Commit Graph

13667 Commits

Author SHA1 Message Date
Frederik Rietdijk
0d8491cb2b Merge master into staging-next 2020-11-29 13:51:10 +01:00
Jörg Thalheim
82a3c6648d
sysdig: 0.27.0 -> 0.27.1 2020-11-29 10:53:01 +01:00
John Ericson
73425f6c3b Merge remote-tracking branch 'upstream/master' into staging 2020-11-28 21:33:03 -05:00
Sandro
9295401520
Merge pull request #105279 from r-ryantm/auto-update/mcelog
mcelog: 169 -> 173
2020-11-28 21:00:27 +01:00
R. RyanTM
d6d2ff49b4 mcelog: 169 -> 173 2020-11-28 19:37:46 +00:00
Sandro
33ae7018d2
Merge pull request #105229 from srhb/bfptrace-0.11.4
linuxPackages.bpftrace: 0.11.0 -> 0.11.4
2020-11-28 18:25:49 +01:00
Doron Behar
00f7db841a
Merge pull request #105030 from freezeboy/add-akvcam
linuxPackages.akvcam: init at 1.1.1
2020-11-28 18:17:40 +02:00
Sarah Brofeldt
6b882ee0eb linuxPackages.bpftrace: 0.11.0 -> 0.11.4 2020-11-28 14:00:09 +01:00
Michael Raskin
2d50a1f09e
Merge pull request #105182 from roosemberth/fixes/firejail
firejail: fix -overlay and -build functionality on NixOS
2020-11-28 12:27:39 +00:00
Frederik Rietdijk
9e062723b2 Merge master into staging-next 2020-11-28 08:53:47 +01:00
Sandro
e2c2f9affb
Merge pull request #105207 from r-ryantm/auto-update/ipset
ipset: 7.7 -> 7.9
2020-11-28 06:56:07 +01:00
R. RyanTM
6463551846 ipset: 7.7 -> 7.9 2020-11-28 04:41:04 +00:00
Sandro
168c797ebc
Merge pull request #105190 from r-ryantm/auto-update/hdparm
hdparm: 9.58 -> 9.60
2020-11-28 02:56:05 +01:00
R. RyanTM
83215635d0 hdparm: 9.58 -> 9.60 2020-11-28 00:27:56 +00:00
Roosembert Palacios
831c700c5d
firejail: fix -overlay and -build functionality on NixOS
- The `-overlay` flag runs the specified binary inside an OverlayFS,
  since the /nix store may be in a different mount point than the user
  home, this patch explicitly bind mounts it so it's available inside
  the overlay.

- profile builder: firejail provides facilities to build a new profiles.
  To do so, it execute the helper binary `fbuilder`, which in turn will
  execute firejail back with different options. This patch makes it use
  the binary available in PATH instead of the one produced at compile time.
  The compiled firejail binary doesn't have the necessary permissions,
  so the firejail NixOS module wraps it in a SUID wrapper available on
  PATH at runtime.

Signed-off-by: Roosembert Palacios <roosemberth@posteo.ch>
2020-11-27 23:14:58 +01:00
Linus Heckemann
9174f79fe6
Merge pull request #104760 from gravndal/edac
linux: explicitly enable RAS
2020-11-27 19:15:00 +01:00
Maximilian Bosch
b19ad349b0
Merge pull request #104792 from SuperSandro2000/autofs-fix
autofs: fix compilation fail due to libtirpc changes
2020-11-27 19:09:41 +01:00
Frederik Rietdijk
ce9c513856 Merge staging-next into staging 2020-11-27 15:09:41 +01:00
Frederik Rietdijk
b2a3891e12 Merge master into staging-next 2020-11-27 15:09:19 +01:00
Sandro
be36f6f0a0
Merge pull request #100891 from lukebfox/patch-2
powertop: strip hcitool FSH path
2020-11-27 14:50:30 +01:00
markuskowa
bb04c36ca4
Merge pull request #105061 from r-ryantm/auto-update/rdma-core
rdma-core: 31.1 -> 31.2
2020-11-27 00:26:21 +01:00
R. RyanTM
b87b2620d7 rdma-core: 31.1 -> 31.2 2020-11-26 18:43:23 +00:00
freezeboy
bab529c9ff linuxPackages.akvcam: init at 1.1.1 2020-11-26 13:06:35 +01:00
Sandro
1ec96b7d1f
Merge pull request #105011 from r-ryantm/auto-update/light
light: 1.2.1 -> 1.2.2
2020-11-26 12:28:15 +01:00
R. RyanTM
0722158dba light: 1.2.1 -> 1.2.2 2020-11-26 10:20:17 +00:00
Gaute Ravndal
5183864d18 linux: explicitly enable RAS
This is needed for EDAC support.
2020-11-26 10:08:51 +01:00
Dmitry Kalinkin
731c548629
Merge pull request #104373 from andresilva/linux-zen-5.9.9
linux_zen: 5.9.6 -> 5.9.10
2020-11-24 21:43:57 -05:00
Florian Klink
b92942f466 systemd: use withPortabled in mesonFlags
No matter what withPortabled was being set, we always passed
-Dportabled=false in mesonFlags. Fix this.

Also, nixpkgs-fmt the file for consistency.
2020-11-25 00:22:37 +01:00
Sandro
77d45b8609
Merge pull request #99426 from jonringer/add-catfs
catfs: init at unstable-2020-03-21
2020-11-24 23:40:19 +01:00
Graham Christensen
d9c3f13df3
Merge pull request #104776 from grahamc/utillinux
utillinux: rename to util-linux
2020-11-24 15:14:36 -05:00
Sandro Jäckel
2044fa172d
sssd: fix nss collision with upstream patch 2020-11-24 20:09:04 +01:00
Sandro Jäckel
4d5ab8d9f7
autofs: fix compilation fail due to libtirpc changes 2020-11-24 19:53:20 +01:00
Sandro
43082f7f19
Merge pull request #104774 from grahamc/sssd
sssd: fix build on glibc-2.32
2020-11-24 19:53:06 +01:00
Graham Christensen
bc49a0815a
utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
Tim Steinbach
874e250009
linux-rt_5_4: 5.4.77-rt43 -> 5.4.78-rt44 2020-11-24 10:04:24 -05:00
Tim Steinbach
513afc731c
linux: 5.9.10 -> 5.9.11 2020-11-24 10:04:24 -05:00
Tim Steinbach
53738d417f
linux: 5.4.79 -> 5.4.80 2020-11-24 10:04:23 -05:00
Tim Steinbach
a17655a291
linux: 4.9.245 -> 4.9.246 2020-11-24 10:04:23 -05:00
Tim Steinbach
d17c554fdf
linux: 4.4.245 -> 4.4.246 2020-11-24 10:04:22 -05:00
Tim Steinbach
06ba11d0b7
linux: 4.19.159 -> 4.19.160 2020-11-24 10:04:21 -05:00
Tim Steinbach
c384c5409a
linux: 4.14.208 -> 4.14.209 2020-11-24 10:04:18 -05:00
Graham Christensen
22965d84d5
sssd: fix build on glibc-2.32
For https://hydra.nixos.org/build/128488320 which errored with:

    src/responder/nss/nss_cmd.c:733:16: error: 'nss_setnetgrent' redeclared as different kind of symbol
      733 | static errno_t nss_setnetgrent(struct cli_ctx *cli_ctx,
          |                ^~~~~~~~~~~~~~~
    In file included from ./src/sss_client/sss_cli.h:28,
                     from ./src/db/sysdb.h:27,
                     from src/responder/nss/nss_cmd.c:26:
    /nix/store/a2n8nrsf215x01a7fv8l94crdjwf69pa-glibc-2.32-dev/include/nss.h:184:25: note: previous declaration of 'nss_setnetgrent' was here
      184 | typedef enum nss_status nss_setnetgrent (const char *, struct __netgrent *);
          |                         ^~~~~~~~~~~~~~~
    make[2]: *** [Makefile:17818: src/responder/nss/nss_cmd.o] Error 1
    make[2]: Leaving directory '/build/sssd-1.16.4'
    make[1]: *** [Makefile:33824: all-recursive] Error 1
    make[1]: Leaving directory '/build/sssd-1.16.4'
    make: *** [Makefile:10123: all] Error 2
2020-11-24 09:50:33 -05:00
Dmitry Kalinkin
7d9c1b2dca
Merge pull request #86834 from eadwu/nvidia_x11/fix-vulkan-icd
nvidia_x11: fix vulkan icd filename
2020-11-24 08:02:39 -05:00
Jan Tojnar
6d99109b12
Merge branch 'staging-next' into staging 2020-11-24 05:44:44 +01:00
Ryan Mulligan
8d12c667ff
Merge pull request #93176 from oxalica/init/swapview
swapview: init at 0.1.0
2020-11-23 11:24:59 -08:00
Ryan Mulligan
0b84f3b469
Merge pull request #100549 from oxalica/bump/earlyoom
earlyoom: 1.6.1 -> 1.6.2
2020-11-23 11:05:00 -08:00
Frederik Rietdijk
587538d087 Merge staging-next into staging 2020-11-23 18:10:33 +01:00
Tim Steinbach
d0225fcdae
linux: 5.10-rc4 -> 5.10-rc5 2020-11-23 11:31:45 -05:00
Tim Steinbach
fa6abb2b61
linux/hardened/patches/5.9: 5.9.9.a -> 5.9.10.a 2020-11-23 10:55:16 -05:00
Tim Steinbach
640a842d57
linux/hardened/patches/5.4: 5.4.78.a -> 5.4.79.a 2020-11-23 10:55:15 -05:00
Tim Steinbach
dd721fc7b0
linux/hardened/patches/4.19: 4.19.158.a -> 4.19.159.a 2020-11-23 10:55:15 -05:00
Tim Steinbach
62531fd4e2
linux/hardened/patches/4.14: 4.14.207.a -> 4.14.208.a 2020-11-23 10:55:15 -05:00
Tim Steinbach
ca4d1602d7
linux: 5.9.9 -> 5.9.10 2020-11-23 10:55:14 -05:00
Tim Steinbach
716283fa3a
linux: 5.4.78 -> 5.4.79 2020-11-23 10:55:14 -05:00
Tim Steinbach
856d7ae12b
linux: 4.9.244 -> 4.9.245 2020-11-23 10:55:13 -05:00
Tim Steinbach
5ba51e7343
linux: 4.4.244 -> 4.4.245 2020-11-23 10:55:13 -05:00
Tim Steinbach
187e3bfa48
linux: 4.19.158 -> 4.19.159 2020-11-23 10:55:12 -05:00
Tim Steinbach
5cfb696a1a
linux: 4.14.207 -> 4.14.208 2020-11-23 10:55:12 -05:00
Sandro
1a90114a95
Merge pull request #104192 from cmacrae/upgrade/yabai/3.3.4
yabai: 3.3.3 -> 3.3.4
2020-11-23 15:17:45 +01:00
Sandro
a7fd3a21ca
Merge pull request #104191 from cmacrae/upgrade/spacebar/1.2.1
spacebar: 1.1.1 -> 1.2.1
2020-11-23 14:37:45 +01:00
Sandro
d4b8b0adab
Merge pull request #104021 from dotkrnl/patch-1
reattach-to-user-namespace: 2.8 -> 2.9
2020-11-23 12:49:40 +01:00
Florian Klink
c76891314d
Merge pull request #104094 from flokli/systemd-unified-cgroup-hierarchy
systemd: switch to unified cgroup hierarchy by default
2020-11-22 22:35:42 +01:00
André Silva
34fb8f746e
linux_zen: 5.9.6 -> 5.9.10 2020-11-22 17:01:53 +00:00
Michael Raskin
d006ea0663
Merge pull request #104487 from snicket2100/firejail-xdg-dbus-proxy
firejail: fixing the 'xdg-dbus-proxy' dependency
2020-11-22 16:32:19 +00:00
snicket2100
ffeb2af920 firejail: fixing the 'xdg-dbus-proxy' dependency
xdg-dbus-proxy path is hardcoded in the common.h file in the firejail
source code. if this binary is not found, dbus filtering capabilities
of firejail get limited i.e. you can only entirely disable or entirely
enable dbus communication.
2020-11-22 13:35:09 +01:00
Luka Blaskovic
8b1717c266 sof-firmware: 1.5.1 -> 1.6
https://github.com/thesofproject/sof/releases/tag/v1.6
2020-11-21 15:29:32 +00:00
Frederik Rietdijk
54cb417ba0 Merge staging-next into staging 2020-11-21 08:43:46 +01:00
Frederik Rietdijk
1ffd7cf0d6 Merge master into staging-next 2020-11-21 08:43:10 +01:00
Martin Weinelt
138abad757
musl: patch CVE-2020-28928
Destination buffer overflow in wcsnrtombs.

Fixes: CVE-2020-28928
2020-11-21 00:40:40 +01:00
Christian Kampka
ecaa0e1058 s6-linux-utils: 2.5.1.2 -> 2.5.1.3 2020-11-20 18:15:17 +01:00
Tim Steinbach
b5fdfc2ec6
linux/hardened/patches/5.9: 5.9.8.a -> 5.9.9.a 2020-11-20 11:31:31 -05:00
Tim Steinbach
1c6f19bfbe
linux/hardened/patches/5.4: 5.4.77.a -> 5.4.78.a 2020-11-20 11:31:29 -05:00
Tim Steinbach
674e6d9c0f
linux/hardened/patches/4.19: 4.19.157.a -> 4.19.158.a 2020-11-20 11:31:27 -05:00
Tim Steinbach
c9737f0870
linux/hardened/patches/4.14: 4.14.206.a -> 4.14.207.a 2020-11-20 11:31:25 -05:00
Arnout Engelen
70ecb218f1
selinux: 2.9 -> 3.0 (#104087)
Notably, Python 2 code is not be supported in this project anymore and
new Python code should be written only for Python 3, which is no longer
restricted to Python 3.7 (see 780fb563c7,
5dfd3c4975)

https://github.com/SELinuxProject/selinux/releases/tag/20191204
2020-11-20 14:54:14 +01:00
Jan Tojnar
66ef389efa
Merge branch 'staging-next' into staging 2020-11-20 01:38:58 +01:00
Jan Tojnar
f6105d21e3
Merge branch 'master' into staging-next 2020-11-20 01:38:32 +01:00
Martin Weinelt
5928d66704
microcodeIntel: 20201112 -> 20201118
Fixes a regression on some "OEM platforms".

Relates to #104301
2020-11-19 20:30:53 +01:00
Frederik Rietdijk
1a33f87245 Merge staging-next into staging 2020-11-19 20:08:38 +01:00
Frederik Rietdijk
ea7b8978ef Merge master into staging-next 2020-11-19 20:08:15 +01:00
Florian Klink
d22b3ed4bc systemd: switch to unified cgroup hierarchy by default
See https://www.redhat.com/sysadmin/fedora-31-control-group-v2 for
details on why this is desirable, and how it impacts containers.

Users that need to keep using the old cgroup hierarchy can re-enable it
by setting `systemd.unifiedCgroupHierarchy` to `false`.

Well-known candidates not supporting that hierarchy, like docker and
hidepid=… will disable it automatically.

Fixes #73800
2020-11-19 16:56:46 +01:00
Tim Steinbach
6f4bd3959f
linux_latest-libre: 17762 -> 17768 2020-11-19 09:08:51 -05:00
Tim Steinbach
6eb958ae76
linux: 5.9.8 -> 5.9.9 2020-11-19 09:08:51 -05:00
Tim Steinbach
199efec0a5
linux: 5.4.77 -> 5.4.78 2020-11-19 09:08:51 -05:00
Tim Steinbach
695ac805af
linux: 4.9.243 -> 4.9.244 2020-11-19 09:08:50 -05:00
Tim Steinbach
6cad3d1cf3
linux: 4.4.243 -> 4.4.244 2020-11-19 09:08:50 -05:00
Tim Steinbach
7486ce6765
linux: 4.19.157 -> 4.19.158 2020-11-19 09:08:49 -05:00
Tim Steinbach
2f1d8550bb
linux: 4.14.206 -> 4.14.207 2020-11-19 09:08:46 -05:00
TredwellGit
d7695d13ff firmwareLinuxNonfree: 2020-10-22 -> 2020-11-18 2020-11-19 09:40:32 +00:00
Gabriel Ebner
83143c4f0f
Merge pull request #103575 from TredwellGit/linuxHeaders
linuxHeaders: 5.5 -> 5.9.8
2020-11-19 09:42:17 +01:00
Timothy Klim
a68a0bcc91 nvidia-x11: 455.38 -> 455.45.01 2020-11-19 13:42:28 +07:00
Timo Kaufmann
9140b112b9
Merge pull request #103124 from xfix/update-ndiswrapper
linuxPackages.ndiswrapper: 1.62-pre -> 1.63
2020-11-18 22:32:08 +01:00
cmacrae
69d9d5d88e
yabai: 3.3.3 -> 3.3.4 2020-11-18 17:14:53 +00:00
cmacrae
d09c7c44a1
spacebar: 1.1.1 -> 1.2.1 2020-11-18 17:09:55 +00:00
Izorkin
2f7ce5fdc3 nftables: 0.9.6 -> 0.9.7 2020-11-18 15:51:53 +01:00
Frederik Rietdijk
da12fc6838 Merge staging-next into staging 2020-11-18 15:36:56 +01:00
Konrad Borowski
0788a95557 linuxPackages.ndiswrapper: 1.62-pre -> 1.63 2020-11-18 10:59:38 +01:00
Michele Guerini Rocco
09506f5018
Merge pull request #104134 from r-ryantm/auto-update/btfs
btfs: 2.22 -> 2.23
2020-11-18 10:26:16 +01:00
R. RyanTM
1edae8aa7b btfs: 2.22 -> 2.23 2020-11-18 05:13:07 +00:00
Aaron Janse
52d3cc4438 tomb: 2.7 -> 2.8 2020-11-18 09:54:49 +08:00
Jason Lau
49325a0d7f reattach-to-user-namespace: 2.8 -> 2.9 2020-11-17 10:43:43 -08:00
Edmund Wu
0f322400ea
nvidia_x11: fix vulkan icd filename 2020-11-16 14:04:16 -05:00
Tim Steinbach
bb15fa7427
linux: 5.10-rc3 -> 5.10-rc4 2020-11-16 12:33:28 -05:00
Florian Klink
462c5b26c5
Merge pull request #103966 from flokli/kernel-enable-ipv6
kernel config: explicitly enable CONFIG_IPV6
2020-11-16 16:32:50 +01:00
Florian Klink
13be37662d kernel config: explicitly enable CONFIG_IPV6
We currently build CONFIG_IPV6=m.

This seems to be not really well-supported in mainline kernels - see
https://lore.kernel.org/netdev/20201115224509.2020651-1-flokli@flokli.de/T/#u

Compiling it as a module doesn't give too much benefit - even for people
who did explicitly set `enableIPv6` to false, the `ipv6` module was
still loaded, as soon as another module was loaded that requires it
(bridge,br_netfilter,wireguard,ip6table_mangle,sctp,…).

By compiling it in, we only loose the possibility to not add it to
`boot.kernelModules` anymore (as it's part of the kernel directly). The
space savings are negligible.

People wanting to disable IPv6 still get the appropriate sysctls and
options set (while having the kernel code loaded), nothing is really
changing here.
2020-11-16 13:07:49 +01:00
Frederik Rietdijk
986c2d36da Merge master into staging-next 2020-11-16 09:01:53 +01:00
Daniel Fox Franke
2fa89880cb
nvidia-x11: 455.28 -> 455.38 (#103830) 2020-11-14 20:45:41 -05:00
Tim Steinbach
0c0b533fa7
linux-rt_5_4: 5.4.74-rt42 -> 5.4.77-rt43 2020-11-14 15:21:48 -05:00
Frederik Rietdijk
da6239dab3 Merge #98541 into staging-next 2020-11-14 09:19:31 +01:00
Mario Rodas
d2d4d04ced
Merge pull request #103678 from r-ryantm/auto-update/forkstat
forkstat: 0.02.15 -> 0.02.16
2020-11-13 21:09:23 -05:00
Mario Rodas
126e37ed45
Merge pull request #103685 from cmacrae/upgrade/yabai/3.3.2
yabai: 3.3.0 -> 3.3.3
2020-11-13 21:02:22 -05:00
Frederik Rietdijk
9fc4a4db5a Merge staging-next into staging 2020-11-13 20:59:08 +01:00
Frederik Rietdijk
463f738cc6 Merge master into staging-next 2020-11-13 20:58:35 +01:00
Jonathan Ringer
f525d54c55 zfsUnstable: 2.0.0-rc5 -> 2.0.0-rc6 2020-11-13 09:31:18 -08:00
Tim Steinbach
c9845cdaed
linux: 5.10-rc2 -> 5.10-rc3 2020-11-13 11:33:33 -05:00
cmacrae
7fb1069a13
yabai: 3.3.0 -> 3.3.3 2020-11-13 14:47:11 +00:00
Tim Steinbach
eb64d1518f
linux-rt_5_4: 5.4.74-rt41 -> 5.4.74-rt42 2020-11-13 09:28:18 -05:00
Andreas Rammhold
df620fd81a
Merge pull request #103637 from mweinelt/intelMicrocode
microcodeIntel: 20201110 -> 20201112
2020-11-13 15:20:50 +01:00
TredwellGit
bfaa9af416 linuxHeaders: 5.5 -> 5.9.8 2020-11-13 12:53:54 +00:00
R. RyanTM
568d95e11e forkstat: 0.02.15 -> 0.02.16 2020-11-13 10:12:04 +00:00
Jörg Thalheim
440c5808a1
Merge pull request #103006 from Mic92/bcc
linuxPackages.bcc: 0.16.0 -> 0.17.0
2020-11-13 08:37:12 +01:00
R. RyanTM
3b6ec753b1 eventstat: 0.04.10 -> 0.04.11 2020-11-13 07:16:05 +00:00
Mario Rodas
53402d6981
Merge pull request #103640 from r-ryantm/auto-update/criu
criu: 3.14 -> 3.15
2020-11-12 20:32:47 -05:00
Daiderd Jordan
411f9e25d7
Merge pull request #98541 from thefloweringash/darwin-tapi-stdenv
darwin (Big Sur): tbd based stdenv
2020-11-13 00:14:25 +01:00
Jonas Chevalier
a7cb88c3de
tree-wide: unify Bash completions outputs (#103421)
Use $out/share/bash-completion/completions to store the Bash completions
2020-11-12 21:22:18 +00:00
Matthieu Coudron
2bbfa82c2f
Merge pull request #103232 from teto/mptcp_official
linux_mptcp_5_9: init upstream multipath TCP at 5.9
2020-11-12 22:15:02 +01:00
R. RyanTM
fb0f4c5652 criu: 3.14 -> 3.15 2020-11-12 20:03:56 +00:00
Martin Weinelt
eaf889aea0 microcodeIntel: 20201110 -> 20201112
Update to Pentium Silver N/J5xxx, Celeron N/J4xxx

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html

Fixes: CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
2020-11-12 20:09:49 +01:00
Matthieu Coudron
db215ca08d linux_mptcp_94: remove (outdated)
few years old by now, use linux_mptcp_95 instead.
2020-11-12 18:51:18 +01:00
Andreas Rammhold
4acaee2cb1
Merge pull request #103450 from mweinelt/intel-microcode
microcodeIntel: 20200616 -> 20201110
2020-11-12 17:12:55 +01:00
Justin Humm
6b9f23267e
linuxPackages.wireguard: 1.0.20200908 -> 1.0.20201112 2020-11-12 13:10:20 +01:00
Andrew Childs
f2b81a021e darwin/print-reexports: add an overview comment 2020-11-12 16:57:19 +09:00
Andrew Childs
7e49fb6592 darwin/apple-sdk: explain why Kernel.framework has no .tbd file 2020-11-12 16:57:19 +09:00
R. RyanTM
aec6a8069f pcm: 202009 -> 202010 2020-11-11 14:54:20 -08:00
Tim Steinbach
413237b4ed
linux/hardened/patches/5.9: 5.9.7.a -> 5.9.8.a 2020-11-11 15:43:18 -05:00
Tim Steinbach
feab19926f
linux/hardened/patches/5.4: 5.4.76.a -> 5.4.77.a 2020-11-11 15:43:18 -05:00
Tim Steinbach
7bfbd07c06
linux/hardened/patches/4.19: 4.19.156.a -> 4.19.157.a 2020-11-11 15:43:18 -05:00
Tim Steinbach
6322425d0c
linux/hardened/patches/4.14: 4.14.205.a -> 4.14.206.a 2020-11-11 15:43:17 -05:00
Tim Steinbach
470f86b851
linux: 5.9.7 -> 5.9.8 2020-11-11 15:43:17 -05:00
Tim Steinbach
193f7a49fe
linux: 5.4.76 -> 5.4.77 2020-11-11 15:43:16 -05:00
Tim Steinbach
3b27759e52
linux: 4.9.242 -> 4.9.243 2020-11-11 15:43:16 -05:00
Tim Steinbach
f4ce75d98d
linux: 4.4.242 -> 4.4.243 2020-11-11 15:43:15 -05:00
Tim Steinbach
08a59efe79
linux: 4.19.156 -> 4.19.157 2020-11-11 15:43:15 -05:00
Tim Steinbach
399acdc934
linux: 4.14.205 -> 4.14.206 2020-11-11 15:43:15 -05:00
Andrew Childs
3456ef6f30 darwin/apple-sdk: use darwin stubs 2020-11-12 00:23:09 +09:00
Andrew Childs
8e6d830423 darwin/objc4: use darwin-stubs 2020-11-12 00:23:09 +09:00
Andrew Childs
193c91233c darwin/IOKit: use darwin-stubs 2020-11-12 00:23:09 +09:00
Andrew Childs
03988a5fec darwin/Security: use darwin-stubs 2020-11-12 00:23:09 +09:00
Andrew Childs
b176ad9546 darwin/Libsystem: use darwin-stubs 2020-11-12 00:23:09 +09:00
Andrew Childs
fd33052999 darwin/print-reexports: nixpkgs-specific utility to inspect .tbd files
Used during bootstrap to check that re-exported libraries are not
dangling.
2020-11-12 00:23:09 +09:00
Andrew Childs
8946ff8d71 darwin/darwin-stubs: init 2020-11-12 00:23:09 +09:00
Frederik Rietdijk
4076ffe580 Merge staging-next into staging 2020-11-11 16:00:34 +01:00
Tim Steinbach
e7fa508f85
linux/hardened/patches/5.9: 5.9.6.a -> 5.9.7.a 2020-11-11 09:32:04 -05:00
Tim Steinbach
7420461d12
linux/hardened/patches/5.4: 5.4.75.a -> 5.4.76.a 2020-11-11 09:32:04 -05:00
Tim Steinbach
362d24c7ee
linux/hardened/patches/4.19: 4.19.155.a -> 4.19.156.a 2020-11-11 09:32:04 -05:00
Tim Steinbach
8e364d518b
linux/hardened/patches/4.14: 4.14.204.a -> 4.14.205.a 2020-11-11 09:32:03 -05:00
Tim Steinbach
3be8a4483a
linux_latest-libre: 17744 -> 17762 2020-11-11 09:32:03 -05:00
Martin Weinelt
a79902f23e
microcodeIntel: 20200616 -> 20201110
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20201110

Security advisories:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html

Fixes: CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
2020-11-11 14:25:23 +01:00
Ivan Kozik
c945b47a25 linuxPackages.wireguard: fix the build on linux 5.4.76
Patch copied from https://github.com/archlinux/svntogit-packages/blob/packages/wireguard-dkms/trunk/lts.diff

This fixes:

```
In file included from <command-line>:
/build/source/src/compat/compat-asm.h:44: warning: "SYM_FUNC_START" redefined
   44 | #define SYM_FUNC_START ENTRY
      |
In file included from /build/source/src/compat/compat-asm.h:9,
                 from <command-line>:
/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/include/linux/linkage.h:218: note: this is the location of the previous definition
  218 | #define SYM_FUNC_START(name)    \
      |
In file included from <command-line>:
/build/source/src/compat/compat-asm.h:45: warning: "SYM_FUNC_END" redefined
   45 | #define SYM_FUNC_END ENDPROC
      |
In file included from /build/source/src/compat/compat-asm.h:9,
                 from <command-line>:
/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/include/linux/linkage.h:265: note: this is the location of the previous definition
  265 | #define SYM_FUNC_END(name)    \
      |
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S: Assembler messages:
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S:50: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S:176: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S:180: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/blake2s/blake2s-x86_64.S:257: Error: invalid character '(' in mnemonic
make[3]: *** [/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/scripts/Makefile.build:348: /build/source/src/crypto/zinc/blake2s/blake2s-x86_64.o] Error 1
make[3]: *** Waiting for unfinished jobs....
In file included from <command-line>:
/build/source/src/compat/compat-asm.h:44: warning: "SYM_FUNC_START" redefined
   44 | #define SYM_FUNC_START ENTRY
      |
In file included from /build/source/src/compat/compat-asm.h:9,
                 from <command-line>:
/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/include/linux/linkage.h:218: note: this is the location of the previous definition
  218 | #define SYM_FUNC_START(name)    \
      |
In file included from <command-line>:
/build/source/src/compat/compat-asm.h:45: warning: "SYM_FUNC_END" redefined
   45 | #define SYM_FUNC_END ENDPROC
      |
In file included from /build/source/src/compat/compat-asm.h:9,
                 from <command-line>:
/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/include/linux/linkage.h:265: note: this is the location of the previous definition
  265 | #define SYM_FUNC_END(name)    \
      |
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S: Assembler messages:
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:123: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:185: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:187: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:319: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1016: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1616: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1620: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1810: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1812: Error: invalid character '(' in mnemonic
/build/source/src/crypto/zinc/chacha20/chacha20-x86_64.S:1959: Error: invalid character '(' in mnemonic
make[3]: *** [/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/scripts/Makefile.build:348: /build/source/src/crypto/zinc/chacha20/chacha20-x86_64.o] Error 1
make[2]: *** [/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/Makefile:1729: /build/source/src] Error 2
make[1]: *** [/nix/store/cz60577g5hwk78c2z7rhxl21bklaqr0d-linux-5.4.77-dev/lib/modules/5.4.77-hardened/source/Makefile:179: sub-make] Error 2
make: *** [Makefile:26: module] Error 2
builder for '/nix/store/hll3sjyrwa55arzlsxnbacqdd8s842l1-wireguard-1.0.20200908.drv' failed with exit code 2
```
2020-11-10 23:23:35 -08:00
Jan Tojnar
23b939cfc3
fwupd: Fix build
Few new files are trying to be installed to /etc.

Fixes: https://github.com/NixOS/nixpkgs/issues/103365
2020-11-11 01:07:27 +01:00
Dmitry Kalinkin
7c1e712c39
Merge pull request #103180 from veprbl/pr/darwin_adv_cmds_fix
darwin.adv_cmds: fix build
2020-11-10 13:26:28 -05:00
Graham Christensen
f9121be82e
Merge pull request #103307 from grahamc/zfs-scripts
zfs: extend zpool scripts with :$PATH, remove sudo
2020-11-10 10:20:02 -05:00
Tim Steinbach
589bf72e97
linux: 5.9.6 -> 5.9.7 2020-11-10 09:11:56 -05:00
Tim Steinbach
8aa3123f33
linux: 5.4.75 -> 5.4.76 2020-11-10 09:11:55 -05:00
Tim Steinbach
e696d5466c
linux: 4.9.241 -> 4.9.242 2020-11-10 09:11:55 -05:00
Tim Steinbach
48d83292f8
linux: 4.4.241 -> 4.4.242 2020-11-10 09:11:55 -05:00
Tim Steinbach
8f6733ca48
linux: 4.19.155 -> 4.19.156 2020-11-10 09:11:54 -05:00
Tim Steinbach
3c25cf4d13
linux: 4.14.204 -> 4.14.205 2020-11-10 09:11:51 -05:00
R. RyanTM
3ffd4b446f iptables: 1.8.5 -> 1.8.6 2020-11-10 15:06:39 +01:00
Graham Christensen
b3d4f5dada
zfs: extend zpool scripts with :$PATH, remove sudo
sudo the package is not suid, so remove it from the PATH. Extend
PATH with $PATH to fetch sudo from the outer PATH. Move the generation
of `path` in to Nix, so the sed expression can use single quotes,
which prevents $PATH being interpolated at build-time.
2020-11-10 08:50:22 -05:00
Frederik Rietdijk
379aaa1e0c Merge master into staging-next 2020-11-10 10:11:08 +01:00
Peter Hoeg
de2112c03d bolt: 0.8 -> 0.9 2020-11-10 08:09:47 +08:00
Jan Tojnar
3a5ba30c13 fwupd: 1.4.6 → 1.5.1
* https://github.com/fwupd/fwupd/releases/tag/1.5.0
* https://github.com/fwupd/fwupd/releases/tag/1.5.1

* The changelog mentions removed dependency on efivar but we still need the package because it also contains efiboot required dependency. https://github.com/fwupd/fwupd/pull/2485
* Blacklist options were renamed.
* Test firmware was moved to a separate repo. We need to install it or some tests will be skipped. https://github.com/fwupd/fwupd/pull/2330
* Initially, there was an option to configure dbx but in the end, it was removed in favour of bespoke dbxtool. https://github.com/fwupd/fwupd/pull/2061, https://github.com/fwupd/fwupd/pull/2318, https://github.com/fwupd/fwupd/pull/2329
* Fwupd now checks hashes of plug-ins and will complain loudly that it is tainted when “invalid” plug-in is loaded (during testing).
* Installed tests complain about not being able to access cdn, even though we are not setting CI_NETWORK env var. We need a patch to fix that.
2020-11-09 22:50:17 +01:00
Martin Weinelt
7a2455a0fd
batman-adv: 2020.3 -> 2020.4 2020-11-09 22:24:11 +01:00
Markus S. Wamser
9ed8e03a09 mupdf: mark 1.17 as insecure but as still required as dependency 2020-11-09 09:57:38 -08:00
Frederik Rietdijk
20f001c01e Merge master into staging-next 2020-11-09 14:33:52 +01:00
Daniël de Kok
a5736eca8e
Merge pull request #102680 from r-ryantm/auto-update/pcm
pcm: 202008 -> 202009
2020-11-09 13:54:41 +01:00
Alyssa Ross
8f5ac08f55
Merge pull request #102381 from MetaDark/linuxPackages.xpadneo
linuxPackages.xpadneo: 0.8.3 -> 0.8.4
2020-11-09 12:22:22 +00:00
Dmitry Kalinkin
f0efe2d16c
darwin.adv_cmds: fix build
Also disable pgrep that depends on pkill
2020-11-08 20:28:45 -05:00
snicket2100
cd1c5633af firejail: 0.9.62 -> 0.9.64 2020-11-08 23:25:59 +01:00
Michael Raskin
e1e5d73c9a
Merge pull request #103081 from andresilva/linux-zen-5.9.6
linux_zen: 5.9.3 -> 5.9.6
2020-11-08 17:15:42 +00:00
markuskowa
e447841b12
Merge pull request #103132 from markuskowa/upd-rdma-core
rdma-core: 31.0 -> 31.1
2020-11-08 18:06:05 +01:00
Tim Steinbach
b1bd4c09ad
Merge pull request #103028 from TredwellGit/firmwareLinuxNonfree
firmwareLinuxNonfree: 2020-09-18 -> 2020-10-22
2020-11-08 11:03:05 -05:00
Markus Kowalewski
545456ddca
rdma-core: 31.0 -> 31.1 2020-11-08 15:10:08 +01:00
André Silva
0c131ae118
linux_zen: 5.9.3 -> 5.9.6 2020-11-07 13:20:38 +00:00
Phillip Cloud
0a2f47b51b nvidia_x11.persistenced: fix build on master 2020-11-06 11:06:18 -08:00
TredwellGit
7ff16d8155 firmwareLinuxNonfree: 2020-09-18 -> 2020-10-22 2020-11-06 18:28:28 +00:00
Frederik Rietdijk
99fb79ae84 Merge master into staging-next 2020-11-06 12:51:56 +01:00
Jörg Thalheim
5a540a8996
linuxPackages.bcc: 0.16.0 -> 0.17.0 2020-11-06 10:06:34 +01:00
Peter Hoeg
11fc055836 pam_mount: add support for LUKS2 2020-11-06 10:19:36 +08:00
Anders Kaseorg
d57891889d linux/hardened/patches/5.9: 5.9.1.a -> 5.9.6.a 2020-11-05 16:24:43 -08:00
Anders Kaseorg
8bf8b61c2d linux/hardened/patches/5.8: 5.8.16.a -> 5.8.18.a 2020-11-05 16:24:42 -08:00
Anders Kaseorg
f9d1130ae9 linux/hardened/patches/5.4: 5.4.72.a -> 5.4.75.a 2020-11-05 16:24:40 -08:00
Anders Kaseorg
22387315b6 linux/hardened/patches/4.19: 4.19.152.a -> 4.19.155.a 2020-11-05 16:24:39 -08:00
Anders Kaseorg
a435637e66 linux/hardened/patches/4.14: 4.14.202.a -> 4.14.204.a 2020-11-05 16:24:37 -08:00
Tim Steinbach
76d4a93444
linux: 5.9.5 -> 5.9.6 2020-11-05 17:28:15 -05:00
Jonathan Ringer
5d9ea37fd3 zfsUnstable: 2.0.0-rc4 -> 2.0.0-rc5 2020-11-05 08:05:05 -08:00
Tim Steinbach
eeb8ffabbd
linux: 5.9.3 -> 5.9.5 2020-11-05 09:51:05 -05:00
Tim Steinbach
3b7197307b
linux: 5.4.74 -> 5.4.75 2020-11-05 09:51:05 -05:00
Tim Steinbach
5fe041997e
linux: 4.19.154 -> 4.19.155 2020-11-05 09:51:05 -05:00