Release 2021_004 (2021-02-08)

Impact

  • [NixOS 20.09] VMs will be rebooted for a kernel update.

  • [NixOS 20.09] Jitsi Videobridge will be restarted which will interrupt conferences for a short time.

  • [NixOS 20.09]: Nginx will be restarted.

NixOS 20.09 platform

  • Merge upstream NixOS changes. Includes security fixes for sudo (CVE-2021-3156) and imagemagick (CVE-2020-29599, CVE-2020-27560) (#PL-129624).

  • Jitsi: update components to the latest stable versions (#PL-129607).

  • Nginx: ensure correct permissions for log files. We encountered some exceptional situations where startup failed because Nginx couldn’t open log files (#PL-129618).

  • Nginx: fix log retention time (for non-standard cases). Log files were always deleted after 10 days even if the rotateLogs setting (default 7 days) was set to a higher value (#PL-129618).

  • Statshost: use TLS for fetching metrics via location proxies (#PL-129612).

Detailed Changes