Commit Graph

292332 Commits

Author SHA1 Message Date
Yurii Matsiuk a361101945 linux/hardened/patches/5.12: init at 5.12.6-hardened1
(cherry picked from commit 6c6f9a5abfdc601d1d5ade71e8b667ed9cdc5fcd)
2021-06-05 15:07:35 +00:00
Yurii Matsiuk 9b91d0c98a linux/hardened/patches/5.4: 5.4.119-hardened1 -> 5.4.121-hardened1
(cherry picked from commit 63f5c51430ba45904bd3ffa915c045cb746a4d20)
2021-06-05 15:07:34 +00:00
Yurii Matsiuk 8c3ed02c5b linux/hardened/patches/5.11: 5.11.21-hardened1 -> 5.11.22-hardened1
(cherry picked from commit ac7c67ea0c13e60d1a39d658b2418ce616e4ccc6)
2021-06-05 15:07:34 +00:00
Yurii Matsiuk 3270f6e74f linux/hardened/patches/5.10: 5.10.37-hardened1 -> 5.10.39-hardened1
(cherry picked from commit f8df946b8b6b37a6d05d9cac7728709593c774ae)
2021-06-05 15:07:34 +00:00
Yurii Matsiuk 1537b18b66 linux/hardened/patches/4.19: 4.19.190-hardened1 -> 4.19.191-hardened1
(cherry picked from commit 38a17bf83560749fab96d595c3ac10b2d4b922ad)
2021-06-05 15:07:33 +00:00
Yurii Matsiuk 641eac3f62 linux/hardened/patches/4.14: 4.14.232-hardened1 -> 4.14.233-hardened1
(cherry picked from commit 96806043e7e73bb98d2362b5c14f3eb6dee2b514)
2021-06-05 15:07:33 +00:00
Yurii Matsiuk 8d3861572f linux_latest-libre: 18063 -> 18096
(cherry picked from commit be8af32578742a2940eb0aa0f3437bfdb43a515d)
2021-06-05 15:07:33 +00:00
Yurii Matsiuk ff2eb0479e linux: 5.4.120 -> 5.4.121
(cherry picked from commit 44ed8b845d762581ca84ab4dd6baab89a0674d79)
2021-06-05 15:07:33 +00:00
Yurii Matsiuk 17c7ef67ea linux: 5.12.5 -> 5.12.6
(cherry picked from commit 6485d14e6de1ce89d39367d3d8b7eac5fdae684c)
2021-06-05 15:07:32 +00:00
Yurii Matsiuk a8f69347be linux: 5.10.38 -> 5.10.39
(cherry picked from commit 43730b18ea08d7bf93aee23f47c2683f7a93e945)
2021-06-05 15:07:32 +00:00
Yurii Matsiuk 537d97790b linux: 4.9.268 -> 4.9.269
(cherry picked from commit e51c114dfeab0f7f7655edb3bb045c775982c5c6)
2021-06-05 15:07:32 +00:00
Yurii Matsiuk 853bb573e9 linux: 4.4.268 -> 4.4.269
(cherry picked from commit 7d15d507177349feee82e225a2ddbb09a9830d47)
2021-06-05 15:07:32 +00:00
Yurii Matsiuk 5e4829822c linux: 4.19.190 -> 4.19.191
(cherry picked from commit be7fc1bdee8bc3907f1089f37570ece1938532ba)
2021-06-05 15:07:31 +00:00
Yurii Matsiuk 747ca0c87f linux: 4.14.232 -> 4.14.233
(cherry picked from commit c5545b7e423869aaabc1232e9f339a5cb18398db)
2021-06-05 15:07:31 +00:00
Yurii Matsiuk 73710f8803 linux: 5.4.119 -> 5.4.120
(cherry picked from commit ce48d2c5932b307c22b418a7cced203ffc438b15)
2021-06-05 15:07:31 +00:00
Yurii Matsiuk 1e4ff1a71e linux: 5.12.4 -> 5.12.5
(cherry picked from commit a76a720665423d32db1edaf44915287c5860d536)
2021-06-05 15:07:31 +00:00
Yurii Matsiuk 64809ba107 linux: 5.11.21 -> 5.11.22
(cherry picked from commit 701282a87a96bc14d1996b43c057394b4dc70510)
2021-06-05 15:07:30 +00:00
Yurii Matsiuk 07dd7d248d linux: 5.10.37 -> 5.10.38
(cherry picked from commit 9a0a33f6b1ca2ae2c70e0c01722e3c359d667578)
2021-06-05 15:07:30 +00:00
Aaron Andersen 373aeac41f zabbix.agent2: create a symlink which is compatible with the zabbixAgent module
(cherry picked from commit 99e37419573318a1882ec5930c1dd6aec4512940)
2021-06-05 15:03:09 +00:00
Sandro f00749660d
Merge pull request #125528 from wizeman/u/fix-gitrepo-backport
[21.05] gitRepo: Add import to ssl module to avoid runtime error (#125373)
2021-06-05 16:52:59 +02:00
Robert Hensing 1fe3b399a3
Merge pull request #125783 from NixOS/backport-125625-to-release-21.05
[Backport release-21.05] doc: Fix make in nix-shell
2021-06-05 15:14:54 +02:00
Robert Scott f0f9b4ef89
Merge pull request #125782 from NixOS/backport-125645-to-release-21.05
[Backport release-21.05] wireshark: 3.4.5 -> 3.4.6
2021-06-05 13:53:35 +01:00
Robert Scott ee7d49b968
Merge pull request #125784 from NixOS/backport-125566-to-release-21.05
[Backport release-21.05] pam_u2f: 1.1.0 -> 1.1.1
2021-06-05 13:34:11 +01:00
Maximilian Bosch 01ec377896
Merge pull request #125786 from NixOS/backport-125732-to-release-21.05
[Backport release-21.05] rambox: unmaintain & mark as insecure
2021-06-05 14:08:35 +02:00
Maximilian Bosch d54d20e1c1
Merge pull request #125787 from NixOS/backport-125723-to-release-21.05
[Backport release-21.05] ferdi: 5.6.0-beta.5 -> 5.6.0-beta.6, improve XWayland support
2021-06-05 14:08:24 +02:00
Ilan Joselevich b7833a0724 jitsi-meet-electron: 2.8.5 -> 2.8.6
(cherry picked from commit 29c70d515a827c043fcef37ddbb675cd620f9301)
2021-06-05 14:05:15 +02:00
Guillaume Girol 49acb91cbf gpxlab: update license
(cherry picked from commit 87c98dcdfc1778f8988e3d430cfe847b56a26f5c)
2021-06-05 14:04:15 +02:00
Nikolay Korotkiy 3e1e2b277f gpxlab: fix localization
(cherry picked from commit b931540229865e96ed515f0a041960c45a3069c2)
2021-06-05 14:04:15 +02:00
Eduardo Sánchez Muñoz 4a6b102088 teams: enable appindicator tray icon support
(cherry picked from commit de7986d7afd9f140ebc43e8a95bdb7f1f7ed08af)
2021-06-05 13:58:48 +02:00
fortuneteller2k 9a3a0f39f9 vocal: fix build
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
(cherry picked from commit 01ef9faecb7e1be1f40f7aac4ebcefa4885d4652)
2021-06-05 13:57:25 +02:00
InternetUnexplorer bc0d018a6b renoise: 3.3.1 -> 3.3.2
(cherry picked from commit 78b11682349ce95de8764de59e603c2cc2208bab)
2021-06-05 13:55:13 +02:00
Serg Nesterov ce9c83cee0 tmuxinator: 2.0.2 -> 2.0.3
tmuxinator 2.0.3 fixes a compatibility warning with tmux 2.3, which is
the version packaged on NixOS 21.05.

See https://github.com/tmuxinator/tmuxinator/issues/814

(cherry picked from commit 28ab65b5869c6673e359093662a1dfe3aba9b829)
2021-06-05 13:53:59 +02:00
Maximilian Bosch 1eb5ab963a ferdi: 5.6.0-beta.5 -> 5.6.0-beta.6, improve XWayland support
ChangeLog: 1886c8abed/CHANGELOG.md (560-beta6-2021-05-31)

Even though this isn't explicitly noted in the Changelog, this seems to
have fixed the Element integration for me.

Additionally, I added a (hacky) `xdg-open` wrapper which removes the
`GDK_BACKEND` variable to fix the XWayland integration[1]. The problem
is that if a Firefox is running with Wayland (`ferdi` is running under
X11) and `GDK_BACKEND=x11` is passed to the `xdg-open` (and thus
`firefox`) process, Firefox refuses to start since another instance of
it is running under Wayland (but attempts to start in X11 mode because of
`GDK_BACKEND=x11`).

[1] https://github.com/electron/electron/issues/28436

(cherry picked from commit cd4ad7d2fee90fc3afb9f3f3957a7289f02f89dc)
2021-06-05 11:44:32 +00:00
Maximilian Bosch ef186b47af rambox: unmaintain & mark as insecure
Rambox hasn't had a stable release in a while and an increasing number
of issues which is why I don't intend to use this anymore.

While taking a closer look at the source I also realized that it uses
Electron 7.2.4[1]. This is not only EOLed[2], it also contains a few
security vulnerabilities which is why I decided to mark it as insecure.

A few (most likely not all) vulnerabilities can be found by looking at
the Electron 7 changelog[3]: after 7.2.4 there were a few more releases
with security backports - mostly from Chromium. Security issues that
were found later on (and are probably exploitable on the dependency
chain of rambox) aren't listed here. I only added two issues that seemed
applicable to `rambox`, but I haven't researched enough to check the
other ones.

[1] https://github.com/ramboxapp/community-edition/blob/0.7.7/package.json#L70
[2] https://www.electronjs.org/docs/tutorial/support#currently-supported-versions
[3] https://www.electronjs.org/releases/stable?version=7

(cherry picked from commit e2a15cd395f1e137c680d22f83cd195caf3d6c14)
2021-06-05 11:44:21 +00:00
Thomas Gerbet 91c7763b9d pam_u2f: 1.1.0 -> 1.1.1
Fixes CVE-2021-31924
https://www.yubico.com/support/security-advisories/ysa-2021-03/

Changelog: https://github.com/Yubico/pam-u2f/blob/pam_u2f-1.1.1/NEWS
(cherry picked from commit b5afbd350dc54553376bfa29e693b680be3c39bd)
2021-06-05 11:33:09 +00:00
Jan Tojnar f0dfe62190 doc: Fix make in nix-shell
When running make manually, makeFlags will not be passed. Let’s just use an environment variable.

(cherry picked from commit 034a9c0e16aab12978bb4a1c1f0e86c64778b388)
2021-06-05 11:29:01 +00:00
TredwellGit e2fccba4ef wireshark: 3.4.5 -> 3.4.6
https://www.wireshark.org/docs/relnotes/wireshark-3.4.6.html
(cherry picked from commit 15974f58b8c216cf268f8c2302b036db701b31cd)
2021-06-05 11:25:01 +00:00
Michael Weiss 527c0bbf84
Merge pull request #125773 from NixOS/backport-125724-to-release-21.05
[Backport release-21.05] signal-desktop: 5.3.0 -> 5.4.0
2021-06-05 12:17:35 +02:00
Martin Weinelt 36b2126e54
Merge pull request #125762 from NixOS/backport-125749-to-release-21.05
[Backport release-21.05] python3Packages.aiomultiprocess: disable failing tests
2021-06-05 12:03:58 +02:00
Michael Weiss 08866897e3 signal-desktop: 5.3.0 -> 5.4.0
(cherry picked from commit f5be28bcc98e0a091c69df8d4e88a7b52452eb38)
2021-06-05 09:35:26 +00:00
Martin Weinelt e7c8f2ff73 python3Packages.aiomultiprocess: disable failing tests
These tests fail from time to time and bring the whole test suite to a
timeout.

https://github.com/omnilib/aiomultiprocess/issues/97
(cherry picked from commit c8261a34f80d67223589a498bc0acd4713ab21b3)
2021-06-05 08:12:04 +00:00
Jörg Thalheim 0edbcd01f6
Merge pull request #125349 from Mic92/containerd-backport
[21.05] containerd: fix checksum
2021-06-05 07:28:48 +02:00
Vojtěch Káně 9f537a52df lightworks: 2021.2 -> 2021.2.1
(cherry picked from commit a9edf3b544aba334814ea830b8650a38e56b69c3)
2021-06-04 19:11:09 +00:00
Vojtěch Káně 089308ac91 lightworks: add me as a maintainer
(cherry picked from commit ccb691c7d156f26857159d324b788c0e3789322a)
2021-06-04 19:11:08 +00:00
Vojtěch Káně e387f0600c lightworks: 14.0.0 -> 2021.2
(cherry picked from commit 2c3d045bc31e7baab833b1d4adb553263e75fe2e)
2021-06-04 19:11:08 +00:00
Maximilian Bosch aa57635767
Merge pull request #125684 from NixOS/backport-125483-to-release-21.05
[Backport release-21.05] nixos/prometheus-exporters: improve docs & fix rspamd exporter
2021-06-04 17:36:38 +02:00
Sandro 503638304e
Merge pull request #125526 from wizeman/u/fix-libraspberrypi-url-backport
[21.05] libraspberrypi: fix URL
2021-06-04 17:18:22 +02:00
Maximilian Bosch 3c8dcd902a nixos/mail-exporter: add note about rspamd marking probe mails as spam
(cherry picked from commit ba9768f3143c728a47515d0548025a103fca9013)
2021-06-04 14:14:35 +00:00
Maximilian Bosch d7fbcd60a3 nixos/dovecot-exporter: fix documentation for old stats
(cherry picked from commit 6fb847c55643780c1ba3a98c57ba57541ed33d14)
2021-06-04 14:14:35 +00:00
Maximilian Bosch 619cf60d25 nixos/rspamd-exporter: fix metrics
In 0.3.0 of the json-exporter[1] it was switched to a different jsonpath
library which made some changes - especially for spaces in keys -
necessary. Also I decided to remove the pretty-printed JSON as this
would interfere with the bash quoting too much. If one needs
pretty-printed output, they can still pipe the output to `jq`.

[1] https://github.com/prometheus-community/json_exporter/releases/tag/v0.3.0

(cherry picked from commit 976d668e5c5566c3e96b17d667830a0f3ed1bbb5)
2021-06-04 14:14:35 +00:00