Age | Commit message (Collapse) | Author | Files | Lines |
|
[Backport release-23.11] netbird: 0.27.7 -> 0.27.10
|
|
[Backport release-23.11] vips: 8.15.1 -> 8.15.2
|
|
(cherry picked from commit b769f587e137f3abcd60dc23d8d6a6fda2f1e60c)
|
|
(cherry picked from commit e588cd4ec273d4081bb2d36d55740668b1677902)
|
|
https://www.openwall.com/lists/oss-security/2024/05/26/1
Also applied the fix to download CVE data from curl datasources. The issue
prevented me to properly test the change. Upgrading to 3.2.1 required
more work.
|
|
[Backport release-23.11] bzip2: update patch URL
|
|
[Backport release-23.11] curl-impersonate: 0.5.4 -> 0.6.1
|
|
For some reason ftp.suse.com refuses connections via IPv6 on HTTPS,
which breaks download from IPv6-only network. This commit changes
protocol to FTP, which works fine via IPv6 and which is consistent with
other mention of this domain in nixpkgs.
(cherry picked from commit ab3f8547cbddc167abe1be7092d3a531d7e9f28c)
|
|
[Backport release-23.11] vips: 8.15.0 -> 8.15.1
|
|
(cherry picked from commit fd86d9400fd63aa95ec0432b972d0a00a9381372)
|
|
https://fluentbit.io/blog/2024/05/21/statement-on-cve-2024-4323-and-its-fix/
|
|
(cherry picked from commit f6ebc9b47890b5c23ed2d7445ea39f9181fc52af)
|
|
(cherry picked from commit 3cad12f665f6b9afb18ea0e96ca3652fc6a98077)
|
|
Fixes CVE-2023-49606 and CVE-2023-40533.
https://github.com/tinyproxy/tinyproxy/releases/tag/1.11.2
Reporter advisories:
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1902
(cherry picked from commit bcd0c6a3ca932310ba35ecacc14d9c56b803ff3f)
Co-authored-by: Thomas Gerbet <thomas@gerbet.me>
|
|
More information available here: https://www.openwall.com/lists/oss-security/2011/12/31/1
The original patch is by Sebastian Pipping and is available here:
https://web.archive.org/web/20120128080247/http://git.goodpoint.de/?p=mpack.git;a=commitdiff;h=0c87201f64491575350b18d04c62ec142e119d1f
We copy the patch in-tree, as the original source of the patch did not
have the "raw" diff made available.
Closes #90905
(cherry picked from commit 0184e92fa5d70df75f5824f96c0f77d158d46f31)
|
|
(cherry picked from commit d1dc3aa5d9a43e582767f40f616f49849f5c7830)
|
|
[23.11] clamav: 1.2.2 -> 1.2.3
|
|
[Backport release-23.11] fzf: 0.45.0 -> 0.46.0
|
|
addressing CVE-2024-20380
|
|
(cherry picked from commit 7356175c3cdb1648becd4ed63257a4601554cd79)
|
|
The `absubmit` plugin for beets has no respective plugin test that
is named after the default plugin test schema defined in `common.nix` [1],
so not explicitly declaring that the plugin has *no tests* (i.e. the
respective test list is empty), `mkPlugin` will try to disable the
non-existant test `test/test_absubmit.py`), breaking beet's build.
[1]: https://github.com/NixOS/nixpkgs/blob/c7916a507b6657f82a42741790a86e66f7783480/pkgs/tools/audio/beets/common.nix#L39
(cherry picked from commit 6fcd9c7e933d12f0295653174dd64aeb2ed5b60d)
|
|
[Backport release 23.11]: mdbook-pagetoc: 0.1.7 -> 0.2.0
|
|
Cherry picked from commit bb9e8704fe7adbc0759112b75acf642f2d1a1a61
Co-authored-by: Tom Fitzhenry <tom@tom-fitzhenry.me.uk>
|
|
Fixes a crash in sudo-rs' syslog code
Cherry picked from commit 61046902b55b161c72295ff61a816cc8f372da99
Co-authored-by: R. Ryantm <ryantm-bot@ryantm.com>
|
|
(cherry picked from commit 4c97fdfc13a11145cd2e9813526b08b31cc50323)
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
|
|
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
(cherry picked from commit dee865434d45e5c5cd09ce8198b6049beda52845)
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
|
|
(cherry picked from commit 1f72e3773f2ac94270b8ee3ad67636c0198fb75e)
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
|
|
(cherry picked from commit e5ee263c70272e8752409f91f6647472f9c75bf7)
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
|
|
[Backport release-23.11] netbird-ui: 0.27.3 -> 0.27.4
|
|
[Backport release 23.11]: zellij: 0.39.2 -> 0.40.1
|
|
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
(cherry picked from commit 8a19b4996de8e7b9b32a1db15015e44f88400427)
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
|
|
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
(cherry picked from commit 398f02763a59e584f2814fbcec94e2c344fbab51)
Signed-off-by: Matthias Beyer <mail@beyermatthias.de>
|
|
(cherry picked from commit f856f53b908763a725ea0ccf2c84963367a7469f)
|
|
(cherry picked from commit 9e68e6520ce36c526ad1a901214aace62e15d446)
|
|
(cherry picked from commit c7145973608e786a2be803aa581d01c1afd5cfc4)
|
|
Changes: https://github.com/NixOS/nix/compare/2.3.17...2.3.18
(cherry picked from commit cbb8cd19a0c004beb7b6ade537a533b32b30d87c)
|
|
[Backport release-23.11] opensc: 0.25.0 -> 0.25.1
|
|
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
(cherry picked from commit 8f5c4cf5eb969a7f048503a21ca6ffdd1b8c7c3d)
|
|
* mcaselector: add wrapGAppsHook
(cherry picked from commit 7dfacd893582e4eff8fe00461a25b2c5996d7e71)
* mcaselector: don't wrap executable twice
(cherry picked from commit 4bcdfaccf4c1bbd0a0fdb6f89ce80e596ea3e22b)
* mcaselector: correctly escape bash variable
(cherry picked from commit 0cf87e49b4a2b0af644b9e958c746383d4b041a3)
---------
Co-authored-by: LeixB <abone9999@gmail.com>
Co-authored-by: Aleksana <alexander.huang.y@gmail.com>
|
|
> Changes from 2.2.1 to 2.3.0:
>
> - Add --cache option to speed up file comparisons.
> - Use nanosecond precision for file times, if available.
> - Fix compilation issue on OpenBSD.
> - Other changes like fixing typos, wording, etc.
Changelog: https://github.com/adrianlopezroche/fdupes/releases/tag/v2.3.0
(cherry picked from commit 3044597bf9eda5f79759b79695e7111e7ca37cd9)
|
|
Ideally we would upgrade but in this specific instance the fixed
versions (and the patch for the issue) have been relicensed under
the Business Source License which is unfree.
Tagging the packages with `knownVulnerabilities` seems to be our least
worse solution. If someone care enough I'm guessing the unfree versions
could be backported under a different names in 23.11.
|
|
...into release-23.11
|
|
https://download.libreswan.org/CHANGES
fixes CVE-2024-2357, CVE-2024-3652
(cherry picked from commit eee733a88de54288798d59e05c198edc77120924)
|
|
[Backport release 23.11]: dl-librescore: 0.34.47 -> 0.35.7
|
|
(cherry picked from commit 777e5f1deb649674ac94df0f907c0fa81188dd9d)
|
|
(cherry picked from commit 078a46ab20526ea8d36183e2cb76e7b5be0000f1)
|
|
(cherry picked from commit 88b93829d9549c6fc83a8db777985f13456c1191)
|
|
Fixes GHSA-95pr-fxf5-86gv and GHSA-88jx-383q-w4qc.
Changes:
https://github.com/sigstore/cosign/releases/tag/v2.2.4
(cherry picked from commit 2e87a8cbd1b3c709adeb0fdc7c9ed225de2a9d88)
|
|
(cherry picked from commit 618629f81fc1f650908c880847558e787adbb785)
|
|
(cherry picked from commit 64a1e3d7296509733cb331aa3633db89ada3090b)
|