 7206c7cf0b
Merge release-21.05 into staging-next-21.05 2021-09-14 00:02:30 +00:00
Bernardo Meurer 25532a7fbb
firefox-unwrapped: workaround issues on non-Gnome wayland WM's on FF 92
Closes: #137649
(cherry picked from commit dfccb3045e76872eda32cdfa338dbe6aae8ccfcb)
2021-09-13 12:53:50 -07:00
Timothy DeHerrera f789739acc
Merge pull request #137665 from NixOS/backport-106574-to-release-21.05
[Backport release-21.05] nixos/amazonImageZfs: init
2021-09-13 13:48:12 -06:00
Timothy DeHerrera bee37e3ee0
Merge pull request #137676 from NixOS/backport-135568-to-release-21.05
[Backport release-21.05] ZFS: expand on boot
2021-09-13 13:48:00 -06:00
github-actions[bot] fa10ff02d6
Merge release-21.05 into staging-next-21.05 2021-09-13 18:03:02 +00:00
Your Name 76e99647cd services.zfs.expandOnBoot: support expanding pools on boot
Either enumerating a list of pools to expand or expanding
all pools on boot.

(cherry picked from commit 4bb4bcc30c7f481581ef462ed7b1dcca71693717)
2021-09-13 17:42:07 +00:00