summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* amazon-ssm-agent: 3.3.551.0 -> 3.3.808.0•••(cherry picked from commit 4992478d6e8c9a5ad45eae6223c843804d7ef0ad) origin/backport-337705-to-release-24.05R. Ryantm2024-09-011-2/+2
* [Backport release-24.05] amazon-ssm-agent: 3.3.484.0 -> 3.3.551.0 (#337790)Arian van Putten2024-09-011-2/+2
|\
| * amazon-ssm-agent: 3.3.484.0 -> 3.3.551.0•••(cherry picked from commit be7b4539ea0c1e803fe8e6ca107be2ebdf28294b) R. Ryantm2024-08-271-2/+2
* | [Backport release-24.05] discord: 0.0.65 -> 0.0.66 (#338778)Artturin2024-09-011-2/+2
|\ \
| * | discord: 0.0.65 -> 0.0.66•••(cherry picked from commit 507becefc92abbd801ef496b5fe33f73a1b51a51) R. Ryantm2024-09-011-2/+2
|/ /
* | [Backport release-24.05] nixos/ipu6: Don't build out-of-tree driver for kerne...Shea Levy2024-09-012-4/+7
|\ \
| * | ipu6: Don't build out-of-tree driver for kernels that have it•••(cherry picked from commit 3bfeae1428eac1e60a304268bf7dc218f152b145) Shea Levy2024-08-042-4/+7
* | | [Backport release-24.05] stats: 2.11.4 -> 2.11.7 (#338612)Nick Cao2024-09-011-2/+2
|\ \ \
| * | | stats: 2.11.4 -> 2.11.7•••Changelog: https://github.com/exelban/stats/releases/tag/v2.11.7 Diff: https://github.com/exelban/stats/compare/v2.11.4...v2.11.7 (cherry picked from commit 43e9e33891085bd22ce151c54c48d624c5deede7) DontEatOreo2024-08-311-2/+2
* | | | [Backport release-24.05] element-desktop: 1.11.75 -> 1.11.76 (#337906)Nick Cao2024-09-011-4/+4
|\ \ \ \
| * | | | element-desktop: 1.11.75 -> 1.11.76•••(cherry picked from commit 27d1923480b060691adf5c671778a8ccceda521f) Guanran Wang2024-08-281-4/+4
* | | | | [Backport release-24.05] flyctl: 0.2.120 -> 0.2.124 (#338751)Raghav Sood2024-09-011-3/+3
|\ \ \ \ \
| * | | | | flyctl: 0.2.120 -> 0.2.124•••(cherry picked from commit 0b4c2377a76382c4fbfc5d14e525256e1defc426) R. Ryantm2024-09-011-3/+3
|/ / / / /
* | | | | [Backport release-24.05] python313: 3.13.0b3 -> 3.13.0b4 (#338581)OTABI Tomoya2024-09-011-2/+2
|\ \ \ \ \
| * | | | | python313: 3.13.0b3 -> 3.13.0b4•••https://docs.python.org/3.13/whatsnew/changelog.html#python-3-13-0-beta-4 (cherry picked from commit d63b3b2fafa0597ad1c840409bbd84a053936bc0) Martin Weinelt2024-08-311-2/+2
* | | | | | [24.05] duckdb: add patch for CVE-2024-41672 (#337510)Thomas Gerbet2024-08-311-0/+8
|\ \ \ \ \ \
| * | | | | | duckdb: add patch for CVE-2024-41672Robert Scott2024-08-261-0/+8
* | | | | | | [Backport release-24.05] nixos/iso-image: Compress squashfs with zstd 19 (#33...Will Fancher2024-08-311-6/+1
|\ \ \ \ \ \ \
| * | | | | | | nixos/iso-image: Compress squashfs with zstd 19•••(cherry picked from commit 49192ef7a3dd166fc176e8bf7ad74160b09d58b4) Will Fancher2024-08-311-6/+1
|/ / / / / / /
* | | | | | | [24.05] backport fcgiwrap instances fix for local privilege escalation issue ...Emily2024-08-316-44/+267
|\ \ \ \ \ \ \
| * | | | | | | nixos/fcgiwrap: add security advisory links to messageseuxane2024-08-312-2/+2
| * | | | | | | nixos/fcgiwrap: fail eval with security assertion•••This adds a security assertion when using the global instance of fcgiwrap, which is vulnerable to a local privilege escalation. This is in addition to the current evaluation warning, and is more in line with being loud with security issues, similarly to with vulnerable packages. The evaluation failure can nevertheless be bypassed by setting: `services.fcgiwrap.allowGlobalInstanceLocalPrivilegeEscalation = true`. euxane2024-08-081-7/+27
| * | | | | | | nixos/cgit: use isolated fcgiwrap instance, add user/group options•••This adds options to set the users and groups as which cgit instances run, allowing the use of an unprivileged user instead of root. "root" is kept as the default user to avoid breaking existing setups, but a warning is shown in that case to alert the user. Backport of: commit 4f2da6c9c17d75ba43fbe85d5243a57735a5e4eb nixos/fcgiwrap: add option migration instruction errors (partial: move to instances) commit 3d10deb7a5631e057bb5d84b5a6bd8fdf361a00a nixos/cgit: fix GIT_PROJECT_ROOT ownership commit 2d8626bf0a35659a480c1a92bbd2682625a66e0f nixos/cgit: configurable user instead of root commit c5dc3e203410bc3bfc77182cd8c6955b1bd64cfd nixos/fcgiwrap: adapt consumer modules and tests commit 8101ae41f8cefce9e518a550881302c4f58a8c5b nixos/fcgiwrap: adapt consumer modules and tests commit bf2ad6f48c95eea96768cc62dda7c6eb2097cbf4 nixos/fcgiwrap: adapt consumer modules and tests euxane2024-08-021-28/+75
| * | | | | | | nixos/zoneminder: use isolated fcgiwrap instance•••Backport of: commit fcb2a4a5fff1903d403955a9753a34f79bb24455 nixos/zoneminder: set fcgiwrap socket owner commit 4f2da6c9c17d75ba43fbe85d5243a57735a5e4eb nixos/fcgiwrap: add option migration instruction errors (partial: move to instances) commit 8101ae41f8cefce9e518a550881302c4f58a8c5b nixos/fcgiwrap: adapt consumer modules and tests commit bf2ad6f48c95eea96768cc62dda7c6eb2097cbf4 nixos/fcgiwrap: adapt consumer modules and tests euxane2024-08-021-8/+7
| * | | | | | | nixos/smokeping: use isolated fcgiwrap instance•••This makes the CGI part of smokeping run as the unprivileged "smokeping" user like the rest of the service (instead of root). This also sets proper permissions for the fcgiwrap control socket. Backport of: commit 4f2da6c9c17d75ba43fbe85d5243a57735a5e4eb nixos/fcgiwrap: add option migration instruction errors (partial: move to instances) commit c5dc3e203410bc3bfc77182cd8c6955b1bd64cfd nixos/fcgiwrap: adapt consumer modules and tests commit 8101ae41f8cefce9e518a550881302c4f58a8c5b nixos/fcgiwrap: adapt consumer modules and tests commit bf2ad6f48c95eea96768cc62dda7c6eb2097cbf4 nixos/fcgiwrap: adapt consumer modules and tests euxane2024-08-021-2/+7
| * | | | | | | nixos/fcgiwrap: add deprecation notice and security warning•••This deprecates the use of the global shared instance of fcgiwrap, due to its security issues (running as root by default, actually insecure control socket, allowing local remote escalation privileges, with no fix due to the multiple consumers). A warning is added to encourage users to migrate to properly isolated instances (`services.fcgiwrap.instances.*`). euxane2024-08-021-6/+21
| * | | | | | | nixos/fcgiwrap-instances: backport isolated multi-instance module•••This backports the options `services.fcgiwrap.instances.*`, allowing to configure isolated instances of fcgiwrap, as an alternative to the global shared one. This prepares the deprecation of the latter. Backport of: commit efc7aebda7f85f67b52cc334066c6dd344371103 nixos/fcgiwrap: require explicit owner for UNIX sockets commit 4f2da6c9c17d75ba43fbe85d5243a57735a5e4eb nixos/fcgiwrap: add option migration instruction errors (partial: move to instances) commit 51b246a1acd4ce4926b8a78e3e7e0e6927d546ff nixos/fcgiwrap: do not run as root by default commit 81f72015f0b96b1227a2de38409049fba0e73aad nixos/fcgiwrap: add unix socket owner, private by default commit 289c1585c2a1f9ff9e159cbcdab664620dc9f7b3 nixos/fcgiwrap: limit prefork type to positives commit 3955eaf45015c9dd8a5a59412bf9c5e47b789a65 nixos/fcgiwrap: improve readability of CLI args commit 022289f2fadb3a3bad83273cd45d8a3e4753991e nixos/fcgiwrap: group options logically, fix doc commit 41419ca2883f7a3294711faf4961d043868e27ef nixos/fcgiwrap: refactor for multiple instances euxane2024-08-022-0/+137
* | | | | | | | [24.05] php82: 8.2.20 -> 8.2.22, php83: 8.3.9 -> 8.3.11 (#338633)Pol Dellaiera2024-08-312-4/+4
|\ \ \ \ \ \ \ \ | |_|_|_|_|/ / / |/| | | | | | |
| * | | | | | | php82: 8.2.22 -> 8.2.23•••ChangeLog: https://www.php.net/ChangeLog-8.php#PHP_8_2 (cherry picked from commit e2bc8e822771fbc5b31c51703d717ba2e560777c) Maximilian Bosch2024-08-311-2/+2
| * | | | | | | php: 8.2.21 -> 8.2.22•••(cherry picked from commit cdce031214793d766942068e3f8e5c8c65e4b094) R. Ryantm2024-08-311-2/+2
| * | | | | | | php83: 8.3.10 -> 8.3.11•••(cherry picked from commit 19f1cc65bdefe395d90c28958bd1136a0bd2a20f) R. Ryantm2024-08-311-2/+2
| * | | | | | | php83: 8.3.9 -> 8.3.10•••(cherry picked from commit f20174de43f75635cc32283b2ec95e7dabeb4a02) R. Ryantm2024-08-311-2/+2
|/ / / / / / /
* | | | | | | [Backport release-24.05] microsoft-edge: 127.0.2651.86 -> 128.0.2739.42 (#338...Thomas Gerbet2024-08-311-6/+6
|\ \ \ \ \ \ \
| * | | | | | | microsoft-edge: 127.0.2651.86 -> 128.0.2739.42•••(cherry picked from commit 03eb79b82a2d2d1b4aea39ceb0c6a818bb705752) R. Ryantm2024-08-301-6/+6
* | | | | | | | [24.05] argocd: 2.11.3 -> 2.11.7 (#337303)Thomas Gerbet2024-08-311-3/+3
|\ \ \ \ \ \ \ \
| * | | | | | | | argocd: 2.11.5 -> 2.11.7•••(cherry picked from commit 54c550855a6904cfa1ba343f9382ac18a37f94d2) R. Ryantm2024-08-251-2/+2
| * | | | | | | | argocd: 2.11.4 -> 2.11.5•••(cherry picked from commit 252969af28d362dd233f140065c45daf0a83e0c6) R. Ryantm2024-08-251-3/+3
| * | | | | | | | argocd: 2.11.3 -> 2.11.4•••(cherry picked from commit a73a0c75ee666c53914c60e0ccd4076b6db609c3) R. Ryantm2024-08-251-3/+3
| | |_|/ / / / / | |/| | | | | |
* | | | | | | | [Backport release-24.05] mattermost: 9.5.8 -> 9.5.9 (#338481)Thomas Gerbet2024-08-311-3/+3
|\ \ \ \ \ \ \ \
| * | | | | | | | mattermost: 9.5.8 -> 9.5.9•••(cherry picked from commit 48b042c485eee3af4bc6f338995fe45dda5d21b6) R. Ryantm2024-08-301-3/+3
* | | | | | | | | [Backport release-24.05] litestream: add CVE-2024-41254 to knownVulnerabiliti...Robert Scott2024-08-311-0/+1
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | litestream: add CVE-2024-41254 to knownVulnerabilities•••(cherry picked from commit 0875d0ce1c778f344cd2377a5337a45385d6ffa0) Robert Scott2024-08-311-0/+1
|/ / / / / / / / /
* | | | | | | | | [Backport release-24.05] bup: 0.33.3 -> 0.33.4 (#337643)Michele Guerini Rocco2024-08-312-12/+36
|\ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / |/| | | | | | | |
| * | | | | | | | bup: move to pkgs/by-name and reformat•••(cherry picked from commit 881aca9e2056d6fe8e99314366832fb692440ec9) rnhmjoj2024-08-272-10/+34
| * | | | | | | | bup: 0.33.3 -> 0.33.4•••(cherry picked from commit e0890103e3518a3bad4fb46c74e17e8cc8d4c4e4) rnhmjoj2024-08-271-2/+2
* | | | | | | | | [24.05] openresty: 1.21.4.3 -> 1.21.4.4 (#337460)Thomas Gerbet2024-08-311-2/+2
|\ \ \ \ \ \ \ \ \ | |_|_|_|/ / / / / |/| | | | | | | |
| * | | | | | | | openresty: 1.21.4.3 -> 1.21.4.4•••addressing CVE-2024-39702 Robert Scott2024-08-261-2/+2
| | |_|/ / / / / | |/| | | | | |
* | | | | | | | [24.05] starship: add patch for CVE-2024-41815 (#337567)Thomas Gerbet2024-08-301-0/+9
|\ \ \ \ \ \ \ \ | |_|_|/ / / / / |/| | | | | | |
| * | | | | | | starship: add patch for CVE-2024-41815Robert Scott2024-08-261-0/+9
| |/ / / / / /
* | | | | | | [24.05] nuclei: add patch for CVE-2024-40641 (#337225)Thomas Gerbet2024-08-301-0/+9
|\ \ \ \ \ \ \
generated by cgit v1.2.3 (git 2.52.0) at 2026-08-20 00:42:51 +0000