| Commit message (Expand) | Author | Age | Files | Lines |
| * | chromium: 97.0.4692.99 -> 98.0.4758.80•••https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html
This update includes 27 security fixes.
CVEs:
CVE-2022-0452 CVE-2022-0453 CVE-2022-0454 CVE-2022-0455 CVE-2022-0456
CVE-2022-0457 CVE-2022-0458 CVE-2022-0459 CVE-2022-0460 CVE-2022-0461
CVE-2022-0462 CVE-2022-0463 CVE-2022-0464 CVE-2022-0465 CVE-2022-0466
CVE-2022-0467 CVE-2022-0468 CVE-2022-0469 CVE-2022-0470
(cherry picked from commit b904f5803176261e8873fbcfd4622b125a363cc6)
origin/backport-157878-to-release-21.11 | Michael Weiss | 2022-02-04 | 1 | -10/+10 |
| * | Merge pull request #158036 from primeos/chromium-backport•••[21.11] Prepare for backporting Chromium M98 | Michael Weiss | 2022-02-04 | 5 | -25/+64 |
| |\ |
|
| | * | chromiumDev: 99.0.4844.11 -> 99.0.4844.16•••(cherry picked from commit 47f0427d1523f7fe2ebb7430fe5809451e59d1b3)
| Michael Weiss | 2022-02-03 | 1 | -3/+3 |
| | * | chromiumBeta: 98.0.4758.74 -> 98.0.4758.80•••(cherry picked from commit 87711ba56b6b74c5bbc2b6f4bbbaa48ea07e0d25)
| Michael Weiss | 2022-02-03 | 1 | -3/+3 |
| | * | chromiumDev: 99.0.4840.0 -> 99.0.4844.11•••(cherry picked from commit eb78072935d69921f7c6482ee05d1aebfb378739)
| Michael Weiss | 2022-02-03 | 1 | -3/+3 |
| | * | chromiumBeta: 98.0.4758.66 -> 98.0.4758.74•••(cherry picked from commit b0b0ffd4662c75d2e94b7382901faa782d0e7acc)
| Michael Weiss | 2022-02-03 | 2 | -10/+3 |
| | * | chromiumDev: Fix the configuration phase•••This fixes:
--------------------------------------------------------------------------------
configuring
ERROR at //ui/gtk/BUILD.gn:17:1: Assertion failed.
assert(use_gio, "GIO is required for building with GTK")
^-----
GIO is required for building with GTK
See //content/shell/BUILD.gn:308:15: which caused the file to be included.
deps += [ "//ui/gtk" ]
^---------
--------------------------------------------------------------------------------
But there's still another build issue(s) left:
--------------------------------------------------------------------------------
[25491/48383] ACTION //components/url_formatter/spoof_checks/top_domains:generate_top_domain_list_variables_file(//build/toolchain/linux/unbundle:default)d_tmp/browser_command.mojom-webui.jsab_page_third_party.mojom-webui.js
FAILED: gen/components/url_formatter/spoof_checks/top_domains/top500-domains-inc.cc
python3 ../../build/gn_run_binary.py make_top_domain_list_variables ../../components/url_formatter/spoof_checks/top_domains/domains.list top500_domains gen/components/url_formatter/spoof_checks/top_domains/top500-domains-inc.cc
make_top_domain_list_variables failed with exit code -4
ninja: build stopped: subcommand failed.
--------------------------------------------------------------------------------
(cherry picked from commit e8b241cdbad6f7c0af4115c0d733874b02f5c54f)
| Michael Weiss | 2022-02-03 | 1 | -1/+1 |
| | * | chromium: get-commit-message.py: Improve the parsing•••The latest announcement uses the following structure: "Google is aware
the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild."
(https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html)
(cherry picked from commit d0ed7ee0b040ba45609028663d6d2c686fee7820)
| Michael Weiss | 2022-02-03 | 1 | -1/+1 |
| | * | chromiumDev: 99.0.4818.0 -> 99.0.4840.0•••(cherry picked from commit 9970f3d56e3f25c2426036f3e186d08ab6c59350)
| Michael Weiss | 2022-02-03 | 1 | -6/+6 |
| | * | google-chrome: add /run/opengl-driver/share/vulkan/icd.d/ to path•••NixOS stores ICDs at /run/opengl-driver/share/vulkan/icd.d/. Because
Chrome ships its own vulkan-loader and doesn't use the NixOS system
vulkan-loader, Chrome won't search the /run/opengl-driver directory
withou either adding it to the path or patching Chrome's libvulkan.so.1.
This change adds "${addOpenGLRunpath.driverLink}/share" unconditionally
to the path. addOpenGLRunpath is the same module that NixOS system
vulkan-loader uses as the path.
Tested by running `VK_LOADER_DEBUG=all google-chrome-unstable
--enable-features=Vulkan` and verifying Vulkan is enabled with
chrome://gpu.
(cherry picked from commit 007af34263d102667f077363b3958e6bf4b05ea8)
| Brandon Weeks | 2022-02-03 | 1 | -3/+2 |
| | * | chromiumBeta: 98.0.4758.54 -> 98.0.4758.66•••(cherry picked from commit 10bc0b32d8cb72b7f56689c6f102a27975dd24b7)
| Michael Weiss | 2022-02-03 | 1 | -3/+3 |
| | * | google-chrome: fix hardware acceleration on Wayland (#155447)•••Fix #103049.
(cherry picked from commit c3e8270c3a623c8230879d8eb174d31fb9382d35)
| Brandon Weeks | 2022-02-03 | 1 | -8/+2 |
| | * | chromium: Backport important fixes for Wayland•••This is 843508dad46 for M97 (upstream didn't backport them so far).
(cherry picked from commit a8affa912c883c59f7052779a2440c796715ced8)
| Michael Weiss | 2022-02-03 | 2 | -1/+42 |
| | * | chromiumBeta: 98.0.4758.48 -> 98.0.4758.54•••(cherry picked from commit 61affb7d91b9e91da6d17130b258f00a5da18fee)
| Michael Weiss | 2022-02-03 | 1 | -3/+3 |
| | * | chromiumDev: 98.0.4758.9 -> 99.0.4818.0•••(cherry picked from commit 9cf4be40d3023b77a9393b999f37b0be57bc90ba)
| Michael Weiss | 2022-02-03 | 1 | -6/+6 |
| | * | chromiumBeta: 97.0.4692.71 -> 98.0.4758.48•••(cherry picked from commit 1be7e7673151a6c07ef8b5da9204e10790b1f029)
| Michael Weiss | 2022-02-03 | 1 | -6/+6 |
| | * | chromiumDev: Backport important fixes for Wayland•••This will be required to prevent crashes on Wayland compositors that
support version 4 of the wl_output protocol (available since Wayland
1.20.0). This should affect any compositor that is based on wlroots
0.15.0 and soon more. Upstream will hopefully backport those patches
soon (if not we could also apply them to M97 - only two trivial
changes are necessary to apply the first patch).
More information:
- Chromium bug report: https://bugs.chromium.org/p/chromium/issues/detail?id=1279574
- wlroots bug report: https://gitlab.freedesktop.org/wlroots/wlroots/-/issues/3344
(cherry picked from commit 843508dad46d2205ea8dd81c446349d573187a87)
| Michael Weiss | 2022-02-03 | 1 | -0/+12 |
| * | | Merge pull request #157762 from Ma27/backport-plausible•••[21.11] plausible: 1.4.0 -> 1.4.4 (security) | Maximilian Bosch | 2022-02-04 | 6 | -2151/+2040 |
| |\ \ |
|
| | * | | plausible: 1.4.3 -> 1.4.4 (#157335)•••ChangeLog: https://github.com/plausible/analytics/releases/tag/v1.4.4
(cherry picked from commit 376934f4b7ca6910b243be5fabcf3f4228043725)
| Maximilian Bosch | 2022-02-01 | 4 | -52/+52 |
| | * | | plausible: 1.4.0 -> 1.4.3•••ChangeLog: https://github.com/plausible/analytics/blob/v1.4.3/CHANGELOG.md#unreleased
Also makes the option `services.plausible.releaseCookiePath` mandatory[1]: since Elixir
1.13 the `RELEASE_COOKIE` env-var *must* be set, otherwise the startup
fails[2]. Since we drop `$out/releases/COOKIE` in the `fixupPhase` of
`mixRelease` and Elixir seems to always attempt to generate such a
file[3], I figured it's reasonable to just make it mandatory now.
Closes #155575
[1] https://nixos.org/manual/nixos/stable/options.html#opt-services.plausible.releaseCookiePath
[2] https://github.com/elixir-lang/elixir/commit/f24eb2c1ef3cfb345e9420945c57f276148c0a89 /
https://github.com/elixir-lang/elixir/issues/11114
[3] https://hexdocs.pm/mix/Mix.Tasks.Release.html, see `:cookie`
(cherry picked from commit e211c94b94f0327958dae20537f43551e3a1a653)
| Maximilian Bosch | 2022-02-01 | 6 | -2151/+2040 |
| * | | | Merge pull request #157859 from NixOS/backport-157746-to-release-21.11•••[Backport release-21.11] element-{web,desktop}: 1.9.9 -> 1.10.1 | Maximilian Bosch | 2022-02-04 | 2 | -8/+9 |
| |\ \ \ |
|
| | * | | | element-{web,desktop}: 1.9.9 -> 1.10.1•••ChangeLogs:
* https://github.com/vector-im/element-web/releases/tag/v1.10.0
* https://github.com/vector-im/element-web/releases/tag/v1.10.1
(cherry picked from commit f558c4a5d675abc5d9b284be714ba9296d0d35be)
| Maximilian Bosch | 2022-02-02 | 2 | -8/+9 |
| * | | | | nixos/gitlab: Add additional paths to systemd.tmpfiles.rules•••This fixes the NixOS gitlab test failure since gitlab 14.7.0.
| Lara | 2022-02-04 | 1 | -0/+2 |
| * | | | | [Backport release-21.11] gitlab: 14.6.2 -> 14.7.1•••This effectively reverts commit f007b794c758000a275b00dd0695d2fb155195f0
as well.
| Lara | 2022-02-04 | 12 | -376/+317 |
| * | | | | Merge #157372: flink: 1.14.0 -> 1.14.2 (into release-21.11) | Vladimír Čunát | 2022-02-04 | 1 | -2/+2 |
| |\ \ \ \ |
|
| | * | | | | flink: 1.14.0 -> 1.14.2•••Fixes CVE-2021-44228 and CVE-2021-45046 (#150288).
(cherry picked from commit 63840cef0ea27353929255088cabadb79ce90b69)
origin/backport-151776-to-release-21.11 | Joerie de Gram | 2022-01-30 | 1 | -2/+2 |
| * | | | | | bumblebee: fix source url•••(cherry picked from commit 63f93a91d4340a90516764ba3f2849737d8f12c6)
Co-authored-by: busti <oss@busti.cool> | github-actions[bot] | 2022-02-04 | 1 | -1/+1 |
| * | | | | | Merge pull request #158030 from NixOS/backport-157936-to-release-21.11•••[Backport release-21.11] element-desktop: update electron_13 -> electron_15 | Pascal Bach | 2022-02-03 | 1 | -1/+1 |
| |\ \ \ \ \
| |_|_|_|/
|/| | | | |
|
| | * | | | | element-desktop: update electron_13 -> electron_15•••https://github.com/vector-im/element-desktop/blob/v1.10.1/package.json#L64
(cherry picked from commit 2571561c50fa86155fb153da0c52005c1a4d5dfe)
| TredwellGit | 2022-02-03 | 1 | -1/+1 |
| * | | | | | Merge pull request #158029 from NixOS/backport-157933-to-release-21.11•••[Backport release-21.11] brave: 1.34.81 -> 1.35.100 | Pascal Bach | 2022-02-03 | 1 | -2/+2 |
| |\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | * | | | | brave: 1.34.81 -> 1.35.100•••https://github.com/brave/brave-browser/blob/master/CHANGELOG_DESKTOP.md#135100
(cherry picked from commit 8ab663aaa5fbe8ae90931cb64d2dbd64dfac5c0c)
origin/backport-157933-to-release-21.11 | TredwellGit | 2022-02-03 | 1 | -2/+2 |
| |/ / / / |
|
| * | | | | mastodon: 3.4.5 -> 3.4.6•••fixes CVE-2022-24307
(cherry picked from commit a4944d382745fbbfab97882fbe441f8d7b5a298e)
| Kerstin Humm | 2022-02-03 | 4 | -5/+5 |
| * | | | | Merge pull request #157979 from NixOS/backport-157968-to-release-21.11•••[Backport release-21.11] trezor-suite: 21.12.2 -> 22.1.1 | Pavol Rusnak | 2022-02-03 | 1 | -3/+3 |
| |\ \ \ \ |
|
| | * | | | | trezor-suite: 21.12.2 -> 22.1.1•••(cherry picked from commit e0a91196b5a9279ecd924d77287ade72aba536d3)
| vdovhanych | 2022-02-03 | 1 | -3/+3 |
| |/ / / / |
|
| * | | | | Merge pull request #157964 from NixOS/backport-157934-to-release-21.11•••[Backport release-21.11] electron_13: 13.6.8 -> 13.6.9 | Pavol Rusnak | 2022-02-03 | 1 | -8/+8 |
| |\ \ \ \ |
|
| | * | | | | electron_13: 13.6.8 -> 13.6.9•••https://github.com/electron/electron/releases/tag/v13.6.9
(cherry picked from commit cd17b35b1c77e4d5102d09895f975778cad3c10a)
| TredwellGit | 2022-02-03 | 1 | -8/+8 |
| |/ / / / |
|
| * | | | | Merge pull request #157897 from LeSuisse/quassel-CVE-2021-34825-21.11•••[21.11] quassel: apply patches to fix CVE-2021-34825 | Robert Scott | 2022-02-02 | 1 | -1/+11 |
| |\ \ \ \ |
|
| | * | | | | quassel: apply patches to fix CVE-2021-34825•••Patches comes from the PR fixing the issue quassel/quassel#581
| Thomas Gerbet | 2022-02-02 | 1 | -1/+11 |
| |/ / / / |
|
| * | | | | Merge pull request #157462 from NixOS/backport-157138-to-release-21.11•••[Backport release-21.11] bind: 9.16.16 -> 9.16.25 | Robert Scott | 2022-02-02 | 3 | -31/+20 |
| |\ \ \ \ |
|
| | * | | | | bind: 9.16.16 -> 9.16.25•••Fixes CVE-2021-25219.
https://downloads.isc.org/isc/bind9/9.16.25/doc/arm/html/notes.html
(cherry picked from commit 4cfcbac24a1e0e57a6a5af28e12438137b93214c)
| Thomas Gerbet | 2022-01-31 | 3 | -31/+20 |
| * | | | | | mastodon: 3.4.4 -> 3.4.5•••(cherry picked from commit f2422ab8b4c93422e53e10d5a4ba266536cd101a)
| Kerstin Humm | 2022-02-02 | 6 | -1587/+1587 |
| * | | | | | mastodon: 3.4.1 -> 3.4.4•••update.sh --ver v3.4.4 --patches ./resolutions.patch
(cherry picked from commit e67685910d38948bf62e64142306778f20743d45)
| Kerstin Humm | 2022-02-02 | 4 | -8/+8 |
| * | | | | | Merge pull request #157853 from mdlayher/release-21.11•••[Backport release-21.11] corerad: 0.3.4 -> 1.0.0 | Pavol Rusnak | 2022-02-02 | 1 | -3/+3 |
| |\ \ \ \ \
| |_|_|/ /
|/| | | | |
|
| | * | | | | [Backport release-21.11] corerad: 0.3.4 -> 1.0.0•••Signed-off-by: Matt Layher <mdlayher@gmail.com>
| Matt Layher | 2022-02-02 | 1 | -3/+3 |
| |/ / / / |
|
| * | | | | Merge pull request #157795 from NixOS/backport-157598-to-release-21.11•••[Backport release-21.11] nixos/slurm: fix startup of slurmd | markuskowa | 2022-02-02 | 1 | -4/+5 |
| |\ \ \ \ |
|
| | * | | | | nixos/slurm: fix startup of slurmd•••* make slurmd depend on network target to ensure basic networking
is available on startup. This fixes behaviour
where slurmd fails with "error: get_addr_info: getaddrinfo() failed".
* Use tmpfiles.d to ensure spool directory exists on start up.
(cherry picked from commit 270da0a11582ba036dadc974a8ce51475c529c40)
| Markus Kowalewski | 2022-02-02 | 1 | -4/+5 |
| * | | | | | Merge pull request #157113 from NixOS/backport-156913-to-release-21.11•••[Backport release-21.11] hydrus: 470b -> 471 | Bobby Rong | 2022-02-02 | 1 | -2/+2 |
| |\ \ \ \ \ |
|
| | * | | | | | hydrus: 470b -> 471•••(cherry picked from commit e5dfca887c243a401effa3eb7912d2b2a5ed57ea)
| Daniel Olsen | 2022-01-28 | 1 | -2/+2 |
| * | | | | | | Merge pull request #157738 from mweinelt/21.11/samba•••[21.11] samba: 4.15.3 -> 4.15.5 | Pascal Bach | 2022-02-02 | 1 | -2/+2 |
| |\ \ \ \ \ \
| |_|/ / / /
|/| | | | | |
|
| | * | | | | | samba: 4.15.3 -> 4.15.5•••https://www.openwall.com/lists/oss-security/2022/02/01/1
Fixes: CVE-2021-44141, CVE-2021-44142, CEV-2022-0336
(cherry picked from commit da86fe2cd69c3b12b86040f349fe87a63e4f541c)
(cherry picked from commit d4aac5cd60c14f9ed1dd97c2138cbcd56fe24dd8)
| Martin Weinelt | 2022-02-01 | 1 | -2/+2 |