Commit graph

12758 commits

Author SHA1 Message Date
Scott Worley c5a4f81898 libaio: 0.3.110 -> 0.3.111 & update source url from fedorahosted to pagure
fedorahosted.org was retired on March 1st, 2017

The changes in da47c32b2ff39e52fbed1622c34b86bc88d7c217.patch are
included in this release.
2020-06-14 08:59:43 +02:00
Michael Weiss 82a0240bb0
fuse3: 3.9.1 -> 3.9.2 (#90232) 2020-06-13 12:23:42 +02:00
Frederik Rietdijk 2e4b4e3300 Merge staging-next into staging 2020-06-13 11:03:26 +02:00
Frederik Rietdijk 1523382160 Merge master into staging-next 2020-06-13 11:02:21 +02:00
Michael Weiss 1b6e357424 kmod: 26 -> 27 2020-06-13 10:57:19 +02:00
R. RyanTM b5a814cb5d iptables: 1.8.4 -> 1.8.5 2020-06-13 10:54:58 +02:00
Ryan Mulligan 2a6cc3f3f2
Merge pull request #90106 from r-ryantm/auto-update/piper
piper: 0.4 -> 0.5
2020-06-12 13:41:03 -07:00
Matthew Bauer ed6e598747
Merge pull request #89112 from eadwu/musl/libc-arch
musl: include libc.musl-$arch
2020-06-12 14:29:22 -05:00
Doron Behar 01d4e2fe33 treewide: use ffmpeg_3 explicitly if not wanted otherwise
After making `ffmpeg` point to the latest `ffmpeg_4`, all packages that
used `ffmpeg` without requiring a specific version now use ffmpeg_3
explicitly so they shouldn't change.
2020-06-12 11:55:31 -07:00
Edmund Wu 107f7ba026
musl: include libc.musl-$arch 2020-06-12 14:01:43 -04:00
Graham Christensen 5a17473f0a
Merge pull request #90192 from kraem/kraem/pkgs/facetimehd/remove-nixpkgs-patch
facetimehd: remove patch in nixpkgs, patched upstream
2020-06-12 11:46:35 -04:00
Tim Steinbach 3cf2f4d6a3
linux_latest-libre: 17527 -> 17537 2020-06-12 10:13:26 -04:00
Florian Klink 1901446a96
Merge pull request #89919 from mweinelt/hostapd
hostapd: apply patches for CVE-2020-12695
2020-06-12 14:40:07 +02:00
kraem 3cd13f8b7e
facetimehd: remove patch in nixpkgs, patched upstream 2020-06-12 14:05:06 +02:00
Graham Christensen 77dddf6a9d
Merge pull request #90180 from kraem/kraem/pkgs/facetimehd/2020-04-16
facetimehd: 2019-12-10 -> 2020-04-16
2020-06-12 07:59:56 -04:00
kraem 031ef5f64e
facetimehd: 2019-12-10 -> 2020-04-16 2020-06-12 12:27:21 +02:00
Frederik Rietdijk febc27b59a Merge master into staging-next 2020-06-12 08:57:26 +02:00
Vladimír Čunát b23c1abe93
linux: fix kernel config options for i686
Even the default pkgsi686Linux.linux was broken.
2020-06-12 08:52:09 +02:00
Tim Steinbach 7296aae54f
linux/hardened/patches/5.6: 5.6.16.a -> 5.6.17.a 2020-06-11 17:57:56 -04:00
Tim Steinbach 0d1be0c2df
linux/hardened/patches/5.4: 5.4.44.a -> 5.4.45.a 2020-06-11 17:57:56 -04:00
Tim Steinbach 909cdaf97a
linux/hardened/patches/4.19: 4.19.126.a -> 4.19.127.a 2020-06-11 17:57:56 -04:00
Tim Steinbach fa736e19a6
linux: 5.7.1 -> 5.7.2 2020-06-11 17:57:56 -04:00
Tim Steinbach 854359a5aa
linux: 5.6.17 -> 5.6.18 2020-06-11 17:57:55 -04:00
Tim Steinbach 32e76cbb95
linux: 5.4.45 -> 5.4.46 2020-06-11 17:57:55 -04:00
Tim Steinbach d2f4b27e70
linux: 4.9.226 -> 4.9.227 2020-06-11 17:57:55 -04:00
Tim Steinbach 4cab0f5b16
linux: 4.4.226 -> 4.4.227 2020-06-11 17:57:55 -04:00
Tim Steinbach 1f1f6e72ac
linux: 4.19.127 -> 4.19.128 2020-06-11 17:57:54 -04:00
Tim Steinbach bd20c1b2c0
linux: 4.14.183 -> 4.14.184 2020-06-11 17:57:51 -04:00
Matthew Bauer 656783a3d1
Merge pull request #89540 from Patryk27/fixes/lxd-lxcfs
Fix `lxd`, so that it works with `lxcfs`
2020-06-11 10:49:40 -05:00
Linus Heckemann 9181f79289 linux: enable force feedback support in HID drivers 2020-06-11 12:41:59 +02:00
R. RyanTM cc87aef228 ffado: 2.4.2 -> 2.4.3 2020-06-10 17:45:18 -07:00
R. RyanTM 2265f3828b piper: 0.4 -> 0.5 2020-06-11 00:42:20 +00:00
Martin Weinelt c898b5c057
hostapd: add hexa as maintainer 2020-06-10 21:15:14 +02:00
Vladimír Čunát 34d58cb839
Merge branch 'staging' into staging-next
This commit has already been partially rebuilt in
https://hydra.nixos.org/eval/1592635
In particular, the severe security fix for gnutls is contained.
2020-06-10 16:18:40 +02:00
Ricardo M. Correia 841705284c linux: fix kernel config options for linux_*hardened
Fix config options for linux_hardened and linux_latest_hardened due
to #84302.
This is a continuation of #88946.
2020-06-10 16:16:02 +02:00
Vladimír Čunát bbe71613b6
linux: fix kernel config options for 5.7 2020-06-10 14:07:15 +02:00
Ricardo M. Correia 9dd9bc7bcc linux: fix kernel config options
Some of the options didn't have correct kernel version constraints,
others had been removed or made optional unnecessarily in #84032.
2020-06-10 13:17:17 +02:00
Vladimír Čunát 02751f8843
Revert "systemd: avoid rebuild from the parent commit for now"
This reverts commit b59847b848.
2020-06-10 08:53:44 +02:00
Jan Tojnar acb53e0698
Merge branch 'staging-next' into staging 2020-06-10 04:10:57 +02:00
Jan Tojnar c637cbe992
Merge branch 'master' into staging-next 2020-06-10 04:10:34 +02:00
Martin Weinelt 08815104f5
microcodeIntel: 20200520 -> 20200609 2020-06-09 23:40:29 +02:00
Michael Weiss e0c970c0e2
Merge pull request #89820 from primeos/linux_5_7
linux_5_7: init at 5.7.1
2020-06-09 15:56:50 +02:00
Martin Weinelt 1c14b52e18
hostapd: apply patches for CVE-2020-12695
https://w1.fi/security/2020-1/upnp-subscribe-misbehavior-wps-ap.txt

Fixes: CVE-2020-12695
2020-06-09 14:52:42 +02:00
Benjamin Hipple 722ef6c48b
Merge pull request #89856 from cmacrae/upgrade/yabai/3.1.2
yabai: 3.1.1 -> 3.1.2
2020-06-09 00:59:17 -04:00
Tim Steinbach aa1479c5be
linux: 5.6.16 -> 5.6.17 2020-06-08 20:22:38 -04:00
Tim Steinbach 505e54f340
linux: 5.4.44 -> 5.4.45 2020-06-08 20:22:37 -04:00
Tim Steinbach 4c11426c3f
linux: 4.19.126 -> 4.19.127 2020-06-08 20:22:37 -04:00
cmacrae 154fc03194 yabai: 3.1.1 -> 3.1.2 2020-06-09 00:19:08 +01:00
cmacrae e9198cb7a5 yabai: 3.1.0 -> 3.1.1 2020-06-08 22:42:42 +01:00
Michael Weiss 19b2efbc39
linux_5_7: init at 5.7.1
Changes:
- Copied linux-5.7.nix from linux-5.6.nix
- Add linux_5_7 and linuxPackages_5_7
- Update linux_latest to 5.7

Note:
The kernel patch 'kernelPatches.export_kernel_fpu_functions."5.3"' is
still applied as I copied the list from linux_5_7 (vs. linux_testing).
This patch is probably still required for the ZFS performance.
2020-06-08 17:44:36 +02:00
Frederik Rietdijk 8576d24b2a Merge staging-next into staging 2020-06-08 12:08:51 +02:00
Vladimír Čunát b59847b848
systemd: avoid rebuild from the parent commit for now
Otherwise we'd be delaying this staging-next cycle noticeably.
2020-06-08 06:28:58 +02:00
John Ericson a239864fc6 systemd: Fix cross build
This was very similar to the Mesa issues fixed in
62e6d73a09870174a891d2a8d29a38e62b05efd5: the user-written code is
looking up an unprefixed binutils program.

[I think we should have a way in Meson of specifying a program prefix in
the cross / native files, as a fallback for any program that isn't
explicitly specified. This could both be availible for user written
rules, and help with the default rules.]

Fixes https://github.com/NixOS/mobile-nixos/issues/161
2020-06-08 00:29:51 +00:00
Georg Haas a8ee561b0f
jool: 4.0.5 -> 4.0.9 2020-06-07 19:08:59 +02:00
Frederik Rietdijk d0532e79ae Merge staging-next into staging 2020-06-07 09:25:46 +02:00
Frederik Rietdijk 6b8223e634 Merge master into staging-next 2020-06-07 09:25:12 +02:00
Mario Rodas fe753a241f
Merge pull request #89539 from cmacrae/upgrade/yabai/3.1.0
yabai: 3.0.2 -> 3.1.0
2020-06-05 20:04:19 -05:00
Samuel Dionne-Riel 3570c1303e
Merge pull request #89571 from samueldr/fix/input-utils/cross
input-utils: Fix cross-compilation
2020-06-05 19:53:46 -04:00
Samuel Dionne-Riel 68096cab7f input-utils: Fix cross-compilation
We actually don't need to `strip` using `install`. Stripping is already
part of the fixup. This ends up being a fix we can apply universally,
but works around an issue where `install` doesn't know about the
prefixed `strip` binary.
2020-06-05 18:52:47 -04:00
Matthew Bauer fa29c1002d
Merge pull request #89356 from wizeman/u/fix-fwupd
fwupd: fix configuration on aarch64
2020-06-05 15:36:34 -05:00
Frederik Rietdijk 1c68570ab2 Merge staging-next into staging 2020-06-05 19:42:16 +02:00
Frederik Rietdijk 43f71029cc Merge master into staging-next 2020-06-05 19:40:53 +02:00
Patryk Wychowaniec 4dee97c43e
lxcfs: Wrap lxc.mount.hook, so that it detects the mount command 2020-06-05 16:37:31 +02:00
Tim Steinbach 05b3c7dd66
linux/hardened/patches/5.6: 5.6.15.a -> 5.6.16.a 2020-06-05 09:45:25 -04:00
Tim Steinbach 5537f64700
linux/hardened/patches/5.4: 5.4.43.a -> 5.4.44.a 2020-06-05 09:45:23 -04:00
Tim Steinbach 7ce3d24baa
linux/hardened/patches/4.19: 4.19.125.a -> 4.19.126.a 2020-06-05 09:45:21 -04:00
Tim Steinbach 2c2362cea5
linux/hardened/patches/4.14: 4.14.182.a -> 4.14.183.a 2020-06-05 09:45:19 -04:00
Tim Steinbach 7557c83ea4
linux_latest-libre: 17506 -> 17527 2020-06-05 09:45:08 -04:00
Tim Steinbach 4c5251436b
linux: 5.6.15 -> 5.6.16 2020-06-05 09:37:49 -04:00
Tim Steinbach 6599499cd7
linux: 5.4.43 -> 5.4.44 2020-06-05 09:37:38 -04:00
Tim Steinbach c511f3bab6
linux: 4.9.225 -> 4.9.226 2020-06-05 09:37:26 -04:00
Tim Steinbach 4bf8aa6b71
linux: 4.4.225 -> 4.4.226 2020-06-05 09:37:11 -04:00
Tim Steinbach 0c574f3357
linux: 4.19.125 -> 4.19.126 2020-06-05 09:37:03 -04:00
Tim Steinbach 877920254a
linux: 4.14.182 -> 4.14.183 2020-06-05 09:36:43 -04:00
cmacrae 74e87de0ad yabai: 3.0.2 -> 3.1.0 2020-06-05 14:11:39 +01:00
Jörg Thalheim 073d2fc4d5
cgmanager: remove
fixes #30023
2020-06-05 09:47:12 +01:00
Benjamin Saunders 38f5fce48a linuxPackages.rtl88x2bu: init at 2020-05-19 2020-06-04 12:39:54 -07:00
Anders Kaseorg 0f2e569505 linux: CONFIG_MOUSE_ELAN_I2C_SMBUS=y
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-06-04 18:22:23 +02:00
Michael Weiss ac0716aa61 iproute: 5.6.0 -> 5.7.0
"As usual lots of small fixes, across many utilities. Several qdisc now
have more parameters available. Devlink get most of the fixes." [0]

File changes (additions/removals):
+share/bash-completion/completions/devlink
+share/man/man8/devlink-dpipe.8.gz
+share/man/man8/tc-ct.8.gz

[0]: https://marc.info/?l=linux-netdev&m=159115579900638
2020-06-04 18:13:07 +02:00
Frederik Rietdijk b76c308ecd Merge staging-next into staging 2020-06-04 15:28:16 +02:00
Frederik Rietdijk 08900c0554 Merge master into staging-next 2020-06-04 15:25:54 +02:00
Florian Klink 3b1b4fde0c systemd: systemd.pc: fix systemdsystemunitpath and systemduserunitpath
The paths in the generated `systemd.pc` were flipped, fix this:

`systemdsystemunitpath`: `/nix/var/nix/profiles/default/lib/systemd/{user => system}`
`systemduserunitpath`: `/nix/var/nix/profiles/default/lib/systemd/{system => user}`

The paths actually used in the code (further below in that patch) were
correct, so keep them there.

Fixes #59473.
2020-06-03 22:25:01 +02:00
Daiderd Jordan 7b3a2963d1
treewide: replace base64 encoded hashes 2020-06-03 18:35:19 +02:00
Rovanion Luckey 29fc454d15 pcm: 202003 -> 202005 2020-06-02 12:53:58 -07:00
Neil Mayhew 367b3a99e4 multipath-tools: Fix build failure due to GZIP make var
The multipath-tools makefiles use GZIP as a variable name but this is
also the name of the environment variable gzip uses to get its default
options.

Normally, this wouldn't get into the environment but nixpkgs exports
GZIP=-n in a setup hook. This in turn causes make to export its own
value for this variable. gzip objects to having -c in the environment
variable and aborts, causing the build to fail.
2020-06-02 09:38:29 -06:00
Ricardo M. Correia ec4d914143 fwupd: fix configuration on aarch64
The fwupd service was failing on aarch64 with:

fwupd: Failed to load engine: Failed to load remotes: failed to load /etc/fwupd/remotes.d/dell-esrt.conf: No such file or directory

The /etc/fwupd/remotes.d/dell-esrt.conf symlink existed but it pointed to a non-existent file.
2020-06-02 14:23:20 +02:00
James Ravn 46f2bf63a4
firmwareLinuxNonfree: 2020-01-22 -> 2020-05-19 2020-06-01 14:16:22 +01:00
Maximilian Bosch e90c5fe0ec
linuxPackages.wireguard: 1.0.20200506 -> 1.0.20200520
https://lists.zx2c4.com/pipermail/wireguard/2020-May/005450.html
2020-05-31 21:25:56 +02:00
Mario Rodas 8a73ac0f34
Merge pull request #89229 from shardulbee/update-yabai-3.0.2
yabai: 3.0.1 -> 3.0.2
2020-05-31 09:53:32 -05:00
Shardul Baral 2d95536210
yabai: 3.0.1 -> 3.0.2 2020-05-31 10:29:34 -04:00
Alexey Shmalko 1607e821ff
Merge pull request #89037 from r-ryantm/auto-update/uclibc-ng
uclibc: 1.0.33 -> 1.0.34
2020-05-31 14:31:15 +03:00
Tim Steinbach 746fe02a5a
linux_latest-libre: 17445 -> 17506 2020-05-30 11:23:42 -04:00
Frederik Rietdijk 03de4c02fb Merge staging-next into staging 2020-05-28 22:05:36 +02:00
R. RyanTM d4226e3a4b checksec: 2.1.0 -> 2.2.1 2020-05-28 13:58:27 -05:00
Jethro Kuan 2738ca86bd
rtl88xxau-aircrack: init (#88870) 2020-05-28 12:33:25 -04:00
Tim Steinbach dc9b007637
linux/hardened/patches/5.6: 5.6.14.a -> 5.6.15.a 2020-05-28 09:35:07 -04:00
Tim Steinbach a1ec9f649e
linux/hardened/patches/5.4: 5.4.42.a -> 5.4.43.a 2020-05-28 09:35:07 -04:00
Tim Steinbach 827df89616
linux/hardened/patches/4.19: 4.19.124.a -> 4.19.125.a 2020-05-28 09:35:06 -04:00
Tim Steinbach 964a5b99f7
linux/hardened/patches/4.14: 4.14.181.a -> 4.14.182.a 2020-05-28 09:35:06 -04:00
Tim Steinbach 3b94b3f0ac
linux: 5.6.14 -> 5.6.15 2020-05-28 09:35:06 -04:00
Tim Steinbach 5c4bd56c45
linux: 5.4.42 -> 5.4.43 2020-05-28 09:35:05 -04:00
Tim Steinbach 583e50cc79
linux: 4.9.224 -> 4.9.225 2020-05-28 09:35:05 -04:00
Tim Steinbach c1299ef40c
linux: 4.4.224 -> 4.4.225 2020-05-28 09:35:04 -04:00
Tim Steinbach d5c4986dfa
linux: 4.19.124 -> 4.19.125 2020-05-28 09:35:04 -04:00
Tim Steinbach 90d6c2b642
linux: 4.14.181 -> 4.14.182 2020-05-28 09:35:01 -04:00
Jan Tojnar 19952035d4
Merge pull request #88506 from r-ryantm/auto-update/fwupd 2020-05-27 21:43:35 +02:00
R. RyanTM 84c39bd824 fwts: 20.03.00 -> 20.05.00 2020-05-27 12:38:01 -07:00
R. RyanTM 6e7807b0a0 libratbag: 0.13 -> 0.14 2020-05-27 12:11:50 -07:00
Michael Weiss 4454219156
nvme-cli: 1.11.1 -> 1.11.2 2020-05-27 20:34:12 +02:00
R. RyanTM 9d9519b074 uclibc: 1.0.33 -> 1.0.34 2020-05-27 17:40:50 +00:00
Frederik Rietdijk 362d88c2b1 Merge staging-next into staging 2020-05-27 15:27:28 +02:00
Jan Tojnar 5518a646cd
Merge pull request #87526 from r-ryantm/auto-update/v4l-utils 2020-05-25 13:31:03 +02:00
Michele Guerini Rocco 489fa65007
Merge pull request #88863 from r-ryantm/auto-update/btfs
btfs: 2.20 -> 2.21
2020-05-25 21:20:22 +02:00
oxalica fe3e52c291
earlyoom: patch absolute dbus path and make nixos module up to date (#88443)
* earlyoom: patch absolute path of dbus-send

* nixos/earlyoom: replace `notificationsCommand` with `enableNotification`

* nixos/earlyoom: setup `systembus-notify` when `enableNotification`
2020-05-25 10:13:55 -05:00
R. RyanTM a7232067e7 btfs: 2.20 -> 2.21 2020-05-25 09:13:22 +00:00
markuskowa 8d9cbd0afa
Merge pull request #88182 from r-ryantm/auto-update/libfabric
libfabric: 1.10.0 -> 1.10.1
2020-05-24 13:36:47 +02:00
Philipp Bartsch 20ebb1330a usbguard: 0.7.7 -> 0.7.8 2020-05-24 10:36:07 +02:00
Philipp Bartsch 2198d015e5 usbguard: 0.7.6 -> 0.7.7 2020-05-24 10:36:07 +02:00
Frederik Rietdijk d578248611 Merge staging-next into staging 2020-05-24 10:10:06 +02:00
Tim Steinbach cb2686adc3
linux-hardened: Remove 5.5 2020-05-23 10:36:10 -04:00
Andreas Rammhold db90666f95
Merge pull request #88477 from mweinelt/intelMicrocode
microcodeIntel: 20200508 → 20200520
2020-05-23 13:48:25 +02:00
Mario Rodas 65f396b86e
Merge pull request #88655 from r-ryantm/auto-update/powerstat
powerstat: 0.02.22 -> 0.02.23
2020-05-23 06:44:35 -05:00
Frederik Rietdijk 8a77c900dd Merge staging-next into staging 2020-05-23 10:25:19 +02:00
R. RyanTM 80887720ca powerstat: 0.02.22 -> 0.02.23 2020-05-23 05:10:35 +00:00
Tim Steinbach 062cd3e87c
linux: Remove 5.5
The 5.5.x series is now EOL
2020-05-22 19:02:51 -04:00
Tim Steinbach 8b66da57ed
linux/hardened/patches/5.6: 5.6.13.a -> 5.6.14.a 2020-05-22 10:51:24 -04:00
Tim Steinbach f759c5af51
linux/hardened/patches/5.4: 5.4.41.a -> 5.4.42.a 2020-05-22 10:51:22 -04:00
Tim Steinbach b7de919a94
linux/hardened/patches/4.19: 4.19.123.a -> 4.19.124.a 2020-05-22 10:51:20 -04:00
Tim Steinbach 0c9c846768
linux/hardened/patches/4.14: 4.14.180.a -> 4.14.181.a 2020-05-22 10:51:14 -04:00
Florian Klink cfb4d0dfe3
Merge pull request #84032 from teto/fix_kernel_merge
Fix kernel configuration merge
2020-05-22 13:32:22 +02:00
Orivej Desh 16d7f7edae Merge branch 'master' into staging 2020-05-22 09:13:23 +00:00
Florian Klink 927b7795cb
Merge pull request #88492 from flokli/current-system-systemctl
tree-wide: use systemctl of running system
2020-05-21 20:22:26 +02:00
adisbladis 1b3825ebcb
zfs: 0.8.3 -> 0.8.4 2020-05-21 16:32:19 +01:00
R. RyanTM 9dcffdecb6 fwupd: 1.4.1 -> 1.4.2 2020-05-21 11:13:59 +00:00
Florian Klink 5cca485396 displaylink: run systemctl of the currently running systemd 2020-05-21 10:35:07 +02:00
Martin Weinelt f49defc85f
microcodeIntel: 20200508 → 20200520 2020-05-21 04:59:10 +02:00
Michael Weiss 0a5a900ff1
fscrypt-experimental: 0.2.7 -> 0.2.8 2020-05-20 18:17:12 +02:00
Tim Steinbach c768dcfcfc
linux: 5.6.13 -> 5.6.14 2020-05-20 08:27:14 -04:00
Tim Steinbach 2364627a39
linux: 5.4.41 -> 5.4.42 2020-05-20 08:27:07 -04:00
Tim Steinbach d2f98da120
linux: 4.9.223 -> 4.9.224 2020-05-20 08:27:00 -04:00
Tim Steinbach ed3766309f
linux: 4.4.223 -> 4.4.224 2020-05-20 08:26:51 -04:00
Tim Steinbach 439a9043a1
linux: 4.19.123 -> 4.19.124 2020-05-20 08:26:43 -04:00
Tim Steinbach b3e7b6d556
linux: 4.14.180 -> 4.14.181 2020-05-20 08:26:30 -04:00
Tim Steinbach 8b5a3127b3
linux: 5.7-rc4 -> 5.7-rc6 2020-05-19 10:11:10 -04:00
R. RyanTM d6cf255e65 libfabric: 1.10.0 -> 1.10.1 2020-05-19 10:17:10 +00:00
Peter Hoeg 6d14bfa4ac
Merge pull request #88044 from peterhoeg/u/ena_2_2_7
kernelPackages.ena: 2.1.2 -> 2.2.7
2020-05-19 12:28:27 +08:00
Jan Tojnar 0f5ce2fac0
Merge pull request #88099 from zowoq/fwupdate 2020-05-19 01:31:20 +02:00
zowoq a5cbd4fa35 fwupdate: remove
https://github.com/rhboot/fwupdate

This project is no longer supported.

All code has been merged directly into the fwupd project.

Please switch to that.
2020-05-19 08:57:27 +10:00
Jan Tojnar f8a9c6efac
Merge branch 'staging-next' into staging 2020-05-18 21:09:48 +02:00
Peter Hoeg ac3e909685 kernelPackages.ena: 2.1.2 -> 2.2.7 2020-05-18 10:29:57 +08:00
Puck Meerburg 2b5d59cbdc linux: Enable fbcon deferred takeover when possible
This config value ensures that when booting through e.g. UEFI, the
existing framebuffer contents stay put until the first character is
printed. As the default NixOS stage-1 immediately outputs a welcome
message on init, this does not impact it, but it will allow for a cleaner boot when
configured as such.
2020-05-17 17:43:34 +00:00
Jan Tojnar 219382bf28
wpa_supplicant_gui: fix build with Inkscape 1.0 2020-05-17 08:40:30 +02:00
Tim Steinbach 2c74af6d97
linux/hardened/patches/5.6: 5.6.12.a -> 5.6.13.a 2020-05-15 20:23:17 -04:00
Tim Steinbach 6fd700adf1
linux/hardened/patches/5.4: 5.4.40.a -> 5.4.41.a 2020-05-15 20:23:15 -04:00
Tim Steinbach d18d18a45d
linux/hardened/patches/4.19: 4.19.122.a -> 4.19.123.a 2020-05-15 20:23:09 -04:00
John Ericson ee8cfe4bf3 treewide: pkg-config has targetPrefix 2020-05-16 00:21:21 +00:00
Lila 7517299146
treewide: fix broken AlpineLinux repo links (#87892) 2020-05-15 16:58:27 +01:00
Tim Steinbach 7ef8639163
linux: 5.6.12 -> 5.6.13 2020-05-14 09:19:09 -04:00
Tim Steinbach e3ba43b826
linux: 5.4.40 -> 5.4.41 2020-05-14 09:19:02 -04:00
Tim Steinbach e9dbf2e508
linux: 4.19.122 -> 4.19.123 2020-05-14 09:18:52 -04:00
Mario Rodas 9917caa5e8
Merge pull request #87542 from cmacrae/upgrade/yabai/3.0.1
yabai: 3.0.0 -> 3.0.1
2020-05-14 08:14:56 -05:00
Frederik Rietdijk 404fe35d65 Merge staging-next into staging 2020-05-14 09:37:03 +02:00
Colin L Rice d6162dab50
go-modules: Update files to use vendorSha256 2020-05-14 07:22:21 +01:00
R. RyanTM ee2922a4b4 sysstat: 12.3.1 -> 12.3.2 2020-05-13 15:39:50 -07:00
Matthew Bauer 233e60ca24
Merge pull request #87691 from matthewbauer/linux-rpi3-arm32
linux-rpi: use bcm2709 on arm32 rpi3
2020-05-13 10:35:21 -05:00
John Ericson a0c003e5d8
Merge pull request #86166 from Ericson2314/suffix-salt
*-wrapper; Switch from `infixSalt` to `suffixSalt`
2020-05-12 18:37:16 -04:00
Gaelan Steele b6beb43dd7 kexectools: always pass host and target to configure
Fixes #56290.
2020-05-12 12:16:08 -07:00
Matthew Bauer c78ad0f7f8 linux-rpi: use bcm2709 on arm32 rpi3
“bcmrpi3_defconfig” isn’t provided for arm32, so we need to use
bcm2709_config. When on arm64, we can still use bcmrpi3_defconfig
2020-05-12 13:07:00 -05:00
Tim Steinbach 0c9b897241
linux-hardened: Fix kernel version detection 2020-05-12 08:37:08 -04:00
Tim Steinbach 511b503b0d
linux/hardened/patches/5.6: 5.6.11.a -> 5.6.12.a 2020-05-12 08:35:52 -04:00
Tim Steinbach 2646e949b0
linux/hardened/patches/5.4: 5.4.39.a -> 5.4.40.a 2020-05-12 08:35:50 -04:00
Tim Steinbach fc545e4d23
linux/hardened/patches/4.19: 4.19.121.a -> 4.19.122.a 2020-05-12 08:35:48 -04:00
Tim Steinbach 677ddfef7c
linux/hardened/patches/4.14: 4.14.179.a -> 4.14.180.a 2020-05-12 08:35:46 -04:00
Florian Klink d6f90e4f9e
Merge pull request #73530 from eadwu/nvidia/systemd-pm
nixos/nvidia: include systemd power management
2020-05-12 13:54:45 +02:00
John Ericson 1ac5398589 *-wrapper; Switch from infixSalt to suffixSalt
I hate the thing too even though I made it, and rather just get rid of
it. But we can't do that yet. In the meantime, this brings us more
inline with autoconf and will make it slightly easier for me to write a
pkg-config wrapper, which we need.
2020-05-12 00:44:44 -04:00
Alexey Shmalko 54ded21f74
Merge pull request #87541 from r-ryantm/auto-update/uclibc-ng
uclibc: 1.0.32 -> 1.0.33
2020-05-11 15:56:48 +03:00
Tim Steinbach 0010ae4960
linux: 5.6.11 -> 5.6.12 2020-05-11 08:43:23 -04:00
Tim Steinbach 98c79eb588
linux: 5.4.39 -> 5.4.40 2020-05-11 08:43:15 -04:00
Tim Steinbach 39426327ce
linux: 4.9.222 -> 4.9.223 2020-05-11 08:43:06 -04:00
Tim Steinbach ddd1363bff
linux: 4.4.222 -> 4.4.223 2020-05-11 08:42:56 -04:00
Tim Steinbach 36a1ca4daa
linux: 4.19.121 -> 4.19.122 2020-05-11 08:42:49 -04:00
Tim Steinbach 6d183ed8d8
linux: 4.14.179 -> 4.14.180 2020-05-11 08:42:38 -04:00
Jörg Thalheim 885f65fbff
Merge pull request #86074 from emilazy/refactor-linux-hardened-update-script 2020-05-11 10:40:42 +01:00
Emily 4688ec0eb2 linux: explicitly enable AIO
This is disabled by default in the linux-hardened patchset, but is
required by e.g. LVM.

Fixes #87260.
2020-05-10 23:23:38 +01:00
cmacrae 89be001b27 yabai: 3.0.0 -> 3.0.1 2020-05-10 21:54:13 +01:00
R. RyanTM 596c8150e9 uclibc: 1.0.32 -> 1.0.33 2020-05-10 20:37:42 +00:00
R. RyanTM ec7e931c90 libv4l: 1.18.0 -> 1.18.1 2020-05-10 18:47:02 +00:00
Edmund Wu 9a269f555a
nixos/nvidia: include systemd power management 2020-05-10 11:25:50 -04:00
Maximilian Bosch f887d09c89
linuxPackages.wireguard: 1.0.20200429 -> 1.0.20200506
https://lists.zx2c4.com/pipermail/wireguard/2020-May/005408.html
2020-05-10 01:35:30 +02:00
Jörg Thalheim 887295fd2d
treewide: remove the-kenny from maintainers
@the-kenny did a good job in the past and is set as maintainer in many package,
however since 2017-2018 he stopped contributing. To create less confusion
in pull requests when people try to request his feedback, I removed him as
maintainer from all packages.
2020-05-09 10:28:57 +01:00
R. RyanTM 646fc239d3 libbpf: 0.0.7 -> 0.0.8 2020-05-09 08:57:25 +02:00
R. RyanTM 5e5b684435 mcelog: 168 -> 169 2020-05-09 08:54:35 +02:00
Martin Weinelt d2ad98b1c9
microcodeIntel: 20191115 → 20200508 2020-05-09 00:06:44 +02:00
Emily 5a5a2d0342 linux/hardened/update.py: pass encoding to subprocess 2020-05-08 15:49:36 +01:00
Emily b2ad58536c linux/hardened/update.py: commit updates in order 2020-05-08 15:49:36 +01:00
Emily 88486c4e76 linux/hardened/update.py: get versions with nix(1) 2020-05-08 15:49:36 +01:00
Emily e77d174fcd linux/hardened/update.py: add type annotations 2020-05-08 15:49:35 +01:00
Emily d6fe0a4e2d linux/hardened: move files into directory 2020-05-08 15:49:35 +01:00
Emily abe4bef033 linux/update-hardened.py: use pathlib 2020-05-08 15:49:35 +01:00
Emily 83c4ac2eb3 linux/update-hardened.py: reformat
$ isort --multi-line=3 --trailing-comma --force-grid-wrap=0 --use-parentheses …
$ black --line-length=80 …

(per the black documentation)
2020-05-08 15:49:35 +01:00
Pavol Rusnak 6abf4a43ad
treewide: per RFC45, remove more unquoted URLs 2020-05-08 15:20:47 +02:00
Tim Steinbach 711667dc3e
linux/hardened-patches/4.14: 4.14.178.a -> 4.14.179.a 2020-05-07 20:56:39 -04:00
Tim Steinbach 3d44729f1e
linux/hardened-patches/4.19: 4.19.120.a -> 4.19.121.a 2020-05-07 20:56:38 -04:00
Tim Steinbach ced789fa62
linux/hardened-patches/5.4: 5.4.38.a -> 5.4.39.a 2020-05-07 20:56:38 -04:00
Tim Steinbach 603741e751
linux/hardened-patches/5.6: 5.6.10.a -> 5.6.11.a 2020-05-07 20:56:38 -04:00
Vladimír Čunát fcc68a43aa
Merge branch 'staging-next'
The nss update is needed for security update of firefox.
For linux platforms only about 1k aarch64 rebuilds are missing;
the diff on Hydra looks OK.  Darwin needs 20k more rebuilds,
but I don't think we want to wait for that.
2020-05-07 19:56:25 +02:00
R. RyanTM 044b8c51c9 pax-utils: 1.2.5 -> 1.2.6 2020-05-06 23:15:13 -07:00
Ryan Mulligan 3e73635e51
Merge pull request #86556 from cmacrae/pkgs/os-specific/darwin/spacebar
spacebar: init at v0.5.0
2020-05-06 15:19:38 -07:00
Andreas Rammhold 38d043b116
Merge pull request #87139 from mweinelt/pr/security-patch-names
treewide: add CVE identifiers to patches
2020-05-06 23:51:53 +02:00
Martin Weinelt e24f5eab66
treewide: add CVE identifiers to patches
This allows tools like broken.sh to correctly identify the patched
status.
2020-05-06 23:18:09 +02:00
Tim Steinbach f82e836e1d
linux: 5.6.10 -> 5.6.11 2020-05-06 15:58:09 -04:00
Tim Steinbach bcbc507143
linux: 5.4.38 -> 5.4.39 2020-05-06 15:57:20 -04:00
Tim Steinbach ac287ce319
linux: 4.19.120 -> 4.19.121 2020-05-06 15:56:35 -04:00
Jörg Thalheim d49615dc55
Merge pull request #86918 from Mic92/sysdig 2020-05-06 15:52:29 +01:00
Vladimír Čunát e8d3c1579b
Merge branch 'staging' into staging-next 2020-05-06 08:22:27 +02:00
Vladimír Čunát 54eb2d1018
Merge branch 'staging-next'
Status on Hydra for linuxes seems good enough:
https://hydra.nixos.org/eval/1585703?filter=linux&compare=1585482&full=#tabs-now-fail
2020-05-06 08:20:05 +02:00
Jörg Thalheim ee8cde8d1c
Merge pull request #86391 from kwohlfahrt/gpio-utils 2020-05-06 06:57:14 +01:00
Jörg Thalheim b4df84d203
Merge pull request #86989 from r-ryantm/auto-update/lxcfs 2020-05-06 06:29:59 +01:00
Anthony Cowley bdbffbe91b hwdata: 0.316 -> 0.335 2020-05-06 00:45:01 -04:00
R. RyanTM 5ed0514b4f conntrack-tools: 1.4.5 -> 1.4.6 2020-05-05 18:50:47 -07:00
Mario Rodas e08c758913
Merge pull request #86833 from r-ryantm/auto-update/criu
criu: 3.13 -> 3.14
2020-05-05 20:17:53 -05:00
Jan Tojnar ea38cf9d96
Merge pull request #87017 from jtojnar/fwupd-1.4.1 2020-05-06 01:20:16 +02:00
Jan Tojnar 88d15ee4ef
fwupd: 1.4.0 → 1.4.1
ad113b931f
2020-05-06 00:30:11 +02:00
R. RyanTM 03425b0033 lxcfs: 4.0.1 -> 4.0.3 2020-05-05 20:32:26 +00:00
Tim Steinbach 32585ddcec
linux: 4.9.221 -> 4.9.222 2020-05-05 14:35:55 -04:00
Tim Steinbach 7f75ff0777
linux: 4.4.221 -> 4.4.222 2020-05-05 14:35:46 -04:00
Tim Steinbach 018f49380e
linux: 4.14.178 -> 4.14.179 2020-05-05 14:35:33 -04:00
Frederik Rietdijk 9875bbae75 Merge master into staging-next 2020-05-05 19:51:09 +02:00
Jörg Thalheim 330693c502
linuxPackages.sysdig: 0.26.6 -> 0.26.7 2020-05-05 11:21:35 +01:00
124 82dfd10035
syslinux: fix #86846: build on i686
vcunat tried tests.boot.biosCdrom.i686-linux - after small local
modification to make that attribute even exist.  Installed file list
also looks fine in comparison with state before the breaking change;
hopefully it will work just fine.
2020-05-05 10:25:44 +02:00
R. RyanTM 6967ad7185 criu: 3.13 -> 3.14 2020-05-04 20:06:29 +00:00
Jörg Thalheim c5bcac2999
Merge pull request #86779 from r-ryantm/auto-update/bcc
linuxPackages_hardened.bcc: 0.13.0 -> 0.14.0
2020-05-04 17:01:22 +01:00
Kai Wohlfahrt 89d3a605e3 gpio-tools: init in kernel 5.4
Linux provides some tools to interact with the gpiochip interface (which
replaces the deprecated sysfs GPIO interface). Expose these as a
package.

The tool has not changed much recently, so there is no need to package a
version for each kernel.
2020-05-04 15:02:55 +01:00
R. RyanTM bd1846f7f4 linuxPackages_hardened.bcc: 0.13.0 -> 0.14.0 2020-05-04 13:33:51 +00:00
Tim Steinbach b6456e528e
linux: 5.7-rc3 -> 5.7-rc4 2020-05-04 08:41:50 -04:00
Maximilian Bosch 8536aeb415
Merge pull request #86605 from BKPepe/wireguard
wireguard-compat: 1.0.20200426 -> 1.0.20200429
2020-05-03 19:38:23 +02:00
Tim Steinbach d51998798f
linux/hardened-patches/4.14: 4.14.177.a -> 4.14.178.a 2020-05-03 13:17:07 -04:00
Tim Steinbach 4df77514e7
linux/hardened-patches/4.19: 4.19.119.a -> 4.19.120.a 2020-05-03 13:17:03 -04:00
Tim Steinbach c5d56b1790
linux/hardened-patches/5.4: 5.4.36.a -> 5.4.38.a 2020-05-03 13:16:59 -04:00
Tim Steinbach e7b54c19de
linux/hardened-patches/5.6: 5.6.8.a -> 5.6.10.a 2020-05-03 13:16:49 -04:00
Josef Schlehofer e008d5fc98
wireguard-compat: 1.0.20200426 -> 1.0.20200429 2020-05-03 18:39:08 +02:00
Linus Heckemann 88e07d3a96
Merge pull request #86598 from Valodim/aarch64-hidraw
linux: CONFIG_HIDRAW=y
2020-05-03 11:04:56 +02:00
Peter Hoeg 4310c1a4a0
Merge pull request #85094 from helsinki-systems/syslinux_efi
syslinux: add uefi support
2020-05-03 12:33:54 +08:00
ajs124 a09878c205 syslinux: fix UEFI support 2020-05-03 02:18:46 +02:00
Vincent Breitmoser bdd2d3ccb2 linux: CONFIG_HIDRAW=y 2020-05-02 17:43:43 +02:00
Daiderd Jordan 64279cff00
Merge pull request #86557 from cmacrae/upgrade/yabai/3.0.0
yabai: 2.4.3 -> 3.0.0
2020-05-02 11:34:56 +02:00
Tim Steinbach c46b55e640
linux: 5.6.8 -> 5.6.10 2020-05-02 14:46:24 -04:00
Tim Steinbach ba19c248b7
linux: 5.4.36 -> 5.4.38 2020-05-02 14:46:24 -04:00
Tim Steinbach 13e51bb636
linux: 4.9.220 -> 4.9.221 2020-05-02 14:46:23 -04:00
Tim Steinbach 7e200a0177
linux: 4.4.220 -> 4.4.221 2020-05-02 14:46:23 -04:00
Tim Steinbach 92c2abe85f
linux: 4.19.119 -> 4.19.120 2020-05-02 14:46:23 -04:00
Tim Steinbach 163e5a8d0c
linux: 4.14.177 -> 4.14.178 2020-05-02 14:46:22 -04:00
cmacrae c57532cf4e spacebar: init at v0.5.0 2020-05-02 10:18:34 +01:00
cmacrae fe9938ebd4 yabai: 2.4.3 -> 3.0.0 2020-05-02 10:17:32 +01:00
cmacrae 1e16e652d8 skhd: 0.3.0 -> 0.3.5 2020-05-02 09:58:41 +01:00
R. RyanTM 9f2ecb211d setools: 4.2.2 -> 4.3.0 2020-05-02 10:13:48 +02:00
Frederik Rietdijk 22ea1b9be2 Merge staging-next into staging 2020-05-02 10:13:08 +02:00
Frederik Rietdijk afb1041148 Merge master into staging-next 2020-05-02 09:39:00 +02:00
Daiderd Jordan a57cbb1c36
Merge pull request #86411 from cmacrae/pkgs/os-specific/darwin/yabai
yabai: init at 2.4.3
2020-05-01 19:40:59 +02:00
Tim Steinbach 61b97c17d6
linux: 5.7-rc2 -> 5.7-rc3 2020-05-01 11:43:43 -04:00
cmacrae 8e8459921a yabai: init at 2.4.3 2020-05-01 11:57:28 +01:00
Florian Klink b0aa80e427
Merge pull request #86363 from flokli/systemd-245.5
systemd: 245.3 -> 245.5
2020-05-01 12:32:40 +02:00
Frederik Rietdijk 00bbfccecf Merge staging into staging-next 2020-05-01 09:28:45 +02:00
Daniel Fullmer 45c0523b77 rtl8812au: 5.2.20.2_28373.20190903 -> 5.6.4.2_35491.20200318 2020-05-01 09:25:36 +02:00
Frederik Rietdijk 484ee79050 Merge staging-next into staging 2020-05-01 08:57:10 +02:00
Frederik Rietdijk 2da19f9483
Merge pull request #85653 from veprbl/pr/darwin_binutils_add_man
darwin.binutils: propagate man pages from darwin.cctools
2020-05-01 08:49:56 +02:00
Tim Steinbach 5fa90ed9e2
linux/hardened-patches/4.19: 4.19.118.a -> 4.19.119.a 2020-04-30 10:05:58 -04:00
Tim Steinbach 22c0c49d61
linux/hardened-patches/5.4: 5.4.35.a -> 5.4.36.a 2020-04-30 10:05:56 -04:00
Tim Steinbach 53ea32be28
linux/hardened-patches/5.6: 5.6.7.a -> 5.6.8.a 2020-04-30 10:05:50 -04:00
Florian Klink eb73b71df4 systemd: 245.3 -> 245.5
Also, update 0005-Add-some-NixOS-specific-unit-directories.patch to
explain how and where these paths are being used.
2020-04-30 02:08:42 +02:00
Florian Klink a3082bc6b7 systemd: regenerate patches
It seems nix is much more permissive in applying patches than git am.

These patches were regenerated by running
`git am path/to/nixpkgs/pkgs/os-specific/linux/systemd/*.patch`,
and manually running `patch -p1 < path/to/nixpkgs/pkgs/os-specific/linux/systemd/*N.patch`
where necessary.
2020-04-30 01:47:35 +02:00
Tim Steinbach bbf8ce13eb
linux: 5.6.7 -> 5.6.8 2020-04-29 15:38:11 -04:00
Tim Steinbach 100e81982d
linux: 5.4.35 -> 5.4.36 2020-04-29 15:38:11 -04:00
Tim Steinbach ca44d3eb1e
linux: 4.19.118 -> 4.19.119 2020-04-29 15:38:11 -04:00
Florian Klink f046de4210
Merge pull request #86168 from lblasc/sof-firmware
Sound Open Firmware support, sof-firmware: init at 1.4.2, update kernel config
2020-04-29 12:36:53 +02:00
Matthieu Coudron 8ce65087c3 broadcom_sta: fix build on 5.6 2020-04-29 11:57:03 +02:00
Florian Klink fbc63c4a7b
Merge pull request #86208 from arianvp/fix-linux-systemd-dep
linux: do not depend on systemd indirectly
2020-04-29 11:56:51 +02:00
Luka Blaskovic 6fc9fd53db linux config: enable Sound Open Firmware support 2020-04-29 07:31:49 +00:00
Jan Tojnar 2b5e2ffe0a
Merge pull request #86165 from jtojnar/libusb-compat-rename 2020-04-29 08:26:08 +02:00
jakobrs d21cc14114 v4l2loopback: 0.12.4 -> 0.12.5 2020-04-29 07:19:01 +02:00
worldofpeace d85aabfb5f
Merge pull request #84449 from doronbehar/improve-guvcview
guvcview: fix gsettings filechooser errors
2020-04-28 13:32:13 -04:00
Bruno Bzeznik 75a3a9af8d libfabric: init at 1.10.0 2020-04-28 17:09:15 +02:00
Arian van Putten d103dc4998 linux: do not depend on systemd indirectly
utillinux depends on systemd because:

* uuidd supports socket activation
* lslogins can show recent journal entries
* fstrim comes with a service file (and we use this in NixOS)
* logger can write journal entries
(See https://www.openembedded.org/pipermail/openembedded-core/2015-February/102069.html)

systemd doesn't depend on utillinux but on utillinuxMinimal which is a
version of utillinux without these features to avoid cyclic
dependencies.

With this change, the linux kernel (of which i don't fully understand
why it would depend on util-linux in the first place, but this was added in
https://github.com/NixOS/nixpkgs/pull/32137/files without too much
explanation) depends on the minimal version of util-linux too.

This makes it that every time we change build flags in systemd
the linux kernel doesn't have to wastefully rebuild.
2020-04-28 15:34:44 +02:00
Bruno Bzeznik 5a16436ffb
libpsm2: init at 11.2.156 (#85920)
* libpsm2: init at 11.2.156
2020-04-28 11:38:21 +02:00
Luka Blaskovic fe7f770666 sof-firmware: init at 1.4.2 2020-04-28 05:25:38 +00:00
Jan Tojnar e89e2edc73
libusb-compat-0_1: rename from libusb 2020-04-28 05:33:41 +02:00
David Terry e9c44e8956
wireguard-compat: 1.0.20200413 -> 1.0.20200426
https://lists.zx2c4.com/pipermail/wireguard/2020-April/005237.html
2020-04-27 08:15:39 +02:00
Tim Steinbach a9fa6028ad
linux/hardened-patches/4.19: 4.19.117.a -> 4.19.118.a 2020-04-26 12:23:07 -04:00
Tim Steinbach 4af476e2b3
linux/hardened-patches/5.4: 5.4.34.a -> 5.4.35.a 2020-04-26 12:23:05 -04:00
Tim Steinbach 334627d92f
linux/hardened-patches/5.6: 5.6.6.a -> 5.6.7.a 2020-04-26 12:23:03 -04:00
Tim Steinbach be48bf2ba8
linux/hardened-patches/4.14: 4.14.176.a -> 4.14.177.a 2020-04-26 12:23:01 -04:00
Tim Steinbach 4883dde6b7
linux: 4.9.219 -> 4.9.220 2020-04-26 12:22:41 -04:00
Tim Steinbach 6efb2ba2bf
linux: 4.4.219 -> 4.4.220 2020-04-26 12:22:05 -04:00
Tim Steinbach 6617a79ba3
linux: 4.14.176 -> 4.14.177 2020-04-26 12:21:32 -04:00
Jörg Thalheim ef959a1d9b
Merge pull request #85984 from Mic92/wireguard 2020-04-26 11:28:55 +01:00
Doron Behar 59588b68cd guvcview: use libsForQt5.callPackage 2020-04-25 21:14:40 +03:00
Martin Weinelt 3e9f3a3ebd
hostapd: apply patch for CVE-2019-16275
AP mode PMF disconnection protection bypass

Published: September 11, 2019
Identifiers:
- CVE-2019-16275
Latest version available from: https://w1.fi/security/2019-7/

Vulnerability

hostapd (and wpa_supplicant when controlling AP mode) did not perform
sufficient source address validation for some received Management frames
and this could result in ending up sending a frame that caused
associated stations to incorrectly believe they were disconnected from
the network even if management frame protection (also known as PMF) was
negotiated for the association. This could be considered to be a denial
of service vulnerability since PMF is supposed to protect from this type
of issues. It should be noted that if PMF is not enabled, there would be
no protocol level protection against this type of denial service
attacks.

An attacker in radio range of the access point could inject a specially
constructed unauthenticated IEEE 802.11 frame to the access point to
cause associated stations to be disconnected and require a reconnection
to the network.

Vulnerable versions/configurations

All hostapd and wpa_supplicants versions with PMF support
(CONFIG_IEEE80211W=y) and a runtime configuration enabled AP mode with
PMF being enabled (optional or required). In addition, this would be
applicable only when using user space based MLME/SME in AP mode, i.e.,
when hostapd (or wpa_supplicant when controlling AP mode) would process
authentication and association management frames. This condition would
be applicable mainly with drivers that use mac80211.

Possible mitigation steps

- Merge the following commit to wpa_supplicant/hostapd and rebuild:

  AP: Silently ignore management frame from unexpected source address

  This patch is available from https://w1.fi/security/2019-7/

- Update to wpa_supplicant/hostapd v2.10 or newer, once available
2020-04-25 14:35:20 +02:00
Jörg Thalheim 21ec1f5ead
wireguard: 1.0.20200401 -> 1.0.20200413 2020-04-25 11:16:10 +01:00
Maximilian Bosch 61c95a2eec
iwd: 1.6 -> 1.7 2020-04-25 12:13:01 +02:00
Maximilian Bosch 74fcd4f2d6
ell: 0.30 -> 0.31 2020-04-25 12:12:54 +02:00
Doron Behar 6aaab573e2 guvcview: enable to build with both qt5 and gtk3 2020-04-25 12:52:15 +03:00
Doron Behar ac0f42dee8 guvcview: format arguments 2020-04-25 12:52:15 +03:00
Doron Behar 6bac53e691 guvcview: move some packages to nativeBuildInputs 2020-04-25 12:52:14 +03:00
Doron Behar d89ed04ea4 guvcview: fix gsettings filechooser errors 2020-04-25 12:52:14 +03:00
0x4A6F b8d6e5c63f
gobi_loader: fix maintainers 2020-04-24 22:56:56 +02:00
Austin Seipp d403911451
linux_testing: 5.6-rc7 -> 5.7-rc2
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2020-04-24 10:58:31 -05:00
Michael Weiss 34276b84c5
nvme-cli: 1.10.1 -> 1.11.1 2020-04-24 17:56:08 +02:00
Jörg Thalheim 16e4b9ca69
Merge pull request #85880 from emilazy/linux-hardened-update-resilience 2020-04-24 12:24:23 +01:00
Savanni D'Gerinel 4db7911b5b Set version to 0.0.1
ZenStates-Linux doesn't actually have a version, so I'm setting the
version to 0.0.1 in case the developer eventually does start doing
releases.
2020-04-23 22:17:30 -04:00
Savanni D'Gerinel bfe072dc4b Add a Zenstates derivation 2020-04-23 22:08:34 -04:00
Emily 2c1db9649e linux_*_hardened: index patches by major kernel version
This will avoid breaking the build whenever a non-major kernel update
happens. In the update script, we map each kernel version to the latest
patch for the latest kernel version less than or equal to what we
have packaged.
2020-04-23 18:50:26 +01:00
Jörg Thalheim 6dfd563633
linux_latest-hardened: fix evaluation 2020-04-23 16:45:06 +01:00
Jörg Thalheim 1bceaa1cee
linux_hardened: fix evaluation 2020-04-23 15:52:14 +01:00
Tim Steinbach 45c22565f6
linux: 5.6.6 -> 5.6.7 2020-04-23 08:17:15 -04:00
Tim Steinbach 2f10053834
linux: 5.4.34 -> 5.4.35 2020-04-23 08:17:06 -04:00
Tim Steinbach 62a608fd63
linux: 4.19.117 -> 4.19.118 2020-04-23 08:16:58 -04:00
Frederik Rietdijk cff0669a48 Merge master into staging-next 2020-04-23 08:11:16 +02:00
Tim Steinbach 629068fe5b
linux_latest-libre: 17402 -> 17445 2020-04-22 19:40:01 -04:00
kraem fca903c7dd
linux/hardened-patches/4.19.117: init at 4.19.117.a 2020-04-22 02:12:28 +02:00
kraem 99f30a5635
linux/hardened-patches/5.4.34: init at 5.4.34.a 2020-04-22 02:12:25 +02:00
kraem 3c81b3df4e
linux/hardened-patches/5.5.19: init at 5.5.19.a 2020-04-22 02:12:21 +02:00
kraem c8b5e37764
linux/hardened-patches/5.6.6: init at 5.6.6.a 2020-04-22 02:12:17 +02:00
kraem efafc50f5c
linux/hardened-patches/4.19.116: remove 2020-04-21 22:18:03 +02:00
kraem 8f2e9fcadd
linux/hardened-patches/5.5.18: remove 2020-04-21 22:18:03 +02:00
kraem 9ed70f4e46
linux/hardened-patches/5.6.5: remove 2020-04-21 22:18:03 +02:00
kraem 15807c58ad
linux/hardened-patches/5.4.33: remove 2020-04-21 22:18:02 +02:00
kraem c9cf25bc61
linux: 5.6.5 -> 5.6.6 2020-04-21 21:59:59 +02:00
kraem 1e23dcbf22
linux: 5.5.18 -> 5.5.19 2020-04-21 21:59:22 +02:00
kraem 18c2b5a9aa
linux: 5.4.33 -> 5.4.34 2020-04-21 21:58:45 +02:00
kraem e074301be8
linux: 4.19.116 -> 4.19.117 2020-04-21 21:58:03 +02:00
Linus Heckemann 6673a4988e
gnupg: use libusb1 (#85374)
* gnupg: use libusb1

This fixes scdaemon's direct ccid support.

* systemd: fix gnupg-minimal
2020-04-21 08:35:40 +02:00
Frederik Rietdijk 803b3d296c Merge staging-next into staging 2020-04-21 08:29:51 +02:00
oxalica 7760cff5d7 util-linux: 2.33.2 -> 2.35.1 2020-04-21 08:12:29 +02:00
Dmitry Kalinkin c00ad799a0
darwin.cctools: install ar man pages
In the distribution they are located in a separate directory from the
others and the standard installation doesn't process them.
2020-04-20 23:56:51 -04:00
Dmitry Kalinkin 125c469d3e
darwin.binutils.bintools: propagate man pages from cctools 2020-04-20 23:49:02 -04:00
Dmitry Kalinkin 3e880bad79
darwin.cctools: split man output 2020-04-20 19:51:49 -04:00
kraem 523fe98821 linux/hardened-patches/4.19.116: 4.19.116.NixOS-a -> 4.19.116.a 2020-04-20 10:05:36 -04:00
kraem 45343beffe linux/hardened-patches/5.4.33: 5.4.33.NixOS-a -> 5.4.33.a 2020-04-20 10:05:36 -04:00
kraem 48d908b731 linux/hardened-patches/5.5.18: init at 5.5.18.a 2020-04-20 10:05:36 -04:00
kraem 0fd9293703 linux/hardened-patches/5.6.5: init at 5.6.5.a 2020-04-20 10:05:36 -04:00
kraem e7a65e6c41 linux/hardened-patches/5.5.17: remove 2020-04-20 10:05:36 -04:00
kraem eb41f8122e linux/hardened-patches/5.6.4: remove 2020-04-20 10:05:36 -04:00
kraem 8879086cfc linux: 5.5.17 -> 5.5.18 2020-04-20 10:05:36 -04:00
kraem 4307923b86 linux: 5.6.4 -> 5.6.5 2020-04-20 10:05:36 -04:00
Yegor Timoshenko 6f1165a0cb
Merge pull request #84522 from emilazy/add-linux-hardened-patches
linux_*_hardened: use linux-hardened patch set
2020-04-19 20:01:35 +03:00
Peter Simons 00222dbb0e bbswitch: fix build with Linux kernel version >= 5.6.0
Fixes https://github.com/NixOS/nixpkgs/issues/85564.
2020-04-19 16:25:48 +02:00
Maximilian Bosch 19de59a9be
Merge pull request #85334 from flokli/systemd-mainline2
systemd: 243.7 -> 245
2020-04-19 16:02:52 +02:00
Vladimír Čunát e233a9d4dd
Merge #84442: staging-next branch 2020-04-18 23:11:00 +02:00
John Ericson 1ea80c2cc3 Merge remote-tracking branch 'upstream/master' into staging 2020-04-18 15:40:49 -04:00
Jan Tojnar 09c4736405
Merge pull request #83755 from jtojnar/jcat-0.1 2020-04-18 20:38:24 +02:00