summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* chromium: 97.0.4692.99 -> 98.0.4758.80origin/backport-157878-to-release-21.11Michael Weiss2022-02-041-10/+10
| | | | | | | | | | | | | | https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html This update includes 27 security fixes. CVEs: CVE-2022-0452 CVE-2022-0453 CVE-2022-0454 CVE-2022-0455 CVE-2022-0456 CVE-2022-0457 CVE-2022-0458 CVE-2022-0459 CVE-2022-0460 CVE-2022-0461 CVE-2022-0462 CVE-2022-0463 CVE-2022-0464 CVE-2022-0465 CVE-2022-0466 CVE-2022-0467 CVE-2022-0468 CVE-2022-0469 CVE-2022-0470 (cherry picked from commit b904f5803176261e8873fbcfd4622b125a363cc6)
* Merge pull request #158036 from primeos/chromium-backportMichael Weiss2022-02-045-25/+64
|\ | | | | [21.11] Prepare for backporting Chromium M98
| * chromiumDev: 99.0.4844.11 -> 99.0.4844.16Michael Weiss2022-02-031-3/+3
| | | | | | | | (cherry picked from commit 47f0427d1523f7fe2ebb7430fe5809451e59d1b3)
| * chromiumBeta: 98.0.4758.74 -> 98.0.4758.80Michael Weiss2022-02-031-3/+3
| | | | | | | | (cherry picked from commit 87711ba56b6b74c5bbc2b6f4bbbaa48ea07e0d25)
| * chromiumDev: 99.0.4840.0 -> 99.0.4844.11Michael Weiss2022-02-031-3/+3
| | | | | | | | (cherry picked from commit eb78072935d69921f7c6482ee05d1aebfb378739)
| * chromiumBeta: 98.0.4758.66 -> 98.0.4758.74Michael Weiss2022-02-032-10/+3
| | | | | | | | (cherry picked from commit b0b0ffd4662c75d2e94b7382901faa782d0e7acc)
| * chromiumDev: Fix the configuration phaseMichael Weiss2022-02-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes: -------------------------------------------------------------------------------- configuring ERROR at //ui/gtk/BUILD.gn:17:1: Assertion failed. assert(use_gio, "GIO is required for building with GTK") ^----- GIO is required for building with GTK See //content/shell/BUILD.gn:308:15: which caused the file to be included. deps += [ "//ui/gtk" ] ^--------- -------------------------------------------------------------------------------- But there's still another build issue(s) left: -------------------------------------------------------------------------------- [25491/48383] ACTION //components/url_formatter/spoof_checks/top_domains:generate_top_domain_list_variables_file(//build/toolchain/linux/unbundle:default)d_tmp/browser_command.mojom-webui.jsab_page_third_party.mojom-webui.js FAILED: gen/components/url_formatter/spoof_checks/top_domains/top500-domains-inc.cc python3 ../../build/gn_run_binary.py make_top_domain_list_variables ../../components/url_formatter/spoof_checks/top_domains/domains.list top500_domains gen/components/url_formatter/spoof_checks/top_domains/top500-domains-inc.cc make_top_domain_list_variables failed with exit code -4 ninja: build stopped: subcommand failed. -------------------------------------------------------------------------------- (cherry picked from commit e8b241cdbad6f7c0af4115c0d733874b02f5c54f)
| * chromium: get-commit-message.py: Improve the parsingMichael Weiss2022-02-031-1/+1
| | | | | | | | | | | | | | | | The latest announcement uses the following structure: "Google is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild." (https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html) (cherry picked from commit d0ed7ee0b040ba45609028663d6d2c686fee7820)
| * chromiumDev: 99.0.4818.0 -> 99.0.4840.0Michael Weiss2022-02-031-6/+6
| | | | | | | | (cherry picked from commit 9970f3d56e3f25c2426036f3e186d08ab6c59350)
| * google-chrome: add /run/opengl-driver/share/vulkan/icd.d/ to pathBrandon Weeks2022-02-031-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NixOS stores ICDs at /run/opengl-driver/share/vulkan/icd.d/. Because Chrome ships its own vulkan-loader and doesn't use the NixOS system vulkan-loader, Chrome won't search the /run/opengl-driver directory withou either adding it to the path or patching Chrome's libvulkan.so.1. This change adds "${addOpenGLRunpath.driverLink}/share" unconditionally to the path. addOpenGLRunpath is the same module that NixOS system vulkan-loader uses as the path. Tested by running `VK_LOADER_DEBUG=all google-chrome-unstable --enable-features=Vulkan` and verifying Vulkan is enabled with chrome://gpu. (cherry picked from commit 007af34263d102667f077363b3958e6bf4b05ea8)
| * chromiumBeta: 98.0.4758.54 -> 98.0.4758.66Michael Weiss2022-02-031-3/+3
| | | | | | | | (cherry picked from commit 10bc0b32d8cb72b7f56689c6f102a27975dd24b7)
| * google-chrome: fix hardware acceleration on Wayland (#155447)Brandon Weeks2022-02-031-8/+2
| | | | | | | | | | | | Fix #103049. (cherry picked from commit c3e8270c3a623c8230879d8eb174d31fb9382d35)
| * chromium: Backport important fixes for WaylandMichael Weiss2022-02-032-1/+42
| | | | | | | | | | | | This is 843508dad46 for M97 (upstream didn't backport them so far). (cherry picked from commit a8affa912c883c59f7052779a2440c796715ced8)
| * chromiumBeta: 98.0.4758.48 -> 98.0.4758.54Michael Weiss2022-02-031-3/+3
| | | | | | | | (cherry picked from commit 61affb7d91b9e91da6d17130b258f00a5da18fee)
| * chromiumDev: 98.0.4758.9 -> 99.0.4818.0Michael Weiss2022-02-031-6/+6
| | | | | | | | (cherry picked from commit 9cf4be40d3023b77a9393b999f37b0be57bc90ba)
| * chromiumBeta: 97.0.4692.71 -> 98.0.4758.48Michael Weiss2022-02-031-6/+6
| | | | | | | | (cherry picked from commit 1be7e7673151a6c07ef8b5da9204e10790b1f029)
| * chromiumDev: Backport important fixes for WaylandMichael Weiss2022-02-031-0/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will be required to prevent crashes on Wayland compositors that support version 4 of the wl_output protocol (available since Wayland 1.20.0). This should affect any compositor that is based on wlroots 0.15.0 and soon more. Upstream will hopefully backport those patches soon (if not we could also apply them to M97 - only two trivial changes are necessary to apply the first patch). More information: - Chromium bug report: https://bugs.chromium.org/p/chromium/issues/detail?id=1279574 - wlroots bug report: https://gitlab.freedesktop.org/wlroots/wlroots/-/issues/3344 (cherry picked from commit 843508dad46d2205ea8dd81c446349d573187a87)
* | Merge pull request #157762 from Ma27/backport-plausibleMaximilian Bosch2022-02-046-2151/+2040
|\ \ | | | | | | [21.11] plausible: 1.4.0 -> 1.4.4 (security)
| * | plausible: 1.4.3 -> 1.4.4 (#157335)Maximilian Bosch2022-02-014-52/+52
| | | | | | | | | | | | | | | ChangeLog: https://github.com/plausible/analytics/releases/tag/v1.4.4 (cherry picked from commit 376934f4b7ca6910b243be5fabcf3f4228043725)
| * | plausible: 1.4.0 -> 1.4.3Maximilian Bosch2022-02-016-2151/+2040
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ChangeLog: https://github.com/plausible/analytics/blob/v1.4.3/CHANGELOG.md#unreleased Also makes the option `services.plausible.releaseCookiePath` mandatory[1]: since Elixir 1.13 the `RELEASE_COOKIE` env-var *must* be set, otherwise the startup fails[2]. Since we drop `$out/releases/COOKIE` in the `fixupPhase` of `mixRelease` and Elixir seems to always attempt to generate such a file[3], I figured it's reasonable to just make it mandatory now. Closes #155575 [1] https://nixos.org/manual/nixos/stable/options.html#opt-services.plausible.releaseCookiePath [2] https://github.com/elixir-lang/elixir/commit/f24eb2c1ef3cfb345e9420945c57f276148c0a89 / https://github.com/elixir-lang/elixir/issues/11114 [3] https://hexdocs.pm/mix/Mix.Tasks.Release.html, see `:cookie` (cherry picked from commit e211c94b94f0327958dae20537f43551e3a1a653)
* | | Merge pull request #157859 from NixOS/backport-157746-to-release-21.11Maximilian Bosch2022-02-042-8/+9
|\ \ \ | | | | | | | | [Backport release-21.11] element-{web,desktop}: 1.9.9 -> 1.10.1
| * | | element-{web,desktop}: 1.9.9 -> 1.10.1Maximilian Bosch2022-02-022-8/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ChangeLogs: * https://github.com/vector-im/element-web/releases/tag/v1.10.0 * https://github.com/vector-im/element-web/releases/tag/v1.10.1 (cherry picked from commit f558c4a5d675abc5d9b284be714ba9296d0d35be)
* | | | nixos/gitlab: Add additional paths to systemd.tmpfiles.rulesLara2022-02-041-0/+2
| | | | | | | | | | | | | | | | This fixes the NixOS gitlab test failure since gitlab 14.7.0.
* | | | [Backport release-21.11] gitlab: 14.6.2 -> 14.7.1Lara2022-02-0412-376/+317
| | | | | | | | | | | | | | | | | | | | This effectively reverts commit f007b794c758000a275b00dd0695d2fb155195f0 as well.
* | | | Merge #157372: flink: 1.14.0 -> 1.14.2 (into release-21.11)Vladimír Čunát2022-02-041-2/+2
|\ \ \ \
| * | | | flink: 1.14.0 -> 1.14.2origin/backport-151776-to-release-21.11Joerie de Gram2022-01-301-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2021-44228 and CVE-2021-45046 (#150288). (cherry picked from commit 63840cef0ea27353929255088cabadb79ce90b69)
* | | | | bumblebee: fix source urlgithub-actions[bot]2022-02-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | (cherry picked from commit 63f93a91d4340a90516764ba3f2849737d8f12c6) Co-authored-by: busti <oss@busti.cool>
* | | | | Merge pull request #158030 from NixOS/backport-157936-to-release-21.11Pascal Bach2022-02-031-1/+1
|\ \ \ \ \ | |_|_|_|/ |/| | | | [Backport release-21.11] element-desktop: update electron_13 -> electron_15
| * | | | element-desktop: update electron_13 -> electron_15TredwellGit2022-02-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | https://github.com/vector-im/element-desktop/blob/v1.10.1/package.json#L64 (cherry picked from commit 2571561c50fa86155fb153da0c52005c1a4d5dfe)
* | | | | Merge pull request #158029 from NixOS/backport-157933-to-release-21.11Pascal Bach2022-02-031-2/+2
|\ \ \ \ \ | |/ / / / |/| | | | [Backport release-21.11] brave: 1.34.81 -> 1.35.100
| * | | | brave: 1.34.81 -> 1.35.100origin/backport-157933-to-release-21.11TredwellGit2022-02-031-2/+2
|/ / / / | | | | | | | | | | | | | | | | https://github.com/brave/brave-browser/blob/master/CHANGELOG_DESKTOP.md#135100 (cherry picked from commit 8ab663aaa5fbe8ae90931cb64d2dbd64dfac5c0c)
* | | | mastodon: 3.4.5 -> 3.4.6Kerstin Humm2022-02-034-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | fixes CVE-2022-24307 (cherry picked from commit a4944d382745fbbfab97882fbe441f8d7b5a298e)
* | | | Merge pull request #157979 from NixOS/backport-157968-to-release-21.11Pavol Rusnak2022-02-031-3/+3
|\ \ \ \ | | | | | | | | | | [Backport release-21.11] trezor-suite: 21.12.2 -> 22.1.1
| * | | | trezor-suite: 21.12.2 -> 22.1.1vdovhanych2022-02-031-3/+3
|/ / / / | | | | | | | | | | | | (cherry picked from commit e0a91196b5a9279ecd924d77287ade72aba536d3)
* | | | Merge pull request #157964 from NixOS/backport-157934-to-release-21.11Pavol Rusnak2022-02-031-8/+8
|\ \ \ \ | | | | | | | | | | [Backport release-21.11] electron_13: 13.6.8 -> 13.6.9
| * | | | electron_13: 13.6.8 -> 13.6.9TredwellGit2022-02-031-8/+8
|/ / / / | | | | | | | | | | | | | | | | https://github.com/electron/electron/releases/tag/v13.6.9 (cherry picked from commit cd17b35b1c77e4d5102d09895f975778cad3c10a)
* | | | Merge pull request #157897 from LeSuisse/quassel-CVE-2021-34825-21.11Robert Scott2022-02-021-1/+11
|\ \ \ \ | | | | | | | | | | [21.11] quassel: apply patches to fix CVE-2021-34825
| * | | | quassel: apply patches to fix CVE-2021-34825Thomas Gerbet2022-02-021-1/+11
|/ / / / | | | | | | | | | | | | Patches comes from the PR fixing the issue quassel/quassel#581
* | | | Merge pull request #157462 from NixOS/backport-157138-to-release-21.11Robert Scott2022-02-023-31/+20
|\ \ \ \ | | | | | | | | | | [Backport release-21.11] bind: 9.16.16 -> 9.16.25
| * | | | bind: 9.16.16 -> 9.16.25Thomas Gerbet2022-01-313-31/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2021-25219. https://downloads.isc.org/isc/bind9/9.16.25/doc/arm/html/notes.html (cherry picked from commit 4cfcbac24a1e0e57a6a5af28e12438137b93214c)
* | | | | mastodon: 3.4.4 -> 3.4.5Kerstin Humm2022-02-026-1587/+1587
| | | | | | | | | | | | | | | | | | | | (cherry picked from commit f2422ab8b4c93422e53e10d5a4ba266536cd101a)
* | | | | mastodon: 3.4.1 -> 3.4.4Kerstin Humm2022-02-024-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | update.sh --ver v3.4.4 --patches ./resolutions.patch (cherry picked from commit e67685910d38948bf62e64142306778f20743d45)
* | | | | Merge pull request #157853 from mdlayher/release-21.11Pavol Rusnak2022-02-021-3/+3
|\ \ \ \ \ | |_|_|/ / |/| | | | [Backport release-21.11] corerad: 0.3.4 -> 1.0.0
| * | | | [Backport release-21.11] corerad: 0.3.4 -> 1.0.0Matt Layher2022-02-021-3/+3
|/ / / / | | | | | | | | | | | | Signed-off-by: Matt Layher <mdlayher@gmail.com>
* | | | Merge pull request #157795 from NixOS/backport-157598-to-release-21.11markuskowa2022-02-021-4/+5
|\ \ \ \ | | | | | | | | | | [Backport release-21.11] nixos/slurm: fix startup of slurmd
| * | | | nixos/slurm: fix startup of slurmdMarkus Kowalewski2022-02-021-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * make slurmd depend on network target to ensure basic networking is available on startup. This fixes behaviour where slurmd fails with "error: get_addr_info: getaddrinfo() failed". * Use tmpfiles.d to ensure spool directory exists on start up. (cherry picked from commit 270da0a11582ba036dadc974a8ce51475c529c40)
* | | | | Merge pull request #157113 from NixOS/backport-156913-to-release-21.11Bobby Rong2022-02-021-2/+2
|\ \ \ \ \ | | | | | | | | | | | | [Backport release-21.11] hydrus: 470b -> 471
| * | | | | hydrus: 470b -> 471Daniel Olsen2022-01-281-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | (cherry picked from commit e5dfca887c243a401effa3eb7912d2b2a5ed57ea)
* | | | | | Merge pull request #157738 from mweinelt/21.11/sambaPascal Bach2022-02-021-2/+2
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | [21.11] samba: 4.15.3 -> 4.15.5
| * | | | | samba: 4.15.3 -> 4.15.5Martin Weinelt2022-02-011-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://www.openwall.com/lists/oss-security/2022/02/01/1 Fixes: CVE-2021-44141, CVE-2021-44142, CEV-2022-0336 (cherry picked from commit da86fe2cd69c3b12b86040f349fe87a63e4f541c) (cherry picked from commit d4aac5cd60c14f9ed1dd97c2138cbcd56fe24dd8)
generated by cgit v1.2.3 (git 2.52.0) at 2026-08-20 01:25:02 +0000