summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Merge pull request #121569 from midchildan/backport/20.03/exiftool•••[20.03] perlPackages.ImageExifTool: apply fix for CVE-2021-22204origin/nixpkgs-20.03-darwinorigin/nixos-20.03-smallorigin/nixos-20.03Matthew Bauer2021-05-031-0/+10
|\
| * perlPackages.ImageExifTool: apply fix for CVE-2021-22204midchildan2021-05-031-0/+10
|/
* pythonPackages.hetzner: 0.8.2 -> 0.8.3•••Recent changes in the Hetzner Robot API have removed a few obsolete fields which version 0.8.2 was still referencing and which is now fixed in version 0.8.3. Due to a misunderstanding on my side I haven't updated to version 0.8.3 in nixpkgs yet, which resulted in this delay. This fixes the NixOps Hetzner backend. Signed-off-by: aszlig <aszlig@nix.build> (cherry picked from commit e899b57c8aae84b5c29a2d23bd5c33cc6afab2cd) aszlig2021-04-051-2/+2
* Merge remote-tracking branch 'origin/staging-20.03' into release-20.03Justin Humm2021-03-253-12/+200
|\
| * curl: fix hash mismatch issue by directly include CVE patches•••Include instead of using fetchpatch due to boostrapping requirement. origin/staging-20.03Tyson Whitehead2021-03-253-12/+200
* | [nixos/prometheus] promTypes.filter.value -> promTypes.filter.values•••The new configuration name for this is plural. Currently, attempting to enable ec2 SD results in a `promtool check config` error (cherry picked from commit 8389fb8f169bf770cdadf856030bf698ff0baeec) Travis Athougies2021-02-261-1/+1
* | linux: 5.4.83 -> 5.4.84•••(cherry picked from commit d1a0eb7f0b7065dea9715f6d6d7f9c6459dd37bf) Tim Steinbach2020-12-161-2/+2
* | linux: 5.4.81 -> 5.4.83Tim Steinbach2020-12-111-2/+2
* | linux: 4.9.247 -> 4.9.248Tim Steinbach2020-12-111-2/+2
* | linux: 4.4.247 -> 4.4.248Tim Steinbach2020-12-111-2/+2
* | linux: 4.19.161 -> 4.19.163Tim Steinbach2020-12-111-2/+2
* | linux: 4.14.210 -> 4.14.212Tim Steinbach2020-12-111-2/+2
* | Merge pull request #105995 from markuskowa/cve-slurm-20.03•••[20.03] slurm: 19.05.7.1 -> 19.05.8.1markuskowa2020-12-051-2/+2
|\ \
| * | slurm: 19.05.7.1 -> 19.05.8.1•••Addresses CVE-2020-27745 and CVE-2020-27746. Markus Kowalewski2020-12-051-2/+2
|/ /
* | linux: 5.4.80 -> 5.4.81Tim Steinbach2020-12-021-2/+2
* | linux: 4.9.246 -> 4.9.247Tim Steinbach2020-12-021-2/+2
* | linux: 4.4.246 -> 4.4.247Tim Steinbach2020-12-021-2/+2
* | linux: 4.19.160 -> 4.19.161Tim Steinbach2020-12-021-2/+2
* | linux: 4.14.209 -> 4.14.210Tim Steinbach2020-12-021-2/+2
* | microcodeIntel: 20201112 -> 20201118•••Fixes a regression on some "OEM platforms". Relates to #104301 (cherry picked from commit 5928d667043949e3532dce3e60b05ad2d2007d51) Martin Weinelt2020-11-271-2/+2
* | opensc: 0.20.0 -> 0.21.0•••(cherry picked from commit 19036e0ca0605d855066a10b650815b45cd76155) Justin Humm2020-11-251-18/+3
* | sddm: add patch for CVE-2020-28049•••> Local privilege escalation due to race condition in creation of the Xauthority file. Fixes: CVE-2020-28049 (cherry picked from commit faf436ea7915672835fce7a6b99576f491595d15) Martin Weinelt2020-11-241-1/+6
* | linux: 5.4.79 -> 5.4.80Tim Steinbach2020-11-241-2/+2
* | linux: 4.9.245 -> 4.9.246Tim Steinbach2020-11-241-2/+2
* | linux: 4.4.245 -> 4.4.246Tim Steinbach2020-11-241-2/+2
* | linux: 4.19.159 -> 4.19.160Tim Steinbach2020-11-241-2/+2
* | linux: 4.14.208 -> 4.14.209Tim Steinbach2020-11-241-2/+2
* | Merge pull request #102815 from veprbl/pr/motion_CVE-2020-26566_20.03•••[20.03] motion: fix CVE-2020-26566Martin Weinelt2020-11-231-1/+10
|\ \
| * | motion: fix CVE-2020-26566•••https://nvd.nist.gov/vuln/detail/CVE-2020-26566 Dmitry Kalinkin2020-11-041-1/+10
* | | linux: 5.4.78 -> 5.4.79Tim Steinbach2020-11-231-2/+2
* | | linux: 4.9.244 -> 4.9.245Tim Steinbach2020-11-231-2/+2
* | | linux: 4.4.244 -> 4.4.245Tim Steinbach2020-11-231-2/+2
* | | linux: 4.19.158 -> 4.19.159Tim Steinbach2020-11-231-2/+2
* | | linux: 4.14.207 -> 4.14.208Tim Steinbach2020-11-231-2/+2
* | | Merge pull request #104583 from stigtsp/package/mutt-patch-CVE-2020-28896-rel...•••[20.03] mutt: apply patch for CVE-2020-28896Martin Weinelt2020-11-221-4/+12
|\ \ \
| * | | mutt: apply patch for CVE-2020-28896•••mutt has improper handling of broken IMAP connections, this could result in authentication credentials being sent over an unencrypted connection, without $ssl_force_tls being consulted. https://security.archlinux.org/CVE-2020-28896 https://gitlab.com/muttmua/mutt/-/commit/04b06aaa3e0cc0022b9b01dbca2863756ebbf59a Stig Palmquist2020-11-221-4/+12
|/ / /
* | | Merge pull request #104481 from taku0/thunderbird-bin-78.5.0_release-20.03••• [20.03] thunderbird, thunderbird-bin: 78.4.0 -> 78.5.0 [High security fixes]Martin Weinelt2020-11-222-267/+267
|\ \ \
| * | | thunderbird: 78.4.3 -> 78.5.0•••(cherry picked from commit 19682545d91b4589544fe2f040320dbe7e28a66f) taku02020-11-211-2/+2
| * | | thunderbird-bin: 78.4.3 -> 78.5.0•••(cherry picked from commit 52f5b947f6c4471de8f2e3659a9790bf7e4c777c) taku02020-11-211-265/+265
| * | | thunderbird: 78.4.2 -> 78.4.3•••(cherry picked from commit 205652e31afac6eed2e1fc40ceaa0270dd2cc601) taku02020-11-211-2/+2
| * | | thunderbird-bin: 78.4.2 -> 78.4.3•••(cherry picked from commit ec5fc9b7a4077c167fcc71812fbac4b04bebdf88) taku02020-11-211-265/+265
| * | | thunderbird: 78.4.1 -> 78.4.2•••(cherry picked from commit bd03a75f6f59f76f0e72d71135eb95bde3ffb683) taku02020-11-211-2/+2
| * | | thunderbird-bin: 78.4.1 -> 78.4.2•••(cherry picked from commit d19906002f6935c358bf8d925b1cb8c8195bb8bf) taku02020-11-211-265/+265
| * | | thunderbird: 78.4.0 -> 78.4.1•••(cherry picked from commit 00213ef17f8bc35aae3227012256713d17b1d0d8) (with modification) taku02020-11-211-2/+2
| * | | thunderbird-bin: 78.4.0 -> 78.4.1•••(cherry picked from commit 33a3ac31693030f0942a960ec0cc411f5a5b0dbe) taku02020-11-211-265/+265
* | | | glfw: 3.3.1 -> 3.3.2•••(cherry picked from commit ebb3d1a9a49b1b5b3eac8911b7eb3bd48870098a) Martin Milata2020-11-211-2/+2
* | | | opencv3, opencv4: use openblasCompat•••without master's fix in #83888, opencv3 & opencv4 end up with an 8-byte openblas, which it does work with. however this causes the python bindings to also end up with an 8-byte openblas, which numpy doesn't work with. force 4-byte openblas for opencv. Robert Scott2020-11-211-0/+2
|/ / /
* | | Merge pull request #104362 from NixOS/staging-20.03•••Merge staging-20.03 into release-20.03Frederik Rietdijk2020-11-211-1/+19
|\ \ \ | | |/ | |/|
| * | openldap: apply security patches•••Fixes: CVE-2020-25692, CVE-2020-25709, CVE-2020-25710 Martin Weinelt2020-11-191-6/+14
| * | Merge release-20.03 into staging-20.03Frederik Rietdijk2020-11-19110-1500/+3126
| |\ \