Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Backport 364213 to release 24.05 #367391

Closed
wants to merge 31 commits into from
Closed

Backport 364213 to release 24.05 #367391

wants to merge 31 commits into from

Conversation

leona-ya
Copy link
Member

backport for #364213

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Add a 👍 reaction to pull requests you find important.

niklaskorz and others added 30 commits December 12, 2024 17:07
@niklaskorz
matomo: mark 4.x as EOL
b454739
@niklaskorz
matomo_5: 5.1.2 -> 5.2.0
26516ba
@emilylange @github-actions
chromium: fix cross-"building" of recompressed FODs
72170a8 
(cherry picked from commit 6a711c3)
@emilylange @github-actions
chromium,chromedriver: 131.0.6778.139 -> 131.0.6778.204
d642256 
https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html

This update includes 5 security fixes.

CVEs:
CVE-2024-12692 CVE-2024-12693 CVE-2024-12694 CVE-2024-12695

(cherry picked from commit 7a25e38)
@emilylange
[Backport release-24.05] chromium,chromedriver: 131.0.6778.139 -> 131…
c220ced 
….0.6778.204, fix cross-"building" of recompressed FODs (NixOS#366622)
@K900 @github-actions
linux_6_12: 6.12.5 -> 6.12.6
95afa1f 
(cherry picked from commit 992b3ae)
@K900 @github-actions
linux_6_6: 6.6.66 -> 6.6.67
f7c3930 
(cherry picked from commit 61a720f)
@K900 @github-actions
linux_6_1: 6.1.120 -> 6.1.121
11ef51f 
(cherry picked from commit 2d84ed1)
@K900 @github-actions
linux_5_15: 5.15.174 -> 5.15.175
e543dcd 
(cherry picked from commit c41d83b)
@K900 @github-actions
linux_5_10: 5.10.231 -> 5.10.232
279723c 
(cherry picked from commit a8ce834)
@K900 @github-actions
linux_5_4: 5.4.287 -> 5.4.288
0c7a752 
(cherry picked from commit d1f9790)
@K900
[Backport release-24.05] Kernel updates for 2024-12-20 (NixOS#366793)
aacb0ff
@networkException @github-actions
ungoogled-chromium: 131.0.6778.139-1 -> 131.0.6778.204-1
660c890 
https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html

This update includes 5 security fixes.

CVEs:
CVE-2024-12692 CVE-2024-12693 CVE-2024-12694 CVE-2024-12695

(cherry picked from commit 6b60271)
@leona-ya
[release-24.05] matomo: mark 4.x as eol, 5.1.2 -> 5.2.0 (NixOS#364642)
7402b24
@osnyx @github-actions
percona-server: add updateScript
ebdacab 
(cherry picked from commit 65d0417)
@osnyx @github-actions
percona-server_8_4: 8.4.2-2 -> 8.4.3-3
ff74f85 
release notes:
https://docs.percona.com/percona-server/8.4/release-notes/8.4.3-3.html

Fixed CVEs, taken from 2d69ebb:

Fixes:
* GHSA-m6rg-98pc-7rxm
* GHSA-97c4-2w4v-c7r8
* GHSA-m7rw-p49v-xvr4
* GHSA-cgw6-mmr2-9474
* GHSA-m2x9-pvwq-m49p
* GHSA-w76f-wfx3-5qjq
* GHSA-vqmm-339w-hc7c
* GHSA-2rhg-4865-8qfj
* GHSA-vggh-55p7-p625
* GHSA-j5r3-hxmp-cxpr
* GHSA-c72q-9j4p-2mp4
* GHSA-cj7p-fg4w-qrvh
* GHSA-fv75-hjwp-hmcm
* GHSA-xhf9-m56c-xh6w
* GHSA-c494-hg27-rg85
* GHSA-r97q-xhcv-9xx9
* GHSA-h3ph-4h6g-xqfq
* GHSA-mffh-p59m-fv66
* GHSA-vchj-ggm5-9rcm
* GHSA-jv2x-g26c-46cq
* GHSA-xcwx-vhj6-p7m7
* GHSA-6vrv-p2wx-g2fg
* GHSA-6pjm-6xcx-c94q
* GHSA-36gq-2499-pq9x
* GHSA-6477-mq9q-6867

(cherry picked from commit 7807527)
@osnyx @github-actions
percona-xtrabackup_8_4: 8.4.0-1 -> 8.4.0-2
5d7be7f 
release notes:
https://docs.percona.com/percona-xtrabackup/8.4/release-notes/8.4.0-2.html

(cherry picked from commit f1d219d)
@leona-ya
[Backport release-24.05] percona: several package updates (NixOS#366896)
6b7a142
@LeSuisse @github-actions
moodle: 4.4.4 -> 4.4.5
d5431c5 
Undisclosed security fixes are mentioned in the release notes.

Changes:
https://moodledev.io/general/releases/4.4/4.4.5
(cherry picked from commit 2ffd9de)
@leona-ya
[Backport release-24.05] moodle: 4.4.4 -> 4.4.5 (NixOS#366909)
56e11ec
@nix-backports
[Backport release-24.05] discord: bump all versions (NixOS#366344)
41e30b9
@emilylange
[Backport release-24.05] ungoogled-chromium: 131.0.6778.139-1 -> 131.…
4b78a7b 
…0.6778.204-1 (NixOS#366810)
@Conni2461 @github-actions
perlPackages.MailDKIM: add missing CryptX dependency (NixOS#366744)
c07b1fc 
We've been getting `Can't locate Crypt/PK/Ed25519.pm in @INC` when
trying to `use Mail::DKIM::PrivateKey`. This is especially critical as
this crashed our sympa instance.

(cherry picked from commit 8f85b83)
@r-ryantm @github-actions
php82: 8.2.26 -> 8.2.27
24deb36 
(cherry picked from commit 213d473)
@drupol
[Backport release-24.05] php82: 8.2.26 -> 8.2.27 (NixOS#367124)
a36ccdd
@stigtsp
[Backport release-24.05] perlPackages.MailDKIM: add missing CryptX de…
6df9247 
…pendency (NixOS#366962)
@Ma27
php83: 8.3.14 -> 8.3.15
d05735e 
ChangeLog: https://www.php.net/ChangeLog-8.php#8.3.15
(cherry picked from commit 1f57576)
@Ma27
Merge: [24.05] php83: 8.3.14 -> 8.3.15 (NixOS#367371)
d76db36
@xanderio @leona-ya
gitlab: 17.5.2 -> 17.6.1
99f881c 
(cherry picked from commit b7eae8c)
@leona-ya
[Backport release-24.05] gitlab: 17.5.2 -> 17.6.1 (NixOS#363287)
3076107
@leona-ya leona-ya closed this Dec 22, 2024
@github-actions github-actions bot added 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 6.topic: kernel The Linux kernel 8.has: documentation This PR adds or changes documentation 8.has: changelog 6.topic: php labels Dec 22, 2024
@leona-ya leona-ya deleted the backport-364213-to-release-24.05 branch December 22, 2024 15:15
@leona-ya leona-ya restored the backport-364213-to-release-24.05 branch December 22, 2024 15:16
@nix-owners
Copy link

nix-owners bot commented Dec 22, 2024

The PR's base branch is set to nixos-24.05, but 30 commits from the release-24.05 branch are included. Make sure you know the right base branch for your changes, then:

  • If the changes should go to the release-24.05 branch, change the base branch to release-24.05
  • If the changes should go to the nixos-24.05 branch, rebase your PR onto the merge base with the nixos-24.05 branch: 
    # git rebase --onto $(git merge-base upstream/nixos-24.05 HEAD) $(git merge-base upstream/release-24.05 HEAD)
git rebase --onto 72d11d40b9878a67c38f003c240c2d2e1811e72a 30761079c4e7bd969ade4a75bad3720e3fbaeb26
git push --force-with-lease

@leona-ya leona-ya deleted the backport-364213-to-release-24.05 branch December 22, 2024 15:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
6.topic: kernel The Linux kernel 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 6.topic: php 8.has: changelog 8.has: documentation This PR adds or changes documentation
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.