Commit Graph

292830 Commits

Author SHA1 Message Date
rnhmjoj d81e14f491 nixos-rebuild: fix --use-remote-sudo
Currently fails with:

  $ nixos-rebuild test --target-host myhost --use-remote-sudo
  building Nix...
  sudo: /run/current-system/sw/bin/sudo must be owned by uid 0 and have the setuid bit set

It seems setting an explicit PATH in the ssh command overrides the
remote setuid wrappers.

(cherry picked from commit 35a8d78e44d566d6d2ddba42ae5137f7a511a090)
2021-06-20 09:23:20 +00:00
Maximilian Bosch e3c88e2a94
Merge pull request #127464 from Ma27/backport-diff-so-fancy
[21.05] gitAndTools.diff-so-fancy: 4.1.0 -> 4.1.2
2021-06-20 10:18:22 +02:00
Jan Tojnar 6613a30c5e gnomeExtensions: normalize pnames
They should have gnome-shell-extension prefix like most other extension packages.
This is what other distros listed on Repology use so Repology will be able to unify them.

Exception is chrome-gnome-shell, which is estabilished under that name.

(cherry picked from commit 5ba789eeca29a85144d1b611e52d09b132bedd91)
2021-06-20 08:54:10 +02:00
ajs124 f56b207e75
thunderbird: pass gnupg to passthru.updateScript
this fixes the tarball job

(cherry picked from commit 4e6e9adcd4746534b2cb / PR #127504)
2021-06-20 08:28:44 +02:00
Michele Guerini Rocco 031e1105f2
Merge pull request #127507 from NixOS/backport-127368-to-release-21.05
[Backport release-21.05] searx: patch to fix a crash
2021-06-20 00:37:56 +02:00
rnhmjoj 459ad47968 searx: patch to fix a crash
If the `default_doi_resolver` and `use_default_settings` are used
together searx crashes.

(cherry picked from commit 2a90b3329b18fadf35bf79966cd2330d83547b7e)
2021-06-19 22:10:57 +00:00
Thomas Gerbet 59979f8746 pythonPackages.impacket: 0.9.22 -> 0.9.23
Fixes CVE-2021-31800.
https://github.com/SecureAuthCorp/impacket/releases/tag/impacket_0_9_23

(cherry picked from commit 31c39c11ca197f2e64ca90dcb329ff052d9bde68)
2021-06-19 11:00:33 -07:00
Robert Schütz f0393ff216
Merge pull request #127483 from NixOS/backport-127478-to-release-21.05
[Backport release-21.05] getmail6: 6.16 -> 6.17
2021-06-19 19:31:27 +02:00
Robert Schütz 426c25db0d getmail6: 6.16 -> 6.17
https://github.com/getmail6/getmail6/releases/tag/v6.17
(cherry picked from commit fbf187aafe8c330f6986a182d171c17a4947d168)
2021-06-19 17:17:56 +00:00
Maximilian Bosch 2a27281bc1
gitAndTools.diff-so-fancy: 1.4.1 -> 1.4.2
ChangeLog: https://github.com/so-fancy/diff-so-fancy/releases/tag/v1.4.2
(cherry picked from commit d387353590e9a1c6c7206ee6a64551570769b03d)
2021-06-19 15:12:49 +02:00
Sandro Jäckel 73167dd575
diff-so-fancy: 1.4.0 -> 1.4.1
(cherry picked from commit 15eb917faf7ddab6d7ab8a17cf72a425eff898e5)
2021-06-19 15:12:49 +02:00
TredwellGit fbeb67dd93 chromium: fix APNG support
https://bugs.chromium.org/p/chromium/issues/detail?id=752403
(cherry picked from commit 52651ca62a9e9bf5833ffda13baed4b96b766381)
2021-06-19 11:17:50 +00:00
Michael Weiss 3f6b386e54
Merge pull request #127339 from NixOS/backport-127334-to-release-21.05
[Backport release-21.05] chromium: 91.0.4472.106 -> 91.0.4472.114
2021-06-19 12:17:53 +02:00
Maximilian Bosch 3532b90afe
Merge pull request #127184 from NixOS/backport-127155-to-release-21.05
[Backport release-21.05] Kernels 2021-06-17
2021-06-19 01:23:01 +02:00
Maximilian Bosch 8c642ae6db
Merge pull request #127409 from NixOS/backport-127380-to-release-21.05
[Backport release-21.05] gitea: 1.14.2 -> 1.14.3
2021-06-19 00:25:10 +02:00
Robert Scott d38e37ccf1
Merge pull request #126613 from NixOS/backport-125472-to-release-21.05
[Backport release-21.05] llvmPackages_12.compiler-rt: fix build on darwin
2021-06-18 22:45:26 +01:00
Robert Scott cacfad81c1
Merge pull request #127403 from NixOS/backport-127159-to-release-21.05
[Backport release-21.05] bosh-cli: 6.4.3 -> 6.4.4
2021-06-18 21:47:05 +01:00
Maximilian Bosch 15d6e41814 gitea: 1.14.2 -> 1.14.3
ChangeLog: https://github.com/go-gitea/gitea/releases/tag/v1.14.3
(cherry picked from commit d5edee8113b7b0567492568e1c0552b4c7d22771)
2021-06-18 20:41:00 +00:00
R. RyanTM 798a2dfaa7 bosh-cli: 6.4.3 -> 6.4.4
(cherry picked from commit dd1b9306467d6ad3cfaabfb0d8d5a79c8c76404b)
2021-06-18 19:56:26 +00:00
Robert Scott 0e9b707b1d
Merge pull request #126631 from NixOS/backport-126601-to-release-21.05
[Backport release-21.05] bosh-cli: init at 6.4.3
2021-06-18 20:38:20 +01:00
Pol Dellaiera fc2b15a4f2 Bump from 4.25.2 to 4.25.4.
(cherry picked from commit ad8bc531cca4305798bf5371509f4feaa7b134c1)
2021-06-18 21:07:47 +02:00
taku0 1bdbbeb81b firefox/update.nix: Use fingerprint instead of keyid
(cherry picked from commit eaef28d6c42f01f459ef16c52d017ca8665fe70b)
2021-06-18 17:40:15 +00:00
taku0 cc335b0e78 firefox-bin/update.nix: Use fingerprint instead of keyid
Co-authored-by: stigtsp <stig@stig.io>
(cherry picked from commit 044aab9fc26dc9bef5b11e2ed321bd7474929b45)
2021-06-18 17:40:15 +00:00
taku0 baeee9e9e0 firefox-bin: 89.0 -> 89.0.1
(cherry picked from commit 84306f5aae4477b57835f28ecf6195dd003cbcd2)
2021-06-18 17:40:15 +00:00
taku0 c1573ea19b firefox: 89.0 -> 89.0.1
(cherry picked from commit e330adceb95b2ef0a8456f19c4fb2010e153ccb7)
2021-06-18 17:40:15 +00:00
taku0 d612e8ab4a firefox, firefox-bin: fetch GPG key from keyring
(cherry picked from commit 1415289e67cf4a8e0ffd81088d549fbafc93e782)
2021-06-18 17:40:15 +00:00
taku0 a84016df15 firefox: fix parameter of update.nix for ESR version
(cherry picked from commit 6aaaa019ce684fad13f9b239536e04252862980d)
2021-06-18 17:40:14 +00:00
taku0 3987314eba firefox: use SHA512SUM in update.nix
(cherry picked from commit 8432387de20d211dee2be068955ba23f7920aa58)
2021-06-18 17:40:14 +00:00
R. RyanTM 450eab40ac appgate-sdp: 5.4.0 -> 5.4.2
(cherry picked from commit 8c6c14f7a6fd81f1c6b66514aca8718ede68ee1a)
2021-06-18 15:14:59 +00:00
Michael Weiss 3715be19ec chromium: 91.0.4472.106 -> 91.0.4472.114
https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html

This update includes 4 security fixes. Google is aware that an exploit
for CVE-2021-30554 exists in the wild.

CVEs:
CVE-2021-30554 CVE-2021-30555 CVE-2021-30556 CVE-2021-30557

(cherry picked from commit 0505ed81bc2a71be572117208829b5e69ea9fd65)
2021-06-18 10:48:25 +00:00
Alyssa Ross bad3ccd099 makeDBusConf: make apparmor argument optional
The only in-tree use of this is the DBus NixOS module, which always
passes apparmor (but the services.dbus.apparmor option defaults to
"disabled").  Set the default in the function as well so other users
of the function can take advantage of it.

(cherry picked from commit e9f45cc69d6fb2a2e2446ce9606eb7e9c376959f)
2021-06-17 20:20:32 +00:00
sternenseemann 17c83897a5 pass: 1.7.3 -> 1.7.4
Mostly bug fixes, the following changes were required in the package:

* set-correct-program-name-for-sleep.patch needed to be rebased,
  b08781e2a6e183986eb1c24f51cdeff879b7a6af partially implemented
  the changes done in this patch, so we don't need to touch
  password-store.sh anymore.

* Remove wayland patch since it is part of the release now

* Reworked assert logic wrt to x11-/wayland- and dmenuSupport:
  passmenu now supports wayland as well via dmenu-wayland. Sadly
  the choice of menu is not changeable, pending
  https://lists.zx2c4.com/pipermail/password-store/2021-January/004363.html

* Rebased no-darwin-getopt.patch

* Note that f.el is no longer required

Reviews would be appreciated, I might've missed something.

(cherry picked from commit 9b794eb21af842bda137bf9f1ecc95c2d2affc8c)
2021-06-17 16:32:19 +00:00
TredwellGit efb61e9e83 linux/hardened/patches/5.4: 5.4.125-hardened1 -> 5.4.126-hardened1
(cherry picked from commit 98642dcfd9c281266605e672e87552ea65e7f914)
2021-06-17 04:45:40 +00:00
TredwellGit 55875793a1 linux/hardened/patches/5.12: 5.12.10-hardened1 -> 5.12.11-hardened1
(cherry picked from commit ec53be76f2b5738e6ea66cdf064ab67df3f15ca8)
2021-06-17 04:45:40 +00:00
TredwellGit d14bae7155 linux/hardened/patches/5.10: 5.10.43-hardened1 -> 5.10.44-hardened1
(cherry picked from commit 9e42f0075a28940382f424121a355449c066ee50)
2021-06-17 04:45:40 +00:00
TredwellGit 5abf0043a3 linux/hardened/patches/4.19: 4.19.194-hardened1 -> 4.19.195-hardened1
(cherry picked from commit 00eb48b68b2aff0cb2de7dee6880ed39d5423950)
2021-06-17 04:45:40 +00:00
TredwellGit c96a2fc4c9 linux/hardened/patches/4.14: 4.14.236-hardened1 -> 4.14.237-hardened1
(cherry picked from commit a7b1c72c5ec814f49dea2bae5e6f413dfbec9efb)
2021-06-17 04:45:39 +00:00
TredwellGit 60151d59c3 linux: 5.4.125 -> 5.4.126
(cherry picked from commit d0860fef8831535bccae0273bfde5eb19841acfc)
2021-06-17 04:45:39 +00:00
TredwellGit c6d46ca2e4 linux: 5.12.10 -> 5.12.11
(cherry picked from commit 14510ff4ea93d95103e9bf6b189490067caf0f2f)
2021-06-17 04:45:39 +00:00
TredwellGit b7afdec506 linux: 5.10.43 -> 5.10.44
(cherry picked from commit 5382c2856df5a504650428177d75a40f307c1f66)
2021-06-17 04:45:39 +00:00
TredwellGit 81536c15d3 linux: 4.9.272 -> 4.9.273
(cherry picked from commit b9d8e45251917f347e31fff301ac416f705ed1a0)
2021-06-17 04:45:39 +00:00
TredwellGit 18da963255 linux: 4.4.272 -> 4.4.273
(cherry picked from commit ecf27f78d32098e791d2d9944f13eb27d6741924)
2021-06-17 04:45:38 +00:00
TredwellGit 76cb349cb2 linux: 4.19.194 -> 4.19.195
(cherry picked from commit c6e07a72e7327407e73287bd531222656ae38bee)
2021-06-17 04:45:38 +00:00
TredwellGit ae8b337041 linux: 4.14.236 -> 4.14.237
(cherry picked from commit 5efcab85a67f25cdb597ccf860f5751c7b8272d5)
2021-06-17 04:45:38 +00:00
Martin Weinelt 246502ae2d
Merge pull request #126553 from NixOS/backport-126422-to-release-21.05
[Backport release-21.05] apacheHttpd: 2.4.47 -> 2.4.48
2021-06-17 01:05:00 +02:00
Martin Weinelt 36bb4e1ebe
Merge pull request #127141 from NixOS/backport-125770-to-release-21.05
[Backport release-21.05] nixos/acme: Remove an incorrect assertion from tests
2021-06-17 00:55:45 +02:00
Mewp 38088e7229 nixos/acme: Remove an incorrect assertion from tests
Commit 3a2e0c36e7 has removed
`--reuse-key` from default renew options, yet the tests still expected
keys not to change. This assertion is now removed, as they are supposed
to change on each renew/change.

(cherry picked from commit b00bcf21abc392ecb1d93bd49f7a5ffbc8524ecf)
2021-06-16 22:03:03 +00:00
Sandro 50236d44c0
Merge pull request #127122 from NixOS/backport-123843-to-release-21.05 2021-06-16 23:53:25 +02:00
Martin Weinelt 460e210a58
Merge pull request #127132 from NixOS/backport-126521-to-staging-21.05
[Backport staging-21.05] dhcp: 4.4.2 -> 4.4.2-P1
2021-06-16 22:40:47 +02:00
Thomas Gerbet fb93bad76c dhcp: 4.4.2 -> 4.4.2-P1
Fixes CVE-2021-25217.
https://kb.isc.org/docs/cve-2021-25217

(cherry picked from commit efc86b71a4541e5901be42159a53aeaf34d66f26)
2021-06-16 20:16:28 +00:00