Commit Graph

17639 Commits

Author SHA1 Message Date
github-actions[bot]
af12e30ac5
Merge staging-next into staging 2022-01-18 00:02:15 +00:00
github-actions[bot]
b456d67c98
Merge master into staging-next 2022-01-18 00:01:41 +00:00
Pavol Rusnak
6c18c013f4
Merge pull request #154348 from Stunkymonkey/treewide-pname-version-5
treewide: rename name to pname&version
2022-01-17 21:05:32 +01:00
Felix Buehler
6cbf83ba01 treewide: rename name to pname&version 2022-01-17 20:52:59 +01:00
Frederik Rietdijk
c7bd506329 Merge staging-next into staging 2022-01-17 16:10:50 +01:00
Frederik Rietdijk
4d125692e5 Merge master into staging-next 2022-01-17 16:10:06 +01:00
Martin Weinelt
738ff6b30c
wpa_supplicant: 2.9 -> 2.10 2022-01-17 13:42:09 +01:00
Martin Weinelt
90482284fa
hostapd: 2.9 -> 2.10 2022-01-17 13:42:09 +01:00
github-actions[bot]
365cb72199
Merge staging-next into staging 2022-01-17 12:02:01 +00:00
github-actions[bot]
0eee7ee8c8
Merge master into staging-next 2022-01-17 12:01:25 +00:00
Renaud
0448ee08a4
Merge pull request #153260 from r-ryantm/auto-update/klibc
klibc: 2.0.9 -> 2.0.10
2022-01-17 11:02:38 +01:00
Frederik Rietdijk
afef6d0e81
Merge pull request #154687 from dotlambda/python-alias
python,pythonPackages: make aliases
2022-01-17 09:37:49 +01:00
github-actions[bot]
8d33d4afe8
Merge staging-next into staging 2022-01-17 06:01:58 +00:00
github-actions[bot]
f0a71fe6f3
Merge master into staging-next 2022-01-17 06:01:22 +00:00
Bobby Rong
9e779f01ca
Merge pull request #155226 from Stunkymonkey/fbterm-refactor
fbterm: refactor
2022-01-17 11:09:55 +08:00
Robert Schütz
d5cceedbd1 python,pythonPackages: make aliases
Since aliases are disallowed in nixpkgs, this makes usage of Python 2
which is EOL more explicit.
2022-01-16 18:39:59 +00:00
github-actions[bot]
812f2747ee
Merge staging-next into staging 2022-01-16 18:01:34 +00:00
github-actions[bot]
d1d6f982a8
Merge master into staging-next 2022-01-16 18:00:59 +00:00
Felix Buehler
34950c7359 sinit: refactor 2022-01-16 16:23:21 +01:00
Felix Buehler
3051b532d1 fbterm: refactor 2022-01-16 16:15:37 +01:00
github-actions[bot]
5a104d035c
Merge staging-next into staging 2022-01-16 12:01:46 +00:00
github-actions[bot]
0173b359a6
Merge master into staging-next 2022-01-16 12:01:11 +00:00
Jörg Thalheim
5a6a12256d
Merge pull request #154157 from yaxitech/sgx-ssl
sgx-ssl: init at lin_2.15.1_1.1.1l
2022-01-16 06:05:10 +00:00
github-actions[bot]
11f95b9323
Merge staging-next into staging 2022-01-16 06:01:47 +00:00
github-actions[bot]
122cae786e
Merge master into staging-next 2022-01-16 06:01:16 +00:00
Bernardo Meurer
4fa2647449
Merge pull request #154994 from mweinelt/kernel-disable-unpriv-ebpf
linux: enable BPF_UNPRIV_DEFAULT_OFF on 5.10 and later
2022-01-16 00:46:51 +00:00
Bernardo Meurer
00cd3d063c
Merge pull request #154976 from TredwellGit/linux
Kernels 2022-01-14
2022-01-16 00:41:11 +00:00
Martin Weinelt
3ee206291a
linux: enable BPF_UNPRIV_DEFAULT_OFF between 5.10 and 5.15
Disable unprivileged access to BPF syscalls to prevent denial of service
and privilege escalation via

a) potential speculative execution side-channel-attacks on unmitigated
hardware[0]

or

b) unvalidated memory access in ringbuffer helper functions[1].

Fixes: CVE-2021-4204, CVE-2022-23222

[0] https://ebpf.io/summit-2021-slides/eBPF_Summit_2021-Keynote-Daniel_Borkmann-BPF_and_Spectre.pdf
[1] https://www.openwall.com/lists/oss-security/2022/01/13/1
2022-01-15 23:44:19 +01:00
Vincent Haupert
6639cd8c65 sgx-ssl: don't run test app in installCheckPhase
Although we build the test app in SGX simulation mode which does not
require hardware SGX support, SGX SSL fails to initialize on non-Intel
CPUs. This is unexpected (and inconsistent with the `sgx-sdk` sample
code we run in the `installCheckPhase`) and subject to an upstream
issue: https://github.com/intel/intel-sgx-ssl/issues/113

Revert this commit as soon as the issue is resolved by Intel.
2022-01-15 13:08:31 +01:00
github-actions[bot]
62c87b5ea7
Merge staging-next into staging 2022-01-15 12:01:44 +00:00
github-actions[bot]
6d8719a23d
Merge master into staging-next 2022-01-15 12:01:13 +00:00
Vladimír Čunát
4c54621dbb
Merge #154321: libbpf: Fix musl build (into staging-next) 2022-01-15 08:41:52 +01:00
github-actions[bot]
4b86ccc596
Merge staging-next into staging 2022-01-15 00:02:13 +00:00
github-actions[bot]
2e421aaac4
Merge master into staging-next 2022-01-15 00:01:36 +00:00
arcnmx
36026bb0c4 linuxPackages.kvmfr: patch for 5.16 2022-01-14 15:14:39 -08:00
Jonathan Ringer
97a8c7228a linuxPackages.nvidia_x11_beta: 495.29.05 -> 510.39.01 2022-01-14 12:34:41 -08:00
github-actions[bot]
a5297a9900
Merge staging-next into staging 2022-01-14 18:02:00 +00:00
github-actions[bot]
d5e672b839
Merge master into staging-next 2022-01-14 18:01:18 +00:00
R. RyanTM
162d4c51b3
ryzenadj: 0.8.2 -> 0.8.3
(#154582)
2022-01-14 16:58:04 +01:00
github-actions[bot]
015bc487ab
Merge staging-next into staging 2022-01-14 12:01:54 +00:00
github-actions[bot]
dc1b038f25
Merge master into staging-next 2022-01-14 12:01:14 +00:00
markuskowa
eb7348fea9
Merge pull request #154872 from markuskowa/upd-rdma-core
rdma-core: 38.0 -> 38.1
2022-01-14 10:45:11 +01:00
Jonathan Ringer
3b4e64d171
Merge remote-tracking branch 'origin/staging-next' into staging 2022-01-13 18:46:45 -08:00
Dmitry Kalinkin
a56da82f7a
Merge branch 'master' into staging-next
Conflicts:
	pkgs/development/python-modules/restfly/default.nix
2022-01-13 21:39:05 -05:00
TredwellGit
e19681509b linux/hardened/patches/5.4: 5.4.170-hardened1 -> 5.4.171-hardened1 2022-01-14 02:25:10 +00:00
TredwellGit
ead5545be3 linux/hardened/patches/5.15: 5.15.12-hardened1 -> 5.15.14-hardened1 2022-01-14 02:25:01 +00:00
TredwellGit
f14a7feff2 linux/hardened/patches/5.10: 5.10.89-hardened1 -> 5.10.91-hardened1 2022-01-14 02:24:52 +00:00
TredwellGit
56224051e3 linux/hardened/patches/4.19: 4.19.224-hardened1 -> 4.19.225-hardened1 2022-01-14 02:24:42 +00:00
TredwellGit
230a6813d9 linux/hardened/patches/4.14: 4.14.261-hardened1 -> 4.14.262-hardened1 2022-01-14 02:24:34 +00:00
TredwellGit
c5f9bb4d21 linux-rt_5_4: 5.4.161-rt67 -> 5.4.170-rt68 2022-01-14 02:23:37 +00:00