summary refs log tree commit diff
path: root/pkgs/os-specific
Commit message (Collapse)AuthorAge
* wpa_supplicant: fix for security advisory 2020-2Martin Weinelt2021-02-04
| | | | | | | | | | | | | | | | | | A vulnerability was discovered in how wpa_supplicant processing P2P (Wi-Fi Direct) group information from active group owners. The actual parsing of that information validates field lengths appropriately, but processing of the parsed information misses a length check when storing a copy of the secondary device types. This can result in writing attacker controlled data into the peer entry after the area assigned for the secondary device type. The overflow can result in corrupting pointers for heap allocations. This can result in an attacker within radio range of the device running P2P discovery being able to cause unexpected behavior, including termination of the wpa_supplicant process and potentially arbitrary code execution. https://w1.fi/security/2020-2/wpa_supplicant-p2p-group-info-processing-vulnerability.txt Fixes: CVE-2021-0326
* zfs: 2.0.1 -> 2.0.2Henri Menke2021-02-03
|
* Merge pull request #109626 from holymonson/darwin-impure-cmdsSandro2021-02-03
|\ | | | | darwin: add impure-cmds
| * darwin: add impure-cmdsMonson Shao2021-01-17
| | | | | | | | | | On darwin, there are some commands neither opensource nor able to build in nixpkgs. We have no choice but to use those system-shipped impure ones.
* | Merge pull request #109635 from mroi/patch-pamJörg Thalheim2021-02-03
|\ \ | | | | | | linux-pam: fix cross compilation on Darwin
| * | linux-pam: fix cross compilation on DarwinMichael Roitzsch2021-01-17
| | | | | | | | | | | | | | | A build-time tool is created, which requires libintl.h. On Linux, libintl.h comes with glibc, but on Darwin, gettext is needed.
* | | Merge pull request #111039 from 0x4A6F/master-firejailMichael Raskin2021-02-02
|\ \ \ | | | | | | | | firejail: 0.9.64 -> 0.9.64.2
| * | | firejail: 0.9.64 -> 0.9.64.20x4A6F2021-01-28
| | | |
* | | | open-isns: 0.100 -> 0.101Markus Kowalewski2021-02-02
| | | |
* | | | Merge pull request #110171 from r-ryantm/auto-update/openvswitchMartin Weinelt2021-02-02
|\ \ \ \ | | | | | | | | | | openvswitch: 2.14.0 -> 2.14.1
| * | | | openvswitch: 2.14.0 -> 2.14.1R. RyanTM2021-01-20
| | | | |
* | | | | Merge pull request #111630 from danieldk/nvidia-settings-raceDaniël de Kok2021-02-02
|\ \ \ \ \ | | | | | | | | | | | | nvidia-settings: fix parallel build race condition
| * | | | | nvidia-settings: fix parallel build race conditionDaniël de Kok2021-02-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix a race condition that occurs in parallel builds of nvidia-settings, frequently ending in the following error: /bin/bash: _out/Linux_x86_64/antialias.png.h: No such file or directory make[1]: *** [Makefile:320: _out/Linux_x86_64/antialias.png.h] Error 1 Upstream issue and fix from: https://github.com/NVIDIA/nvidia-settings/issues/59
* | | | | | Merge pull request #111607 from jtojnar/fwupd-1.5.5Sandro2021-02-02
|\ \ \ \ \ \ | | | | | | | | | | | | | | fwupd: 1.5.3 → 1.5.5
| * | | | | | fwupd: 1.5.3 → 1.5.5Jan Tojnar2021-02-01
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | - https://github.com/fwupd/fwupd/releases/tag/1.5.4 - https://github.com/fwupd/fwupd/releases/tag/1.5.5
* | | | | | Revert "zfs: 2.0.1 -> 2.0.2"Tim Steinbach2021-02-01
| | | | | | | | | | | | | | | | | | | | | | | | This reverts commit e347e96601032ac64baf0bc7b482697ea9b5a119.
* | | | | | linux/hardened/patches/5.4: 5.4.93-hardened1 -> 5.4.94-hardened1Tim Steinbach2021-02-01
| | | | | |
* | | | | | linux/hardened/patches/5.10: 5.10.11-hardened1 -> 5.10.12-hardened1Tim Steinbach2021-02-01
| | | | | |
* | | | | | linux/hardened/patches/4.19: 4.19.171-hardened1 -> 4.19.172-hardened1Tim Steinbach2021-02-01
| | | | | |
* | | | | | linux: 5.4.93 -> 5.4.94Tim Steinbach2021-02-01
| | | | | |
* | | | | | linux: 5.10.11 -> 5.10.12Tim Steinbach2021-02-01
| | | | | |
* | | | | | linux: 4.9.253 -> 4.9.254Tim Steinbach2021-02-01
| | | | | |
* | | | | | linux: 4.4.253 -> 4.4.254Tim Steinbach2021-02-01
| | | | | |
* | | | | | linux: 4.19.171 -> 4.19.172Tim Steinbach2021-02-01
| | | | | |
* | | | | | linux: 4.14.217 -> 4.14.218Tim Steinbach2021-02-01
| | | | | |
* | | | | | zfs: 2.0.1 -> 2.0.2Henri Menke2021-02-01
|/ / / / /
* | | | | linuxptp: fix licenseMarkus Kowalewski2021-02-01
| | | | |
* | | | | Merge pull request #111498 from mweinelt/wpa_supplicant/oweNinjatrappeur2021-02-01
|\ \ \ \ \ | | | | | | | | | | | | wpa_supplicant: backport support for OWE
| * | | | | wpa_supplicant: backport support for OWEMartin Weinelt2021-02-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The wpa_supplicant upstream is slow to push out new releases and has been asked several times to do so. Support for Opportunistic Wireless Encryption has been on master since late 2019 and still hasn't made it into a release yet. This backports a rather simple patchset to enable OWE key management and exposes it also via DBus, so it can be used from Network-Manager.
* | | | | | zfs: fix zfs legacy mountPhilipp Mildenberger2021-01-31
|/ / / / / | | | | | | | | | | | | | | | Closes #110376
* | | | | batman-adv: 2020.4 -> 2021.0 (#111185)Martin Weinelt2021-01-31
| | | | | | | | | | | | | | | | | | | | | | | | | * batman-adv: 2020.4 -> 2021.0 * batman-adv: add hexa to maintainers
* | | | | Merge pull request #99323 from eadwu/nvidia/hardware.nvidia.packageDmitry Kalinkin2021-01-30
|\ \ \ \ \ | | | | | | | | | | | | nixos: hardware.nvidia.package option for selecting nvidia package
| * | | | | nixos: hardware.nvidia.package option for selecting nvidia packageFrederik Rietdijk2021-01-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make it possible to select a derivation to use. This also moves some logic that belongs to the derivation back into it.
* | | | | | treewide: update permanent url redirectsSandro Jäckel2021-01-30
| | | | | |
* | | | | | Merge pull request #111269 from r-ryantm/auto-update/ipsetMario Rodas2021-01-30
|\ \ \ \ \ \ | | | | | | | | | | | | | | ipset: 7.9 -> 7.10
| * | | | | | ipset: 7.9 -> 7.10R. RyanTM2021-01-30
| | | | | | |
* | | | | | | Merge pull request #108725 from veehaitch/ath_regd_optionalGuillaume Girol2021-01-30
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | kernelPatches: ath driver: allow setting regulatory domain
| * | | | | | | kernelPatches: ath driver: allow setting regulatory domainVincent Haupert2021-01-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ports an OpenWRT patch for Atheros wireless drivers (ath*) which allows the user to change the regulatory domain code to the one which actually applies. All Atheros devices have a regulatory domain burned into their EEPROM. When using a device as AP, this domain is frequently overly restrictive when compared to the regulation which applies in the country the device actually operates in; often, this restriction disallows IR on all channels making it impossible to use the device as an AP at all. This commit introduces the NixOS config option networking.wireless.athUserRegulatoryDomain which, if enabled, applies the patch and sets the kernel config option ATH_USER_REGD. The original OpenWRT patch targets Linux 5.8.
* | | | | | | | Merge pull request #110787 from tfc/cartesian-productSilvan Mosberger2021-01-29
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | lib/attrsets: add cartesianProductOfSets function
| * | | | | | | | Use lib.cartesianProducOfSets where lib.crossLists was usedJacek Galowicz2021-01-28
| | |_|_|_|/ / / | |/| | | | | |
* | | | | | | | linux: 5.11-rc3 -> 5.11-rc5Tim Steinbach2021-01-29
| | | | | | | |
* | | | | | | | Merge pull request #111001 from markuskowa/upd-rdma-coremarkuskowa2021-01-29
|\ \ \ \ \ \ \ \ | |_|_|/ / / / / |/| | | | | | | rdma-core: 33.0 -> 33.1
| * | | | | | | rdma-core: 33.0 -> 33.1Markus Kowalewski2021-01-28
| | | | | | | |
* | | | | | | | Merge master into staging-nextgithub-actions[bot]2021-01-29
|\ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ Merge pull request #110724 from ilian/fix/nvidia-rtJörg Thalheim2021-01-29
| |\ \ \ \ \ \ \ \
| | * | | | | | | | nvidia-x11: ignore linux-rt sanity checkilian2021-01-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ignore the sanity check that prevents the Nvidia drivers from being built for kernels with real-time patches. Even though the driver might not be officially supported by Nvidia for linux-rt, it seems to work without issues. Attempting to install the driver for linux-rt fails with the following error message: The kernel you are installing for is a PREEMPT_RT kernel! The NVIDIA driver does not support real-time kernels. If you are using a stock distribution kernel, please install a variant of this kernel that does not have the PREEMPT_RT patch set applied; if this is a custom kernel, please install a standard Linux kernel. Then try installing the NVIDIA kernel module again. *** Failed PREEMPT_RT sanity check. Bailing out! ***
* | | | | | | | | | Merge master into staging-nextgithub-actions[bot]2021-01-29
|\| | | | | | | | |
| * | | | | | | | | Merge pull request #111009 from markuskowa/upd-isnsmarkuskowa2021-01-28
| |\ \ \ \ \ \ \ \ \ | | |_|_|/ / / / / / | |/| | | | | | | | open-isns: 0.99 -> 0.100
| | * | | | | | | | openisns: change attribute to open-isnsMarkus Kowalewski2021-01-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make attribute consitent with pname to match the official name.
| | * | | | | | | | open-isns: 0.99 -> 0.100Markus Kowalewski2021-01-28
| | | |/ / / / / / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update homepage + git repo source * add maintainer
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-07 09:26:40 +0000