| Commit message (Expand) | Author | Age | Files | Lines |
| * | buildFhsUserenv: don't leak mounts to other processes•••If run as root we were leaking mounts to the parent namespace,
which lead to an error when removing the temporary mountroot.
To fix this we remount the whole tree as private as soon as we created
the new mountenamespace.
(cherry picked from commit 43908f4c1d8489ca284c47fb835ec3fa348016b0)
origin/backport-125804-to-release-21.05 | Jörg Thalheim | 2021-06-05 | 1 | -1/+3 |
| * | openrgb: Fix udev rules with hardcoded /bin/chmod•••New rules introduced in openrgb 0.6.
openrgb: Implement nixpkgs-review suggestions
* warning: missing-phase-hooks
* warning: unclear-gpl
* warning: unnecessary-parallel-building
(cherry picked from commit 84dc04c2db2f45237658e1178f22057f49a6b95f)
| Stefan Frijters | 2021-06-05 | 1 | -4/+9 |
| * | Merge pull request #125528 from wizeman/u/fix-gitrepo-backport•••[21.05] gitRepo: Add import to ssl module to avoid runtime error (#125373) | Sandro | 2021-06-05 | 2 | -3/+34 |
| |\ |
|
| | * | gitRepo: Add import to ssl module to avoid runtime error (#125373)•••Co-authored-by: Ricardo M. Correia <rcorreia@wizy.org>
(cherry picked from commit 8f166b95c9ee10743039d1f2b1c21f9edee5da88)
| Otavio Salvador | 2021-06-03 | 2 | -3/+34 |
| * | | Merge pull request #125783 from NixOS/backport-125625-to-release-21.05•••[Backport release-21.05] doc: Fix make in nix-shell | Robert Hensing | 2021-06-05 | 2 | -5/+4 |
| |\ \ |
|
| | * | | doc: Fix make in nix-shell•••When running make manually, makeFlags will not be passed. Let’s just use an environment variable.
(cherry picked from commit 034a9c0e16aab12978bb4a1c1f0e86c64778b388)
origin/backport-125625-to-release-21.05 | Jan Tojnar | 2021-06-05 | 2 | -5/+4 |
| * | | | Merge pull request #125782 from NixOS/backport-125645-to-release-21.05•••[Backport release-21.05] wireshark: 3.4.5 -> 3.4.6 | Robert Scott | 2021-06-05 | 1 | -2/+3 |
| |\ \ \ |
|
| | * | | | wireshark: 3.4.5 -> 3.4.6•••https://www.wireshark.org/docs/relnotes/wireshark-3.4.6.html
(cherry picked from commit 15974f58b8c216cf268f8c2302b036db701b31cd)
| TredwellGit | 2021-06-05 | 1 | -2/+3 |
| | |/ / |
|
| * | | | Merge pull request #125784 from NixOS/backport-125566-to-release-21.05•••[Backport release-21.05] pam_u2f: 1.1.0 -> 1.1.1 | Robert Scott | 2021-06-05 | 1 | -2/+10 |
| |\ \ \ |
|
| | * | | | pam_u2f: 1.1.0 -> 1.1.1•••Fixes CVE-2021-31924
https://www.yubico.com/support/security-advisories/ysa-2021-03/
Changelog: https://github.com/Yubico/pam-u2f/blob/pam_u2f-1.1.1/NEWS
(cherry picked from commit b5afbd350dc54553376bfa29e693b680be3c39bd)
| Thomas Gerbet | 2021-06-05 | 1 | -2/+10 |
| | |/ / |
|
| * | | | Merge pull request #125786 from NixOS/backport-125732-to-release-21.05•••[Backport release-21.05] rambox: unmaintain & mark as insecure | Maximilian Bosch | 2021-06-05 | 1 | -1/+4 |
| |\ \ \ |
|
| | * | | | rambox: unmaintain & mark as insecure•••Rambox hasn't had a stable release in a while and an increasing number
of issues which is why I don't intend to use this anymore.
While taking a closer look at the source I also realized that it uses
Electron 7.2.4[1]. This is not only EOLed[2], it also contains a few
security vulnerabilities which is why I decided to mark it as insecure.
A few (most likely not all) vulnerabilities can be found by looking at
the Electron 7 changelog[3]: after 7.2.4 there were a few more releases
with security backports - mostly from Chromium. Security issues that
were found later on (and are probably exploitable on the dependency
chain of rambox) aren't listed here. I only added two issues that seemed
applicable to `rambox`, but I haven't researched enough to check the
other ones.
[1] https://github.com/ramboxapp/community-edition/blob/0.7.7/package.json#L70
[2] https://www.electronjs.org/docs/tutorial/support#currently-supported-versions
[3] https://www.electronjs.org/releases/stable?version=7
(cherry picked from commit e2a15cd395f1e137c680d22f83cd195caf3d6c14)
| Maximilian Bosch | 2021-06-05 | 1 | -1/+4 |
| | |/ / |
|
| * | | | Merge pull request #125787 from NixOS/backport-125723-to-release-21.05•••[Backport release-21.05] ferdi: 5.6.0-beta.5 -> 5.6.0-beta.6, improve XWayland support | Maximilian Bosch | 2021-06-05 | 2 | -7/+23 |
| |\ \ \ |
|
| | * | | | ferdi: 5.6.0-beta.5 -> 5.6.0-beta.6, improve XWayland support•••ChangeLog: https://github.com/getferdi/ferdi/blob/1886c8abed32e33f0f547c069c674b79279cf931/CHANGELOG.md#560-beta6-2021-05-31
Even though this isn't explicitly noted in the Changelog, this seems to
have fixed the Element integration for me.
Additionally, I added a (hacky) `xdg-open` wrapper which removes the
`GDK_BACKEND` variable to fix the XWayland integration[1]. The problem
is that if a Firefox is running with Wayland (`ferdi` is running under
X11) and `GDK_BACKEND=x11` is passed to the `xdg-open` (and thus
`firefox`) process, Firefox refuses to start since another instance of
it is running under Wayland (but attempts to start in X11 mode because of
`GDK_BACKEND=x11`).
[1] https://github.com/electron/electron/issues/28436
(cherry picked from commit cd4ad7d2fee90fc3afb9f3f3957a7289f02f89dc)
| Maximilian Bosch | 2021-06-05 | 2 | -7/+23 |
| | |/ / |
|
| * | | | jitsi-meet-electron: 2.8.5 -> 2.8.6•••(cherry picked from commit 29c70d515a827c043fcef37ddbb675cd620f9301)
| Ilan Joselevich | 2021-06-05 | 1 | -2/+2 |
| * | | | gpxlab: update license•••(cherry picked from commit 87c98dcdfc1778f8988e3d430cfe847b56a26f5c)
| Guillaume Girol | 2021-06-05 | 1 | -2/+2 |
| * | | | gpxlab: fix localization•••(cherry picked from commit b931540229865e96ed515f0a041960c45a3069c2)
| Nikolay Korotkiy | 2021-06-05 | 2 | -5/+27 |
| * | | | teams: enable appindicator tray icon support•••(cherry picked from commit de7986d7afd9f140ebc43e8a95bdb7f1f7ed08af)
| Eduardo Sánchez Muñoz | 2021-06-05 | 1 | -0/+2 |
| * | | | vocal: fix build•••Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
(cherry picked from commit 01ef9faecb7e1be1f40f7aac4ebcefa4885d4652)
| fortuneteller2k | 2021-06-05 | 1 | -2/+13 |
| * | | | renoise: 3.3.1 -> 3.3.2•••(cherry picked from commit 78b11682349ce95de8764de59e603c2cc2208bab)
| InternetUnexplorer | 2021-06-05 | 1 | -2/+2 |
| * | | | tmuxinator: 2.0.2 -> 2.0.3•••tmuxinator 2.0.3 fixes a compatibility warning with tmux 2.3, which is
the version packaged on NixOS 21.05.
See https://github.com/tmuxinator/tmuxinator/issues/814
(cherry picked from commit 28ab65b5869c6673e359093662a1dfe3aba9b829)
| Serg Nesterov | 2021-06-05 | 1 | -2/+2 |
| |/ / |
|
| * | | Merge pull request #125773 from NixOS/backport-125724-to-release-21.05•••[Backport release-21.05] signal-desktop: 5.3.0 -> 5.4.0 | Michael Weiss | 2021-06-05 | 1 | -2/+2 |
| |\ \ |
|
| | * | | signal-desktop: 5.3.0 -> 5.4.0•••(cherry picked from commit f5be28bcc98e0a091c69df8d4e88a7b52452eb38)
origin/backport-125724-to-release-21.05 | Michael Weiss | 2021-06-05 | 1 | -2/+2 |
| * | | | Merge pull request #125762 from NixOS/backport-125749-to-release-21.05•••[Backport release-21.05] python3Packages.aiomultiprocess: disable failing tests | Martin Weinelt | 2021-06-05 | 1 | -0/+8 |
| |\ \ \
| |/ /
|/| | |
|
| | * | | python3Packages.aiomultiprocess: disable failing tests•••These tests fail from time to time and bring the whole test suite to a
timeout.
https://github.com/omnilib/aiomultiprocess/issues/97
(cherry picked from commit c8261a34f80d67223589a498bc0acd4713ab21b3)
| Martin Weinelt | 2021-06-05 | 1 | -0/+8 |
| |/ / |
|
| * | | Merge pull request #125349 from Mic92/containerd-backport•••[21.05] containerd: fix checksum | Jörg Thalheim | 2021-06-05 | 1 | -1/+1 |
| |\ \ |
|
| | * | | containerd: fix checksum | Jörg Thalheim | 2021-06-02 | 1 | -1/+1 |
| * | | | Merge pull request #125684 from NixOS/backport-125483-to-release-21.05•••[Backport release-21.05] nixos/prometheus-exporters: improve docs & fix rspamd exporter | Maximilian Bosch | 2021-06-04 | 3 | -20/+51 |
| |\ \ \ |
|
| | * | | | nixos/mail-exporter: add note about rspamd marking probe mails as spam•••(cherry picked from commit ba9768f3143c728a47515d0548025a103fca9013)
| Maximilian Bosch | 2021-06-04 | 1 | -0/+18 |
| | * | | | nixos/dovecot-exporter: fix documentation for old stats•••(cherry picked from commit 6fb847c55643780c1ba3a98c57ba57541ed33d14)
| Maximilian Bosch | 2021-06-04 | 1 | -1/+16 |
| | * | | | nixos/rspamd-exporter: fix metrics•••In 0.3.0 of the json-exporter[1] it was switched to a different jsonpath
library which made some changes - especially for spaces in keys -
necessary. Also I decided to remove the pretty-printed JSON as this
would interfere with the bash quoting too much. If one needs
pretty-printed output, they can still pipe the output to `jq`.
[1] https://github.com/prometheus-community/json_exporter/releases/tag/v0.3.0
(cherry picked from commit 976d668e5c5566c3e96b17d667830a0f3ed1bbb5)
| Maximilian Bosch | 2021-06-04 | 1 | -19/+17 |
| * | | | | Merge pull request #125526 from wizeman/u/fix-libraspberrypi-url-backport•••[21.05] libraspberrypi: fix URL | Sandro | 2021-06-04 | 1 | -1/+1 |
| |\ \ \ \
| |/ / /
|/| | | |
|
| | * | | | libraspberrypi: fix URL•••(cherry picked from commit 3915d2fd27e2d8a62cff752bd1e4146317c76f31)
| Ricardo M. Correia | 2021-06-03 | 1 | -1/+1 |
| | | |/
| |/| |
|
| * | | | Merge pull request #125646 from stigtsp/package/perl-Mojolicious-9.19-backpor...•••[21.05] perlPackages.Mojolicious: 9.17 -> 9.19 | stigtsp | 2021-06-04 | 1 | -3/+3 |
| |\ \ \ |
|
| | * | | | perlPackages.Mojolicious: 9.17 -> 9.19•••(cherry picked from commit 15f6e4ed3b734d00066e5a1401e45f554fc9c7bd)
| Zak B. Elep | 2021-06-04 | 1 | -3/+3 |
| * | | | | arion: 0.1.2.0 -> 0.1.3.0 | Robert Hensing | 2021-06-04 | 2 | -0/+39 |
| |/ / / |
|
| * | | | Merge pull request #125633 from NixOS/backport-125537-to-release-21.05•••[Backport release-21.05] nixos/release-notes: Fix link to GNOME 40 release notes | Sandro | 2021-06-04 | 1 | -1/+1 |
| |\ \ \ |
|
| | * | | | nixos/release-notes: Fix link to GNOME 40 release notes•••Signed-off-by: Anders Kaseorg <andersk@mit.edu>
(cherry picked from commit a681951902631d20e439fc60f53100967ba1cc72)
| Anders Kaseorg | 2021-06-04 | 1 | -1/+1 |
| * | | | | Merge pull request #125635 from NixOS/backport-125394-to-release-21.05•••[Backport release-21.05] win-spice: say yes to all 7z dialogs | Sandro | 2021-06-04 | 1 | -5/+5 |
| |\ \ \ \ |
|
| | * | | | | win-spice: say yes to all 7z dialogs•••(cherry picked from commit 0c245a39a9ab4eb0ed98892645ae5d726ee8c50c)
| fortuneteller2k | 2021-06-04 | 1 | -5/+5 |
| | |/ / / |
|
| * | | | | Merge pull request #125629 from NixOS/backport-125536-to-release-21.05•••[Backport release-21.05] matrix-synapse: 1.35.0 -> 1.35.1 | Maximilian Bosch | 2021-06-04 | 1 | -2/+2 |
| |\ \ \ \
| |/ / /
|/| | | |
|
| | * | | | matrix-synapse: 1.35.0 -> 1.35.1•••(cherry picked from commit 10cbea574d4882a8b58b74fd594ae55c64540797)
| Sumner Evans | 2021-06-04 | 1 | -2/+2 |
| * | | | | Merge #125139: firefox: 88.0.1 -> 89.0 (into release-21.05) | Vladimír Čunát | 2021-06-04 | 4 | -3/+51 |
| |\ \ \ \
| |/ / /
|/| | | |
|
| | * | | | firefox: 88.0.1 -> 89.0•••https://www.mozilla.org/en-US/firefox/89.0/releasenotes/
(cherry picked from commit bcc35ef63fbabdd9e0b03213fb4af67dedf4c359)
| Martin Weinelt | 2021-06-01 | 2 | -3/+9 |
| | * | | | rust-cbindgen_latest: init at 0.19.0 | Martin Weinelt | 2021-06-01 | 2 | -0/+42 |
| * | | | | Merge #125593: polkit: Fix authentication bypass vulnerability | Vladimír Čunát | 2021-06-04 | 1 | -0/+7 |
| |\ \ \ \ |
|
| | * | | | | polkit: Fix local privilege escalation vulnerability•••Fixes a local privilege escalation using polkit_system_bus_name_get_creds_sync()
Fixes: CVE-2021-3560
(cherry picked from commit 26ac1d5db953292d78f0585dd8baccd9a36a44a4)
| Martin Weinelt | 2021-06-04 | 1 | -0/+7 |
| * | | | | | linuxPackages.ati_drivers_x11: move to alias set•••(cherry picked from commit 095e6fdd126c91f3196bf19cbbc5caf8d6c292a9)
| Jonathan Ringer | 2021-06-03 | 1 | -2/+3 |
| * | | | | | tdesktop: add optional dependencies•••(cherry picked from commit fa3517c57a831f56fdb5c60f573ac1c70d5f16eb)
| Jonathan Ringer | 2021-06-03 | 1 | -4/+4 |
| * | | | | | tdesktop: 2.7.4 -> 2.7.5•••(cherry picked from commit be72f6a7ce5f2cefbfc7ade175669494e65c3d8a)
| Jonathan Ringer | 2021-06-03 | 1 | -8/+14 |
| |/ / / / |
|