nixpkgs

History

Maximilian Bosch 520b10453f nextcloud: 19.0.4 -> 19.0.6, 20.0.1 -> 20.0.3, mark v19 as insecure ChangeLogs: * https://nextcloud.com/changelog/#20-0-3 * https://nextcloud.com/changelog/#19-0-6 For Nextcloud 20, security advisories for CVE-2020-8259[1] & CVE-2020-8152[2] were published. The only way to fix those is to upgrade to v20, although v19 and v18 are supported, the issue won't be fixed there[3]. Even though both CVEs are only related to the encryption module[4] which is turned off by default, I decided to add a vulnerability note to `nextcloud19` since CVE-2020-8259's is rated as "High" by NIST (in contrast to Nextcloud which rates it as "Low"). If one is not affected by the issue, `nextcloud19` can still be used by declaring `permittedInsecurePackages`[5]. [1] https://nvd.nist.gov/vuln/detail/CVE-2020-8259, https://nextcloud.com/security/advisory/?id=NC-SA-2020-041 [2] https://nvd.nist.gov/vuln/detail/CVE-2020-8152, https://nextcloud.com/security/advisory/?id=NC-SA-2020-040 [3] https://help.nextcloud.com/t/fixes-for-cve-2020-8259-cve-2020-8152-in-nextcloud-18-19/98289 [4] https://docs.nextcloud.com/server/20/admin_manual/configuration_files/encryption_configuration.html [5] https://nixos.org/manual/nixpkgs/stable/#sec-allow-insecure Closes #106212		2020-12-11 12:39:57 +01:00
..
adguardhome	Merge pull request #91360 from numkem/adguardhome_0.102.0	2020-11-24 07:31:04 -08:00
adminer	adminer: 4.7.7 -> 4.7.8	2020-12-07 10:50:10 +00:00
amqp	rabbitmq-server: 3.8.8 -> 3.8.9	2020-11-11 22:59:10 +00:00
ankisyncd
apache-kafka
apcupsd	utillinux: rename to util-linux	2020-11-24 12:42:06 -05:00
asterisk	utillinux: rename to util-linux	2020-11-24 12:42:06 -05:00
atlassian	atlassian-jira: 8.13.0 -> 8.14.0	2020-12-05 08:22:02 +00:00
bazarr	bazarr: 0.9.0.6 -> 0.9.0.7	2020-11-25 22:20:13 +00:00
beanstalkd
bird
blockbook
brickd
caddy	maintainers: rename filalex77 -> Br1ght0ne	2020-11-17 13:09:31 +02:00
cayley
clickhouse	clickhouse: 20.5.2.7 -> 20.11.4.13	2020-12-06 03:04:51 +00:00
cloud-print-connector
code-server
computing	slurm: 20.02.5.1 -> 20.02.6.1	2020-12-05 16:54:46 +01:00
confluent-platform
consul	consul: 1.8.6 -> 1.9.0	2020-11-30 17:01:50 +00:00
corosync	corosync: 2.4.3 -> 2.4.5	2020-11-25 17:01:30 -05:00
coturn
couchpotato
dante
demoit
dex
dgraph
dico
dict
diod
dns	knot-resolver: 5.2.0 -> 5.2.1	2020-12-09 11:07:28 +01:00
documize-community	documize-community: 3.8.1 -> 3.8.2	2020-11-30 10:36:24 +01:00
domoticz
echoip
elasticmq
elasticmq-server-bin
endlessh
etcd	etcd_3_4: 3.4.13 -> 3.4.14	2020-11-28 07:45:56 +10:00
exhibitor
fcgiwrap
felix
fileshare	fileshare: fix build	2020-11-29 09:33:58 +00:00
fingerd/bsd-fingerd
firebird
foundationdb
freeradius
ftp
gemini/molly-brown
gerbera
go-libp2p-daemon	go-libp2p-daemon: init at 0.3.0	2020-11-06 12:04:00 -05:00
gobetween
gonic
gopher/gofish
gortr	gortr: 0.14.6 -> 0.14.7	2020-11-26 06:16:59 +00:00
gotify	gotify-server: fix UI delivery	2020-11-30 23:00:18 +01:00
gotty
gpm
gpsd	gpsd: 3.16 -> 3.21	2020-12-03 16:10:40 -06:00
grocy
h2
hashi-ui
hasura
hbase
headphones
hitch
holochain-go
home-assistant	homeassistant: 0.118.4 -> 0.118.5	2020-12-05 14:37:14 +01:00
http	webhook: 2.7.0 -> 2.8.0	2020-12-08 09:12:54 +00:00
hydron
hylafaxplus	utillinux: rename to util-linux	2020-11-24 12:42:06 -05:00
icecast
icingaweb2
identd
imgproxy
interlock
irc	ircdHybrid: 8.2.24 -> 8.2.35	2020-11-28 05:03:25 +00:00
irker
isso
jackett	jackett: 0.16.2291 -> 0.16.2347	2020-12-07 20:54:36 +00:00
jellyfin
jetbrains
jicofo
jitsi-videobridge
kapowbang
keycloak	keycloak: 11.0.2 -> 11.0.3	2020-11-05 18:39:44 +01:00
kippo
klipper
kwakd
ldap/389
lidarr
limesurvey
livepeer	livepeer: 0.5.11 -> 0.5.12	2020-11-11 15:11:34 -08:00
ma1sd
mail	postsrsd: 1.8 -> 1.9	2020-12-08 03:10:37 +00:00
martin
matrix-appservice-discord	utillinux: rename to util-linux	2020-11-24 12:42:06 -05:00
matrix-synapse	Merge pull request #106315 from maralorn/rscs	2020-12-09 22:27:39 +01:00
matterbridge	matterbridge: 1.18.0 -> 1.19.0	2020-11-17 21:42:14 +01:00
mattermost
mautrix-telegram	mautrix-telegram: fix application	2020-11-29 21:28:07 +01:00
mautrix-whatsapp
mbtileserver
mediatomb
memcached	memcached: 1.6.8 -> 1.6.9	2020-11-28 19:14:10 +00:00
mesos-dns
metabase	metabase: 0.37.2 -> 0.37.3	2020-12-06 09:22:52 +00:00
meteor
microserver	microserver: Fix compilation on Darwin	2020-11-26 19:23:03 +01:00
miniflux
minio	Merge pull request #101420 from SuperSandro2000/minio	2020-11-26 19:37:14 +01:00
mirrorbits
misc	navidrome: 0.38.0 -> 0.39.0	2020-12-04 17:49:17 +00:00
mlflow-server	diagrams-builder,mlflow-server: remove trailing whitespace	2020-11-09 11:39:28 +00:00
monitoring	grafana: 7.3.4 -> 7.3.5	2020-12-10 14:28:54 +01:00
mpd	mpd: 0.22.2 -> 0.22.3	2020-11-19 01:23:19 +00:00
mqtt/mosquitto	mosquitto: 1.6.11 -> 1.6.12	2020-11-03 12:30:32 +00:00
mtprotoproxy	mtprotoproxy: 1.0.9 -> 1.1.0	2020-11-22 04:22:31 +00:00
mumsi
mxisd
nas
nats-server	nats-server: 2.1.7 -> 2.1.9	2020-11-09 12:14:38 +00:00
nats-streaming-server	nats-streaming-server: 0.17.0 -> 0.19.0	2020-12-01 03:09:14 +00:00
neard
news/leafnode
nextcloud	nextcloud: 19.0.4 -> 19.0.6, 20.0.1 -> 20.0.3, mark v19 as insecure	2020-12-11 12:39:57 +01:00
nfs-ganesha
nginx-sso
nosql	Merge pull request #104838 from redvers/update_cassandra_2.1.20_to_2.1.22_cve-2020-13946	2020-12-09 13:21:04 +01:00
nsq
oauth2_proxy
openafs	openafs_1_9: init at 1.9.0	2020-11-17 23:32:21 +01:00
openbgpd
openxpki
osrm-backend
p910nd
peach	peach: init at 0.9.8	2020-12-01 04:47:19 +01:00
pg_featureserv	pg_featureserv: 1.1.1 -> 1.2.0	2020-12-04 23:15:17 +01:00
pg_tileserv	pg_tileserv: 1.0.3 -> 1.0.4	2020-12-04 23:35:59 +01:00
pies
pim6sd
pinnwand	pinnwand: Use poetry from pythonPackages	2020-12-01 14:28:39 +01:00
plex	plexRaw: 1.20.5.3600-47c0d9038 -> 1.21.0.3711-b509cc236	2020-12-02 12:12:11 +00:00
polipo
pounce	pounce: 2.0 -> 2.1p1	2020-12-03 06:05:11 +00:00
prayer
ps3netsrv
pulseaudio	hsphfpd: 2020-11-27 -> 2020-12-05	2020-12-08 17:15:05 +01:00
quagga
radarr
radicale
rainloop
rippled	rippled: unbreak adding libnsl	2020-11-18 23:54:29 +01:00
roon-server
roundcube
routinator	routinator: 0.8.1 -> 0.8.2	2020-12-09 11:53:39 +00:00
rpcbind
rt
rtsp-simple-server	rtsp-simple-server: 0.12.1 -> 0.12.2	2020-12-01 07:39:48 +00:00
sabnzbd	sabnzbd: 3.0.1 -> 3.1.1	2020-12-01 07:56:53 +00:00
samba
scylladb
search	groonga: 10.0.8 -> 10.0.9	2020-12-05 20:28:59 +00:00
ser2net
serf
serviio
shairplay
shairport-sync	shairport-sync: 3.3.6 -> 3.3.7	2020-12-04 23:13:21 +00:00
shellinabox
shishi
sickbeard	sickgear: 0.23.4 -> 0.23.5	2020-12-08 05:47:33 +00:00
silc-server
simplehttp2server
sip	freeswitch: use spandsp3	2020-11-18 17:13:30 +01:00
sks
skydns
slimserver	Merge pull request #82296 from nyanloutre/slimserver_7_9_2	2020-11-25 00:07:52 +01:00
smcroute	treewide: ran ./maintainers/scripts/update_redirected_urls.sh	2020-11-27 01:23:57 +01:00
softether
sonarr
sozu	maintainers: rename filalex77 -> Br1ght0ne	2020-11-17 13:09:31 +02:00
sql	postgresqlPackages.pg_hll: 2.15 -> 2.15.1	2020-12-08 04:20:00 -05:00
squid
sslh
syncserver
tacacsplus
tailscale	tailscale: 1.2.6 -> 1.2.8	2020-11-16 16:46:16 -08:00
tang
tarssh	tarssh: 0.4.0 -> 0.5.0	2020-12-01 10:07:55 +00:00
tautulli	tautulli: 2.2.4 -> 2.6.1	2020-11-26 20:04:07 +01:00
tegola
teleport
tmate-ssh-server
tracing/tempo	tempo: 0.3.0 -> 0.4.0	2020-12-05 02:56:54 +00:00
traefik	traefik: 2.3.3 -> 2.3.4 (#105097 )	2020-11-26 18:26:06 -08:00
trezord	trezord: 2.0.29 -> 2.0.30	2020-11-09 19:26:28 +01:00
trickster
tt-rss
ttyd
tvheadend
u9fs	u9fs: 20110513 -> unstable-2020-11-21	2020-11-22 19:56:00 +01:00
udpt
uftp
uhub
ums
unfs3
unifi	unifiBeta: 6.0.28 -> 6.0.36	2020-11-30 22:28:14 +01:00
unpfs
ursadb	ursadb: mark broken on darwin	2020-11-27 23:19:16 +01:00
urserver
uwsgi
varnish
web-apps	fetchzip: remove write permissions for unpacked files	2020-11-26 15:30:12 -05:00
webmetro
wsdd	nixos/tests/samba-wsdd: add check WSD Discovery	2020-11-23 17:13:22 +03:00
x11	Merge master into staging-next	2020-12-05 00:38:01 +00:00
xandikos
xinetd
xmpp	utillinux: rename to util-linux	2020-11-24 12:42:06 -05:00
zigbee2mqtt	zigbee2mqtt: 1.16.1 -> 1.16.2	2020-12-05 17:42:07 +01:00
zoneminder	utillinux: rename to util-linux	2020-11-24 12:42:06 -05:00
zookeeper	zookeeper: 3.4.12 -> 3.6.2	2020-12-09 15:46:38 +01:00