Release 2021_004 (2021-02-08)¶

Impact¶

• [NixOS 20.09] VMs will be rebooted for a kernel update.
• [NixOS 20.09] Jitsi Videobridge will be restarted which will interrupt conferences for a short time.
• [NixOS 20.09]: Nginx will be restarted.

NixOS 20.09 platform¶

• Merge upstream NixOS changes. Includes security fixes for sudo (CVE-2021-3156) and imagemagick (CVE-2020-29599, CVE-2020-27560) (#PL-129624).
• Jitsi: update components to the latest stable versions (#PL-129607).
• Nginx: ensure correct permissions for log files. We encountered some exceptional situations where startup failed because Nginx couldn't open log files (#PL-129618).
• Nginx: fix log retention time (for non-standard cases). Log files were always deleted after 10 days even if the rotateLogs setting (default 7 days) was set to a higher value (#PL-129618).
• Statshost: use TLS for fetching metrics via location proxies (#PL-129612).

Detailed Changes¶

• NixOS 20.09: platform code, upstream changes