summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* buildFhsUserenv: don't leak mounts to other processes•••If run as root we were leaking mounts to the parent namespace, which lead to an error when removing the temporary mountroot. To fix this we remount the whole tree as private as soon as we created the new mountenamespace. (cherry picked from commit 43908f4c1d8489ca284c47fb835ec3fa348016b0) origin/backport-125804-to-release-21.05Jörg Thalheim2021-06-051-1/+3
* openrgb: Fix udev rules with hardcoded /bin/chmod•••New rules introduced in openrgb 0.6. openrgb: Implement nixpkgs-review suggestions * warning: missing-phase-hooks * warning: unclear-gpl * warning: unnecessary-parallel-building (cherry picked from commit 84dc04c2db2f45237658e1178f22057f49a6b95f) Stefan Frijters2021-06-051-4/+9
* Merge pull request #125528 from wizeman/u/fix-gitrepo-backport•••[21.05] gitRepo: Add import to ssl module to avoid runtime error (#125373)Sandro2021-06-052-3/+34
|\
| * gitRepo: Add import to ssl module to avoid runtime error (#125373)•••Co-authored-by: Ricardo M. Correia <rcorreia@wizy.org> (cherry picked from commit 8f166b95c9ee10743039d1f2b1c21f9edee5da88) Otavio Salvador2021-06-032-3/+34
* | Merge pull request #125783 from NixOS/backport-125625-to-release-21.05•••[Backport release-21.05] doc: Fix make in nix-shellRobert Hensing2021-06-052-5/+4
|\ \
| * | doc: Fix make in nix-shell•••When running make manually, makeFlags will not be passed. Let’s just use an environment variable. (cherry picked from commit 034a9c0e16aab12978bb4a1c1f0e86c64778b388) origin/backport-125625-to-release-21.05Jan Tojnar2021-06-052-5/+4
* | | Merge pull request #125782 from NixOS/backport-125645-to-release-21.05•••[Backport release-21.05] wireshark: 3.4.5 -> 3.4.6Robert Scott2021-06-051-2/+3
|\ \ \
| * | | wireshark: 3.4.5 -> 3.4.6•••https://www.wireshark.org/docs/relnotes/wireshark-3.4.6.html (cherry picked from commit 15974f58b8c216cf268f8c2302b036db701b31cd) TredwellGit2021-06-051-2/+3
| |/ /
* | | Merge pull request #125784 from NixOS/backport-125566-to-release-21.05•••[Backport release-21.05] pam_u2f: 1.1.0 -> 1.1.1Robert Scott2021-06-051-2/+10
|\ \ \
| * | | pam_u2f: 1.1.0 -> 1.1.1•••Fixes CVE-2021-31924 https://www.yubico.com/support/security-advisories/ysa-2021-03/ Changelog: https://github.com/Yubico/pam-u2f/blob/pam_u2f-1.1.1/NEWS (cherry picked from commit b5afbd350dc54553376bfa29e693b680be3c39bd) Thomas Gerbet2021-06-051-2/+10
| |/ /
* | | Merge pull request #125786 from NixOS/backport-125732-to-release-21.05•••[Backport release-21.05] rambox: unmaintain & mark as insecureMaximilian Bosch2021-06-051-1/+4
|\ \ \
| * | | rambox: unmaintain & mark as insecure•••Rambox hasn't had a stable release in a while and an increasing number of issues which is why I don't intend to use this anymore. While taking a closer look at the source I also realized that it uses Electron 7.2.4[1]. This is not only EOLed[2], it also contains a few security vulnerabilities which is why I decided to mark it as insecure. A few (most likely not all) vulnerabilities can be found by looking at the Electron 7 changelog[3]: after 7.2.4 there were a few more releases with security backports - mostly from Chromium. Security issues that were found later on (and are probably exploitable on the dependency chain of rambox) aren't listed here. I only added two issues that seemed applicable to `rambox`, but I haven't researched enough to check the other ones. [1] https://github.com/ramboxapp/community-edition/blob/0.7.7/package.json#L70 [2] https://www.electronjs.org/docs/tutorial/support#currently-supported-versions [3] https://www.electronjs.org/releases/stable?version=7 (cherry picked from commit e2a15cd395f1e137c680d22f83cd195caf3d6c14) Maximilian Bosch2021-06-051-1/+4
| |/ /
* | | Merge pull request #125787 from NixOS/backport-125723-to-release-21.05•••[Backport release-21.05] ferdi: 5.6.0-beta.5 -> 5.6.0-beta.6, improve XWayland supportMaximilian Bosch2021-06-052-7/+23
|\ \ \
| * | | ferdi: 5.6.0-beta.5 -> 5.6.0-beta.6, improve XWayland support•••ChangeLog: https://github.com/getferdi/ferdi/blob/1886c8abed32e33f0f547c069c674b79279cf931/CHANGELOG.md#560-beta6-2021-05-31 Even though this isn't explicitly noted in the Changelog, this seems to have fixed the Element integration for me. Additionally, I added a (hacky) `xdg-open` wrapper which removes the `GDK_BACKEND` variable to fix the XWayland integration[1]. The problem is that if a Firefox is running with Wayland (`ferdi` is running under X11) and `GDK_BACKEND=x11` is passed to the `xdg-open` (and thus `firefox`) process, Firefox refuses to start since another instance of it is running under Wayland (but attempts to start in X11 mode because of `GDK_BACKEND=x11`). [1] https://github.com/electron/electron/issues/28436 (cherry picked from commit cd4ad7d2fee90fc3afb9f3f3957a7289f02f89dc) Maximilian Bosch2021-06-052-7/+23
| |/ /
* | | jitsi-meet-electron: 2.8.5 -> 2.8.6•••(cherry picked from commit 29c70d515a827c043fcef37ddbb675cd620f9301) Ilan Joselevich2021-06-051-2/+2
* | | gpxlab: update license•••(cherry picked from commit 87c98dcdfc1778f8988e3d430cfe847b56a26f5c) Guillaume Girol2021-06-051-2/+2
* | | gpxlab: fix localization•••(cherry picked from commit b931540229865e96ed515f0a041960c45a3069c2) Nikolay Korotkiy2021-06-052-5/+27
* | | teams: enable appindicator tray icon support•••(cherry picked from commit de7986d7afd9f140ebc43e8a95bdb7f1f7ed08af) Eduardo Sánchez Muñoz2021-06-051-0/+2
* | | vocal: fix build•••Co-authored-by: Sandro <sandro.jaeckel@gmail.com> (cherry picked from commit 01ef9faecb7e1be1f40f7aac4ebcefa4885d4652) fortuneteller2k2021-06-051-2/+13
* | | renoise: 3.3.1 -> 3.3.2•••(cherry picked from commit 78b11682349ce95de8764de59e603c2cc2208bab) InternetUnexplorer2021-06-051-2/+2
* | | tmuxinator: 2.0.2 -> 2.0.3•••tmuxinator 2.0.3 fixes a compatibility warning with tmux 2.3, which is the version packaged on NixOS 21.05. See https://github.com/tmuxinator/tmuxinator/issues/814 (cherry picked from commit 28ab65b5869c6673e359093662a1dfe3aba9b829) Serg Nesterov2021-06-051-2/+2
|/ /
* | Merge pull request #125773 from NixOS/backport-125724-to-release-21.05•••[Backport release-21.05] signal-desktop: 5.3.0 -> 5.4.0Michael Weiss2021-06-051-2/+2
|\ \
| * | signal-desktop: 5.3.0 -> 5.4.0•••(cherry picked from commit f5be28bcc98e0a091c69df8d4e88a7b52452eb38) origin/backport-125724-to-release-21.05Michael Weiss2021-06-051-2/+2
* | | Merge pull request #125762 from NixOS/backport-125749-to-release-21.05•••[Backport release-21.05] python3Packages.aiomultiprocess: disable failing testsMartin Weinelt2021-06-051-0/+8
|\ \ \ | |/ / |/| |
| * | python3Packages.aiomultiprocess: disable failing tests•••These tests fail from time to time and bring the whole test suite to a timeout. https://github.com/omnilib/aiomultiprocess/issues/97 (cherry picked from commit c8261a34f80d67223589a498bc0acd4713ab21b3) Martin Weinelt2021-06-051-0/+8
|/ /
* | Merge pull request #125349 from Mic92/containerd-backport•••[21.05] containerd: fix checksumJörg Thalheim2021-06-051-1/+1
|\ \
| * | containerd: fix checksumJörg Thalheim2021-06-021-1/+1
* | | Merge pull request #125684 from NixOS/backport-125483-to-release-21.05•••[Backport release-21.05] nixos/prometheus-exporters: improve docs & fix rspamd exporterMaximilian Bosch2021-06-043-20/+51
|\ \ \
| * | | nixos/mail-exporter: add note about rspamd marking probe mails as spam•••(cherry picked from commit ba9768f3143c728a47515d0548025a103fca9013) Maximilian Bosch2021-06-041-0/+18
| * | | nixos/dovecot-exporter: fix documentation for old stats•••(cherry picked from commit 6fb847c55643780c1ba3a98c57ba57541ed33d14) Maximilian Bosch2021-06-041-1/+16
| * | | nixos/rspamd-exporter: fix metrics•••In 0.3.0 of the json-exporter[1] it was switched to a different jsonpath library which made some changes - especially for spaces in keys - necessary. Also I decided to remove the pretty-printed JSON as this would interfere with the bash quoting too much. If one needs pretty-printed output, they can still pipe the output to `jq`. [1] https://github.com/prometheus-community/json_exporter/releases/tag/v0.3.0 (cherry picked from commit 976d668e5c5566c3e96b17d667830a0f3ed1bbb5) Maximilian Bosch2021-06-041-19/+17
* | | | Merge pull request #125526 from wizeman/u/fix-libraspberrypi-url-backport•••[21.05] libraspberrypi: fix URLSandro2021-06-041-1/+1
|\ \ \ \ | |/ / / |/| | |
| * | | libraspberrypi: fix URL•••(cherry picked from commit 3915d2fd27e2d8a62cff752bd1e4146317c76f31) Ricardo M. Correia2021-06-031-1/+1
| | |/ | |/|
* | | Merge pull request #125646 from stigtsp/package/perl-Mojolicious-9.19-backpor...•••[21.05] perlPackages.Mojolicious: 9.17 -> 9.19stigtsp2021-06-041-3/+3
|\ \ \
| * | | perlPackages.Mojolicious: 9.17 -> 9.19•••(cherry picked from commit 15f6e4ed3b734d00066e5a1401e45f554fc9c7bd) Zak B. Elep2021-06-041-3/+3
* | | | arion: 0.1.2.0 -> 0.1.3.0Robert Hensing2021-06-042-0/+39
|/ / /
* | | Merge pull request #125633 from NixOS/backport-125537-to-release-21.05•••[Backport release-21.05] nixos/release-notes: Fix link to GNOME 40 release notesSandro2021-06-041-1/+1
|\ \ \
| * | | nixos/release-notes: Fix link to GNOME 40 release notes•••Signed-off-by: Anders Kaseorg <andersk@mit.edu> (cherry picked from commit a681951902631d20e439fc60f53100967ba1cc72) Anders Kaseorg2021-06-041-1/+1
* | | | Merge pull request #125635 from NixOS/backport-125394-to-release-21.05•••[Backport release-21.05] win-spice: say yes to all 7z dialogsSandro2021-06-041-5/+5
|\ \ \ \
| * | | | win-spice: say yes to all 7z dialogs•••(cherry picked from commit 0c245a39a9ab4eb0ed98892645ae5d726ee8c50c) fortuneteller2k2021-06-041-5/+5
| |/ / /
* | | | Merge pull request #125629 from NixOS/backport-125536-to-release-21.05•••[Backport release-21.05] matrix-synapse: 1.35.0 -> 1.35.1Maximilian Bosch2021-06-041-2/+2
|\ \ \ \ | |/ / / |/| | |
| * | | matrix-synapse: 1.35.0 -> 1.35.1•••(cherry picked from commit 10cbea574d4882a8b58b74fd594ae55c64540797) Sumner Evans2021-06-041-2/+2
* | | | Merge #125139: firefox: 88.0.1 -> 89.0 (into release-21.05)Vladimír Čunát2021-06-044-3/+51
|\ \ \ \ | |/ / / |/| | |
| * | | firefox: 88.0.1 -> 89.0•••https://www.mozilla.org/en-US/firefox/89.0/releasenotes/ (cherry picked from commit bcc35ef63fbabdd9e0b03213fb4af67dedf4c359) Martin Weinelt2021-06-012-3/+9
| * | | rust-cbindgen_latest: init at 0.19.0Martin Weinelt2021-06-012-0/+42
* | | | Merge #125593: polkit: Fix authentication bypass vulnerabilityVladimír Čunát2021-06-041-0/+7
|\ \ \ \
| * | | | polkit: Fix local privilege escalation vulnerability•••Fixes a local privilege escalation using polkit_system_bus_name_get_creds_sync() Fixes: CVE-2021-3560 (cherry picked from commit 26ac1d5db953292d78f0585dd8baccd9a36a44a4) Martin Weinelt2021-06-041-0/+7
* | | | | linuxPackages.ati_drivers_x11: move to alias set•••(cherry picked from commit 095e6fdd126c91f3196bf19cbbc5caf8d6c292a9) Jonathan Ringer2021-06-031-2/+3
* | | | | tdesktop: add optional dependencies•••(cherry picked from commit fa3517c57a831f56fdb5c60f573ac1c70d5f16eb) Jonathan Ringer2021-06-031-4/+4
* | | | | tdesktop: 2.7.4 -> 2.7.5•••(cherry picked from commit be72f6a7ce5f2cefbfc7ade175669494e65c3d8a) Jonathan Ringer2021-06-031-8/+14
|/ / / /