Skip to content

Release 2021_011 (2021-04-06)

Impact

  • [NixOS 20.09] Many services will be restarted due to a openssl update. VMs will schedule a reboot to activate the new kernel version.

NixOS 20.09 platform

  • PostgreSQL role docs: document how to add custom settings via a NixOS module. We found out that putting plain config in /etc/local/postgresql doesn't work properly on 20.09 in some cases.

  • Merge upstream NixOS changes that include security fixes and other updates (#PL-129756):

  • go_1_15: 1.15.8 -> 1.15.10 (CVE-2021-27918, CVE-2021-27919)

  • grafana: 7.4.3 -> 7.4.5 (CVE-2021-27962, CVE-2021-28146, CVE-2021-28147, CVE-2021-28148)
  • imagemagick6: 6.9.11-60 -> 6.9.12-3
  • imagemagick: 7.0.10-61 -> 7.0.11-4
  • libtiff: CVE-2020-35523, CVE-2020-35524
  • linux: 5.4.104 -> 5.4.108
  • openssh: 8.4p1 -> 8.5p1
  • openssl: 1.1.1j -> 1.1.1k
  • php74: 7.4.15 -> 7.4.16

  • python3Packages.aiohttp: patch CVE-2021-21330

  • Reconfigure MongoDB server units to ensure restarts are performed on crashes (#PL-108116).

  • Fix network boot image creation for physical machine bootstraps (#PL-129676).

Detailed Changes

% vim: set spell spelllang=en: