summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* zeromq: 4.3.2 -> 4.3.3•••(cherry picked from commit ef30a745a8b94dc7253172d12ef7bd7eb563b186) origin/staging-20.09Pierre Bourdon2021-06-281-4/+6
* Merge pull request #127131 from NixOS/backport-126521-to-staging-20.09•••[Backport staging-20.09] dhcp: 4.4.2 -> 4.4.2-P1Martin Weinelt2021-06-271-2/+2
|\
| * dhcp: 4.4.2 -> 4.4.2-P1•••Fixes CVE-2021-25217. https://kb.isc.org/docs/cve-2021-25217 (cherry picked from commit efc86b71a4541e5901be42159a53aeaf34d66f26) Thomas Gerbet2021-06-161-2/+2
* | imagemagick6: 6.9.12-16 -> 6.9.12-17•••(cherry picked from commit adb518b5e94024462781bced3baa8a5ab05bd0d0) Robert Schütz2021-06-261-2/+2
* | Merge pull request #127781 from NixOS/backport-127776-to-staging-20.09•••[Backport staging-20.09] imagemagick6: 6.9.12-15 -> 6.9.12-16Robert Schütz2021-06-221-2/+2
|\ \
| * | imagemagick6: 6.9.12-15 -> 6.9.12-16•••(cherry picked from commit 4b1e53a46dd1315aee3639cad59c6fc66ea2597b) Robert Schütz2021-06-221-2/+2
|/ /
* | llvm_9: avoid aarch64 rebuilds introduced by b20716b4db3•••Due to a builder outage the aarch64-linux queue got long after all. x86_64-darwin build had failed before the change, so I just left it. Vladimír Čunát2021-06-171-1/+1
* | llvm_{11,12}: patch to fix a test on older CPUs•••Taken from nixpkgs master commit ea306f6dfc. Right now they didn't build on x86_64-linux, blocking chromium: https://hydra.nixos.org/build/145472130#tabs-buildsteps We haven't encountered the issue on other platforms and 20.09 isn't planned to live long, so let's not burden Hydra with more rebuilds than necessary. Vladimír Čunát2021-06-172-0/+20
|/
* Merge branch 'release-20.09' into staging-20.09Vladimír Čunát2021-06-1626-335/+428
|\
| * Merge pull request #126985 from NixOS/backport-126922-to-release-20.09•••[Backport release-20.09] nixos/ssh: Add an example of verbatim keysRobert Hensing2021-06-151-1/+15
| |\
| | * nixos/ssh: Document authorizedKeysFiles properly•••(cherry picked from commit dab747106e20268e6d3a7c1a758185bc75507bef) Robert Hensing2021-06-151-1/+11
| | * nixos/ssh: Add an example of verbatim keys•••This confused someone on SO. (cherry picked from commit 8352cc9a23a5fea11d467a5b8341b24cd162c62a) Robert Hensing2021-06-151-0/+4
| |/
| * update terraform_0_11 to 0.11.15 (#126909)Benjamin Smith2021-06-151-2/+2
| * imagemagick: 7.0.11-14 -> 7.1.0-0•••(cherry picked from commit 50967b77c0051ee7a5ca8d974d3cc43bf5069a5a) Robert Schütz2021-06-131-2/+2
| * imagemagick6: 6.9.12-14 -> 6.9.12-15•••(cherry picked from commit 929ddc6fa567c99bfaeada7927f6e52ef4de5025) Robert Schütz2021-06-131-2/+2
| * imagemagick: 7.0.11-13 -> 7.0.11-14•••(cherry picked from commit 31a8c0e5c4d9f63a17054ea30d7b963c48f5790e) Kerstin Humm2021-06-131-2/+2
| * Merge pull request #126739 from NixOS/backport-126662-to-release-20.09•••[Backport release-20.09] ungoogled-chromium: 91.0.4472.77 -> 91.0.4472.101Michael Weiss2021-06-131-5/+5
| |\
| | * ungoogled-chromium: 91.0.4472.77 -> 91.0.4472.101•••(cherry picked from commit 3952d191751df8313e0ba0e17ea4818ded20e027) Michael Weiss2021-06-131-5/+5
| |/
| * imagemagick: 6.9.12-12 -> 6.9.12-14•••(cherry picked from commit 99f12af681ebd3369a72580cccddc317841765c5) Kerstin Humm2021-06-111-2/+2
| * Merge pull request #126504 from NixOS/backport-126452-to-release-20.09•••[Backport release-20.09] chromium: 91.0.4472.77 -> 91.0.4472.101Michael Weiss2021-06-101-3/+3
| |\
| | * chromium: 91.0.4472.77 -> 91.0.4472.101•••https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html This update includes 14 security fixes. Google is aware that an exploit for CVE-2021-30551 exists in the wild. CVEs: CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547 CVE-2021-30548 CVE-2021-30549 CVE-2021-30550 CVE-2021-30551 CVE-2021-30552 CVE-2021-30553 (cherry picked from commit 053f1dc49028f8f438506b187739d80d83984c16) Michael Weiss2021-06-101-3/+3
| |/
| * Merge pull request #125233 from risicle/ris-radare2-CVE-2021-32613-r20.09•••[20.09] radare2: add patch for CVE-2021-32613Maximilian Bosch2021-06-092-0/+67
| |\
| | * radare2: add patch for CVE-2021-32613Robert Scott2021-06-012-0/+67
| * | Merge pull request #126204 from talyz/composer-2.0.14•••[20.09] phpPackages.composer2: 2.0.13 -> 2.0.14Elis Hirwing2021-06-081-2/+2
| |\ \
| | * | phpPackages.composer2: 2.0.13 -> 2.0.14talyz2021-06-081-2/+2
| * | | steam/fhsenv: add pipewire as hard requirement•••(cherry picked from commit 1817df0beb89a26050c5e1a7f9a12e4256cab427) Jonathan Ringer2021-06-081-0/+1
| * | | 389-base: Add CVE-2021-3514•••(cherry picked from commit fb7a3e1086debb3c47f0881724caccaa1a82642c) Janne Heß2021-06-081-0/+3
| |/ /
| * | Merge pull request #126089 from mweinelt/20.09/isync•••[20.09] isync: 1.3.5 -> 1.3.6Michael Weiss2021-06-081-2/+2
| |\ \
| | * | isync: 1.3.5 -> 1.3.6•••Fixes: CVE-2021-3578 Martin Weinelt2021-06-071-2/+2
| * | | Merge pull request #126172 from NinjaTrappeur/nin-dino-2009-port•••[20.09] dino: 0.1.0 -> 0.1.2Jörg Thalheim2021-06-081-12/+2
| |\ \ \
| | * | | dino: 0.1.0 -> 0.1.2•••Fixes nvd.nist.gov/vuln/detail/CVE-2021-33896. Note: 20.09 is still using the 0.1.x dino lineage, we can't backport the unstable and 21.05 0.2.x fix, we have to port a fix. The libsignal patch landed in the upstream tree, we can drop the patch. Félix Baylac-Jacqué2021-06-081-12/+2
| * | | | steamPackages.steam-runtime: 0.20210317.0 -> 0.20210527.0•••(cherry picked from commit 2033f37fb284bd55159ea1650aa93a635caaffb3) Artturin2021-06-071-2/+2
| * | | | Merge #125623: thunderbird*: 78.10.2 -> 78.11.0Vladimír Čunát2021-06-072-267/+267
| |\ \ \ \
| | * | | | thunderbird-bin: 78.10.2 -> 78.11.0•••(cherry picked from commit 79f71ef9aab48926e8cd0708afa45b0d611808f0) taku02021-06-041-265/+265
| | * | | | thunderbird: 78.10.2 -> 78.11.0•••(cherry picked from commit 7267b80c71df31360bab7fcfacb644081a850bf4) taku02021-06-041-2/+2
| * | | | | Merge pull request #125088 from risicle/ris-pg-partman-CVE-2021-33204-r20.09•••[20.09] postgresqlPackages.pg_partman: add patch for CVE-2021-33204Martin Weinelt2021-06-071-1/+13
| |\ \ \ \ \ | | |_|_|/ / | |/| | | |
| | * | | | postgresqlPackages.pg_partman: add patch for CVE-2021-33204•••upstream squashes entire releases. joy. fetchpatch to the rescue. Robert Scott2021-05-311-1/+13
| | | |_|/ | | |/| |
| * | | | Merge pull request #126029 from NixOS/backport-125922-to-release-20.09•••[Backport release-20.09] tor-browser-bundle-bin: 10.0.16 -> 10.0.17Luke Granger-Brown2021-06-071-3/+3
| |\ \ \ \
| | * | | | tor-browser-bundle-bin: 10.0.16 -> 10.0.17•••(cherry picked from commit 0fc1a3d0d89ce06992714c690449c45713af75a6) FliegendeWurst2021-06-071-3/+3
| |/ / / /
| * | | | linux/hardened/patches/5.4: 5.4.121-hardened1 -> 5.4.122-hardened1•••(cherry picked from commit 1ce119e9bb3ada25ad7f9fcfb7565194a4faffdb) Yurii Matsiuk2021-06-061-3/+3
| * | | | linux/hardened/patches/5.12: 5.12.6-hardened1 -> 5.12.7-hardened1•••(cherry picked from commit cdc6a4cc1e858d299e20e4cb90df427ac15411cc) Yurii Matsiuk2021-06-061-3/+3
| * | | | linux/hardened/patches/5.10: 5.10.39-hardened1 -> 5.10.40-hardened1•••(cherry picked from commit 46ca914a5e4b8aa4cd184cd5a514200f224a5d06) Yurii Matsiuk2021-06-061-3/+3
| * | | | linux/hardened/patches/4.19: 4.19.191-hardened1 -> 4.19.192-hardened1•••(cherry picked from commit 938ea32339ada0492d545542123e68e8833986c7) Yurii Matsiuk2021-06-061-3/+3
| * | | | linux/hardened/patches/4.14: 4.14.233-hardened1 -> 4.14.234-hardened1•••(cherry picked from commit 52e8c2d1650de8760c2cd93f67f45f559e00cdfe) Yurii Matsiuk2021-06-061-3/+3
| * | | | linux: 5.4.121 -> 5.4.122•••(cherry picked from commit c16011b1d9f92d6bf68064fc0e12b66b4c6ad48f) Yurii Matsiuk2021-06-061-2/+2
| * | | | linux: 5.10.39 -> 5.10.40•••(cherry picked from commit bed18f50193d35c43408682837c7f96f30717c22) Yurii Matsiuk2021-06-061-2/+2
| * | | | linux: 4.9.269 -> 4.9.270•••(cherry picked from commit 7d57471efa5d1b36f44084709e77c087ee8629f7) Yurii Matsiuk2021-06-061-2/+2
| * | | | linux: 4.4.269 -> 4.4.270•••(cherry picked from commit 819f6a5d8cf82857e9cc4f17879a68c944747bdf) Yurii Matsiuk2021-06-061-2/+2
| * | | | linux: 4.19.191 -> 4.19.192•••(cherry picked from commit bd12ba96439e67cf75ec94773b7b2b5fc5f6079b) Yurii Matsiuk2021-06-061-2/+2
| * | | | linux: 4.14.233 -> 4.14.234•••(cherry picked from commit 91233c46e36ef775e0ef92b4be0b810598d9b800) Yurii Matsiuk2021-06-061-2/+2