Release 2023_012 (2023-06-05)#
Impact#
[NixOS 22.11] Most services will be restarted because of a core dependency change. Machines will schedule a reboot to activate the changed kernel.
NixOS 23.05 platform#
The new platform version is now available for non-production use. We will roll out the upgrade to most customer staging systems on Thursday, 2023-06-01. See Platform Upgrades & What’s New for things to consider before upgrading, significant changes and new package versions (PL-131334).
docker: restrict access to forwarded container ports so that they are only accessible to hosts within the same resource group, and not accessible over the public internet (PL-131042).
mailserver: fix permission setup for postfix queue monitoring (PL-129873).
NixOS 22.11 platform#
Pull upstream NixOS changes, security fixes and package updates (PL-131517):
cacert: 3.86 -> 3.89.1
curl: backport 8.1.0 security fixes (CVE-2023-28320, CVE-2023-28321, CVE-2023-28322)
git: 2.38.4 -> 2.38.5 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007)
gitlab: 15.11.5 -> 15.11.6
imagemagick: 7.1.1-8 -> 7.1.1-10
keycloak: 20.0.5 -> 21.1.1
libcap: backport 2.69 security fixes (CVE-2023-2602, CVE-2023-2603)
libmodsecurity: 3.0.8 -> 3.0.9
linux: 5.15.110 -> 5.15.113
matrix-synapse: 1.82.0 -> 1.84.1
php81: 8.1.18 -> 8.1.19
postgresql_11: 11.19 -> 11.20 (for all postgresql packages: CVE-2023-2454, CVE-2023-2455)
postgresql_12: 12.14 -> 12.15
postgresql_13: 13.10 -> 13.11
postgresql_14: 14.7 -> 14.8
postgresql_15: 15.2 -> 15.3
systemd: 251.15 -> 251.16
wget: 1.21.3 -> 1.21.4
Production channel URL for this release: https://hydra.flyingcircus.io/build/263886/download/1/nixexprs.tar.xz
NixOS 21.05 platform#
internal changes only
Production channel URL for this release: https://hydra.flyingcircus.io/build/263769/download/1/nixexprs.tar.xz
Detailed Changes#
NixOS 22.11: platform code, upstream changes
NixOS 21.05: platform code