Skip to content
This repository was archived by the owner on Apr 12, 2021. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs-channels
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 31dcaa5eb67c
Choose a base ref
...
head repository: NixOS/nixpkgs-channels
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 2efedf8fc74e
Choose a head ref
  • 2 commits
  • 3 files changed
  • 2 contributors

Commits on May 20, 2020

  1. chromium: Mark as insecure 

    Since M81 won't receive any updates anymore and there are known
vulnerabilities we should mark it as insecure so that users are aware of
the risks.
Updating Chromium to M83 is unfortunately too challenging for
19.09, but as of today we've already covered the one month period of
security updates for "oldstable" and both 20.03 and nixos-unstable
contain recent versions (i.e. users should either update to the current
stable release or install Chromium from a different channel).

nixos-unstable PR for M83: #88206
    @primeos
    primeos committed May 20, 2020

    Verified

    This commit was signed with the committer’s verified signature. The key has expired.
    infinisil Silvan Mosberger
    GPG key ID: E8F1E9EAD284E17D
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    69e4ae5 View commit details

  2. Merge pull request #88368 from primeos/chromium-eol 

    [19.09] chromium: Mark as insecure
    @lheckemann
    lheckemann authored May 20, 2020
    Copy the full SHA
    2efedf8 View commit details
1 change: 0 additions & 1 deletion nixos/release-combined.nix
View file
Original file line number Diff line number Diff line change
@@ -65,7 +65,6 @@ in rec {
(all "nixos.tests.containers-imperative")
(all "nixos.tests.containers-ipv4")
(all "nixos.tests.containers-ipv6")
"nixos.tests.chromium.x86_64-linux"
(all "nixos.tests.firefox")
(all "nixos.tests.firewall")
(all "nixos.tests.fontconfig-default-fonts")
10 changes: 10 additions & 0 deletions pkgs/applications/networking/browsers/chromium/browser.nix
View file
Original file line number Diff line number Diff line change
@@ -86,5 +86,15 @@ mkChromiumDerivation (base: rec {
# backported to 19.09. Therefore we'll only maintain M81 for NixOS 19.09
# which will give us approx. one month of security updates / time for users
# to transition to 20.03 (as per our policy).
knownVulnerabilities = [
# Since the release of M83 the previous version isn't secure anymore.
# nixos-unstable update: https://github.com/NixOS/nixpkgs/pull/88206
''
This version of Chromium is no longer being updated. Consider switching
to the new stable NixOS channel or installing Chromium from a different
channel. A list of the missing security fixes can be found here:
https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html
''
];
};
})
10 changes: 10 additions & 0 deletions pkgs/applications/networking/browsers/google-chrome/default.nix
View file
Original file line number Diff line number Diff line change
@@ -137,5 +137,15 @@ in stdenv.mkDerivation {
license = licenses.unfree;
maintainers = [ maintainers.msteen ];
platforms = [ "x86_64-linux" ];
knownVulnerabilities = [
# Since the release of M83 the previous version isn't secure anymore.
# nixos-unstable update: https://github.com/NixOS/nixpkgs/pull/88206
''
This version of Google Chrome is no longer being updated. Consider switching
to the new stable NixOS channel or installing Google Chrome from a different
channel. A list of the missing security fixes can be found here:
https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html
''
];
};
}