| Commit message (Expand) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | flatpak: 1.12.2 -> 1.12.4•••Fixes CVE-2021-43860 and CVE-2022-21682 Changes: https://github.com/flatpak/flatpak/releases/tag/1.12.4 https://github.com/flatpak/flatpak/releases/tag/1.12.3 Security advisories: https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx (cherry picked from commit a4f05760dc80d89905c29e958e9464c536afbac8) origin/backport-157036-to-release-21.11 | Thomas Gerbet | 2022-01-27 | 2 | -10/+3 |
| * | Merge pull request #157057 from NixOS/backport-156857-to-release-21.11•••[Backport release-21.11] doc/coding-conventions: Fix version attribute suffix to match reality | Robert Hensing | 2022-01-27 | 1 | -1/+1 |
| |\ | |||||
| | * | doc/coding-conventions: Fix version attribute suffix to match reality•••The current doc is wildly out of touch with reality. A regex search shows the following stats. ``` Style example Frequency Regex used nix-2-5: 8 [a-zA-Z]-[0-9]+(-[0-9]+)+ = nix-2_5: 17 [a-zA-Z]-[0-9]+(_[0-9]+)+ = nix_2_5: 689 [a-zA-Z]_[0-9]+(_[0-9]+)+ = nix_2-5: 1 [a-zA-Z]_[0-9]+(-[0-9]+)+ = ``` (cherry picked from commit daca830722a48d67065658f8259782fd0734eb9f) | Robert Hensing | 2022-01-27 | 1 | -1/+1 |
| * | | Merge pull request #156842 from FliegendeWurst/21.11-htmldoc-1.9.14•••[21.11] htmldoc: 1.9.12 -> 1.9.14 | Renaud | 2022-01-27 | 1 | -2/+2 |
| |\ \ | |||||
| | * | | htmldoc: 1.9.13 -> 1.9.14•••(cherry picked from commit a712326cfbb1a682d9b6d22ac448eee11b01cfc0) | R. Ryantm | 2022-01-26 | 1 | -2/+2 |
| | * | | htmldoc: 1.9.12 -> 1.9.13•••(cherry picked from commit 5e67953f20e3977487d334d809f152436c09964c) | R. Ryantm | 2022-01-26 | 1 | -2/+2 |
| * | | | Merge pull request #156900 from NixOS/backport-156875-to-release-21.11•••[Backport release-21.11] linux: upgrade hardened kernel 5.x (CVE-2022-0185) | ajs124 | 2022-01-27 | 1 | -15/+15 |
| |\ \ \ | |_|/ |/| | | |||||
| | * | | linux: upgrade hardened kernel (CVE-2022-0185)•••5.4.172 -> 5.4.173, 5.10.92 -> 5.10.93, 5.15.15 -> 5.15.16 (cherry picked from commit a86365b05576776e279d823ffcc72f3511b2d9b8) | Gregor Pogacnik | 2022-01-26 | 1 | -15/+15 |
| * | | | postfix: 3.6.3 -> 3.6.4•••http://www.postfix.org/announcements/postfix-3.6.4.html (cherry picked from commit a783365e227a25f2871da13f4422de4c4feebf39) | Robert Schütz | 2022-01-27 | 1 | -2/+2 |
| * | | | flatpak-builder: 1.2.0 -> 1.2.2•••Changes: https://github.com/flatpak/flatpak-builder/releases/tag/1.2.2 https://github.com/flatpak/flatpak-builder/releases/tag/1.2.1 Security advisory: https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx (cherry picked from commit 06084eba20b64964ffd54d06e8b0a2835da338b1) | Thomas Gerbet | 2022-01-27 | 1 | -6/+2 |
| * | | | signal-desktop: 5.29.0 -> 5.29.1•••(cherry picked from commit eeb0e220cddb17b00f7f84e25dbd036520c27a22) | Michael Weiss | 2022-01-27 | 1 | -2/+2 |
| * | | | signal-desktop: 5.28.0 -> 5.29.0•••(cherry picked from commit 497a16f2a61e296b6cfc66646e39162d3c263651) | Michael Weiss | 2022-01-27 | 1 | -2/+2 |
| * | | | signal-desktop: 5.27.1 -> 5.28.0•••This update breaks Ozone/Wayland due to an Electron update [0]. This isn't ideal but we cannot block Signal-Desktop updates indefinitely based on that. It's an upstream issue that is tracked by both Signal-Desktop [1] and Electron [2]. Unfortunately, there are no known fixes/workarounds yet. [0]: https://github.com/signalapp/Signal-Desktop/commit/46ddcc50f9efbd492126dad9f215a2a66e39995b [1]: https://github.com/signalapp/Signal-Desktop/issues/5719 [2]: https://github.com/electron/electron/issues/32436 (cherry picked from commit e06082eda06ee586de17e0a060e8cd0eddd20c69) | Michael Weiss | 2022-01-27 | 1 | -2/+2 |
| * | | | Merge pull request #157028 from NixOS/backport-156937-to-release-21.11•••[Backport release-21.11] firefox: 96.0.2 -> 96.0.3; firefox-bin: 96.0.2 -> 96.0.3; firefox-esr-91: 91.5.0esr -> 91.5.1esr | Bernardo Meurer | 2022-01-27 | 2 | -397/+397 |
| |\ \ \ | |||||
| | * | | | firefox-bin: 96.0.2 -> 96.0.3•••(cherry picked from commit 7fdbbd0efc4edf4dc110a442bea01485608d6702) | Martin Weinelt | 2022-01-27 | 1 | -393/+393 |
| | * | | | firefox-esr-91: 91.5.0esr -> 91.5.1esr•••(cherry picked from commit c06f1fe43e5f8d4c941e51c9f36149e7c2406620) | Martin Weinelt | 2022-01-27 | 1 | -2/+2 |
| | * | | | firefox: 96.0.2 -> 96.0.3•••(cherry picked from commit c978d968e319abdf8702d8c7d9cb12c3da0d96d0) | Martin Weinelt | 2022-01-27 | 1 | -2/+2 |
| |/ / / | |||||
| * | | | Merge pull request #156920 from wamserma/release-fix-imagemagick•••[21.11] imagemagick: apply upstream patch to fix perlPackages.ImageMagick | Janne Heß | 2022-01-27 | 1 | -1/+9 |
| |\ \ \ | |||||
| | * | | | imagemagick: apply upstream patch to fix perlPackages.ImageMagick•••(cherry picked from commit a4eda7a9300477102b27214b19aebd9ddb1d0617) | Markus S. Wamser | 2022-01-27 | 1 | -1/+9 |
| | |/ / | |||||
| * | | | Merge pull request #156991 from NixOS/backport-156982-to-release-21.11•••[Backport release-21.11] electron_13: 13.6.7 -> 13.6.8 | Pavol Rusnak | 2022-01-27 | 1 | -8/+8 |
| |\ \ \ | |||||
| | * | | | electron_13: 13.6.7 -> 13.6.8•••https://github.com/electron/electron/releases/tag/v13.6.8 (cherry picked from commit 7a2cc7b49185c8fb75f6a948a1df69fa3952ad28) | TredwellGit | 2022-01-27 | 1 | -8/+8 |
| |/ / / | |||||
| * | | | Merge pull request #156942 from NixOS/backport-156886-to-release-21.11•••[Backport release-21.11] streamlink: 3.1.0 -> 3.1.1 | Mario Rodas | 2022-01-27 | 1 | -2/+2 |
| |\ \ \ | |||||
| | * | | | streamlink: 3.1.0 -> 3.1.1•••(cherry picked from commit 9cd3ed6e8cbdfc2310557608b6c055aeb4aaf7ec) | D Anzorge | 2022-01-27 | 1 | -2/+2 |
| * | | | | Merge pull request #156751 from NixOS/backport-156587-to-release-21.11•••[Backport release-21.11] Improve check that evaluation does not depend on the Nixpkgs path | Eelco Dolstra | 2022-01-27 | 2 | -11/+22 |
| |\ \ \ \ | |||||
| | * | | | | pathDerivation: Copy path•••Otherwise you end up with a derivation that refers to the original path (which is not in the Nix store and not accessible to builders). This caused the derivation paths for the docbookrx package (removed on master) to depend on the location of the nixpkgs source tree. (cherry picked from commit 55ae086747caa71b92f6713a58a909acef944705) | Eelco Dolstra | 2022-01-25 | 1 | -1/+1 |
| | * | | | | Check that nix-env output doesn't depend on the Nixpkgs location•••(cherry picked from commit cb2f8a87d5389c7347b27937cbcde510696e36f7) | Eelco Dolstra | 2022-01-25 | 1 | -10/+21 |
| * | | | | | Merge pull request #156980 from NixOS/backport-156944-to-release-21.11•••[Backport release-21.11] tbb: fix pcTemplate url | Jan Tojnar | 2022-01-27 | 1 | -1/+1 |
| |\ \ \ \ \ | |||||
| | * | | | | | tbb: fix pcTemplate url•••(cherry picked from commit 55888a24cfd6dff0241b09c46bad6df9890f5f53) | Dmitry Kalinkin | 2022-01-27 | 1 | -1/+1 |
| |/ / / / / | |||||
| * | | | | | Merge pull request #156968 from NixOS/backport-156880-to-release-21.11 | Martin Weinelt | 2022-01-27 | 1 | -2/+2 |
| |\ \ \ \ \ | |||||
| | * | | | | | doas: 6.8.1 -> 6.8.2•••https://github.com/Duncaen/OpenDoas/compare/v6.8.1...v6.8.2 (cherry picked from commit 7a75977e06f4ef41260c311c587f398832c934af) | Cole Helbling | 2022-01-27 | 1 | -2/+2 |
| | | |/ / / | |/| | | | |||||
| * | | | | | Merge pull request #155006 from NixOS/backport-154863-to-release-21.11•••[Backport release-21.11] sqlcipher: enable JSON1 extension | Wout Mertens | 2022-01-27 | 1 | -4/+3 |
| |\ \ \ \ \ | |/ / / / |/| | | | | |||||
| | * | | | | sqlcipher: grab CFLAGS from sqlite•••Co-authored-by: Sandro <sandro.jaeckel@gmail.com> (cherry picked from commit 3fc8be277da9ef16fded052863df1d336176ca54) | Wout Mertens | 2022-01-26 | 1 | -19/+3 |
| | * | | | | sqlcipher: sync flags with sqlite•••(cherry picked from commit e6988feaac2829ad8c3f56d4138091a07a36befd) | Wout Mertens | 2022-01-26 | 1 | -4/+18 |
| | * | | | | sqlcipher: enable JSON1 extension•••(cherry picked from commit f52d6fb31d3dde7ce4849de9a14e38d5293da723) | Wout Mertens | 2022-01-26 | 1 | -1/+2 |
| * | | | | | Merge pull request #156940 from NixOS/backport-156868-to-release-21.11•••[Backport release-21.11] colmena: 0.2.0 -> 0.2.1 | Bobby Rong | 2022-01-27 | 1 | -3/+3 |
| |\ \ \ \ \ | |||||
| | * | | | | | colmena: 0.2.0 -> 0.2.1•••(cherry picked from commit e81a21bcd5f600d8408f6c5406e6bd6e9f0c0fa5) | Zhaofeng Li | 2022-01-27 | 1 | -3/+3 |
| |/ / / / / | |||||
| * | | | | | Merge pull request #156928 from NixOS/backport-156883-to-release-21.11•••[21.11] libvlc: fix build | Anderson Torres | 2022-01-26 | 1 | -1/+1 |
| |\ \ \ \ \ | |||||
| | * | | | | | libvlc: fix build•••(cherry picked from commit 59539a3d3e7a5e263747bdf03ca8e41318fcd5f5) | ajs124 | 2022-01-27 | 1 | -1/+1 |
| |/ / / / / | |||||
| * | | | | | Merge pull request #156915 from NixOS/backport-156701-to-release-21.11•••[Backport release-21.11] xen: mark unsupported versions as vulnerable | 0x4A6F | 2022-01-26 | 1 | -0/+4 |
| |\ \ \ \ \ | |||||
| | * | | | | | xen: mark unsupported versions as vulnerable•••Our support for Xen lacks maintenance and since Xen has monthly security advisories it is reasonable to assume our version is affected by a multitude of security problems that are fixed upstream. How many advisories? Browsing oss-security shows the following number of advisories in each of the following years: 2022: 3 2021: 53 2020: 54 2019: 46 <-- we are *here* https://xenbits.xen.org/docs/unstable/support-matrix.html (cherry picked from commit 39341ed38be4695623893222b4b82873b348bb61) | Martin Weinelt | 2022-01-26 | 1 | -0/+4 |
| |/ / / / / | |||||
| * | | | | | Merge pull request #156896 from NixOS/backport-156889-to-release-21.11•••[Backport release-21.11] rng-tools: fix path to opensc-pkcs11 shared lib | Renaud | 2022-01-26 | 1 | -9/+5 |
| |\ \ \ \ \ | |_|_|/ / |/| | | | | |||||
| | * | | | | rng-tools: fix path to opensc-pkcs11.so•••Changes upstream made the patching on rngd.c irrelevant (cherry picked from commit 96e055fba48de677035da731594a38faa7a9e277) | Renaud | 2022-01-26 | 1 | -9/+5 |
| |/ / / / | |||||
| * | | | | Merge pull request #156848 from FliegendeWurst/21.11-go-1.17.5•••[21.11] go: 1.17.3 -> 1.17.5 | Thiago Kenji Okada | 2022-01-26 | 1 | -2/+2 |
| |\ \ \ \ | |||||
| | * | | | | go_1_17: 1.17.4 -> 1.17.5•••(cherry picked from commit 388f0db0afb7ee0760caa70e4601f3fb7c3a21ac) | zowoq | 2022-01-26 | 1 | -2/+2 |
| | * | | | | go_1_17: 1.17.3 -> 1.17.4•••(cherry picked from commit bb9bd465b625bfc971908c5d3d84ce517e1c0691) | zowoq | 2022-01-26 | 1 | -2/+2 |
| | | |_|/ | |/| | | |||||
| * | | | | Merge #156872: nixos/kresd: Fix invalid regular expression•••... into release-21.11 The problem has only been confirmed to occur on *-darwin. | Vladimír Čunát | 2022-01-26 | 1 | -1/+1 |
| |\ \ \ \ | |_|/ / |/| | | | |||||
| | * | | | Fix invalid regular expression #156861•••Empty parantheses are not supported in regular expressions on Darwin/macOS. The old regular expression produces an error during evaluation. This commit fixes that. Nix‘s `builtins.match` works with extend POSIX regular expressions. The specification for these regular expression states[^1] that the result for a left paranthesis immediately followed by a right paranthesis outside of a bracket expression is undefined. [^1]: https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap09.html#tag_09_04_03 (cherry picked from commit 6a96992fe0d1fd125684261c5a029e75e7820b4f) | Martin Puppe | 2022-01-26 | 1 | -1/+1 |
| |/ / / | |||||
| * | | | Merge pull request #156834 from NixOS/backport-155725-to-release-21.11•••[Backport release-21.11] live555: 2019.11.22 -> 2022.01.21 | Anderson Torres | 2022-01-26 | 2 | -4/+19 |
| |\ \ \ | |/ / |/| | | |||||
| | * | | vlc: patch for recent live555 versions•••(cherry picked from commit ca07883f10fc464d5dd877defb72b9dd436af3ca) | FliegendeWurst | 2022-01-26 | 1 | -0/+10 |
| | * | | live555: 2019.11.22 -> 2022.01.21•••(cherry picked from commit 460fdfce74c739e774f8ac8e26447977cf63adad) | FliegendeWurst | 2022-01-26 | 1 | -4/+9 |
| |/ / | |||||
