Commit graph

13433 commits

Author SHA1 Message Date
Michael Raskin
d006ea0663
Merge pull request #104487 from snicket2100/firejail-xdg-dbus-proxy
firejail: fixing the 'xdg-dbus-proxy' dependency
2020-11-22 16:32:19 +00:00
snicket2100
ffeb2af920 firejail: fixing the 'xdg-dbus-proxy' dependency
xdg-dbus-proxy path is hardcoded in the common.h file in the firejail
source code. if this binary is not found, dbus filtering capabilities
of firejail get limited i.e. you can only entirely disable or entirely
enable dbus communication.
2020-11-22 13:35:09 +01:00
Frederik Rietdijk
1ffd7cf0d6 Merge master into staging-next 2020-11-21 08:43:10 +01:00
Christian Kampka
ecaa0e1058 s6-linux-utils: 2.5.1.2 -> 2.5.1.3 2020-11-20 18:15:17 +01:00
Tim Steinbach
b5fdfc2ec6
linux/hardened/patches/5.9: 5.9.8.a -> 5.9.9.a 2020-11-20 11:31:31 -05:00
Tim Steinbach
1c6f19bfbe
linux/hardened/patches/5.4: 5.4.77.a -> 5.4.78.a 2020-11-20 11:31:29 -05:00
Tim Steinbach
674e6d9c0f
linux/hardened/patches/4.19: 4.19.157.a -> 4.19.158.a 2020-11-20 11:31:27 -05:00
Tim Steinbach
c9737f0870
linux/hardened/patches/4.14: 4.14.206.a -> 4.14.207.a 2020-11-20 11:31:25 -05:00
Jan Tojnar
f6105d21e3
Merge branch 'master' into staging-next 2020-11-20 01:38:32 +01:00
Martin Weinelt
5928d66704
microcodeIntel: 20201112 -> 20201118
Fixes a regression on some "OEM platforms".

Relates to #104301
2020-11-19 20:30:53 +01:00
Frederik Rietdijk
ea7b8978ef Merge master into staging-next 2020-11-19 20:08:15 +01:00
Tim Steinbach
6f4bd3959f
linux_latest-libre: 17762 -> 17768 2020-11-19 09:08:51 -05:00
Tim Steinbach
6eb958ae76
linux: 5.9.8 -> 5.9.9 2020-11-19 09:08:51 -05:00
Tim Steinbach
199efec0a5
linux: 5.4.77 -> 5.4.78 2020-11-19 09:08:51 -05:00
Tim Steinbach
695ac805af
linux: 4.9.243 -> 4.9.244 2020-11-19 09:08:50 -05:00
Tim Steinbach
6cad3d1cf3
linux: 4.4.243 -> 4.4.244 2020-11-19 09:08:50 -05:00
Tim Steinbach
7486ce6765
linux: 4.19.157 -> 4.19.158 2020-11-19 09:08:49 -05:00
Tim Steinbach
2f1d8550bb
linux: 4.14.206 -> 4.14.207 2020-11-19 09:08:46 -05:00
TredwellGit
d7695d13ff firmwareLinuxNonfree: 2020-10-22 -> 2020-11-18 2020-11-19 09:40:32 +00:00
Timo Kaufmann
9140b112b9
Merge pull request #103124 from xfix/update-ndiswrapper
linuxPackages.ndiswrapper: 1.62-pre -> 1.63
2020-11-18 22:32:08 +01:00
Izorkin
2f7ce5fdc3 nftables: 0.9.6 -> 0.9.7 2020-11-18 15:51:53 +01:00
Frederik Rietdijk
da12fc6838 Merge staging-next into staging 2020-11-18 15:36:56 +01:00
Konrad Borowski
0788a95557 linuxPackages.ndiswrapper: 1.62-pre -> 1.63 2020-11-18 10:59:38 +01:00
Michele Guerini Rocco
09506f5018
Merge pull request #104134 from r-ryantm/auto-update/btfs
btfs: 2.22 -> 2.23
2020-11-18 10:26:16 +01:00
R. RyanTM
1edae8aa7b btfs: 2.22 -> 2.23 2020-11-18 05:13:07 +00:00
Aaron Janse
52d3cc4438 tomb: 2.7 -> 2.8 2020-11-18 09:54:49 +08:00
Tim Steinbach
bb15fa7427
linux: 5.10-rc3 -> 5.10-rc4 2020-11-16 12:33:28 -05:00
Florian Klink
462c5b26c5
Merge pull request #103966 from flokli/kernel-enable-ipv6
kernel config: explicitly enable CONFIG_IPV6
2020-11-16 16:32:50 +01:00
Florian Klink
13be37662d kernel config: explicitly enable CONFIG_IPV6
We currently build CONFIG_IPV6=m.

This seems to be not really well-supported in mainline kernels - see
https://lore.kernel.org/netdev/20201115224509.2020651-1-flokli@flokli.de/T/#u

Compiling it as a module doesn't give too much benefit - even for people
who did explicitly set `enableIPv6` to false, the `ipv6` module was
still loaded, as soon as another module was loaded that requires it
(bridge,br_netfilter,wireguard,ip6table_mangle,sctp,…).

By compiling it in, we only loose the possibility to not add it to
`boot.kernelModules` anymore (as it's part of the kernel directly). The
space savings are negligible.

People wanting to disable IPv6 still get the appropriate sysctls and
options set (while having the kernel code loaded), nothing is really
changing here.
2020-11-16 13:07:49 +01:00
Frederik Rietdijk
986c2d36da Merge master into staging-next 2020-11-16 09:01:53 +01:00
Daniel Fox Franke
2fa89880cb
nvidia-x11: 455.28 -> 455.38 (#103830) 2020-11-14 20:45:41 -05:00
Tim Steinbach
0c0b533fa7
linux-rt_5_4: 5.4.74-rt42 -> 5.4.77-rt43 2020-11-14 15:21:48 -05:00
Frederik Rietdijk
da6239dab3 Merge #98541 into staging-next 2020-11-14 09:19:31 +01:00
Mario Rodas
d2d4d04ced
Merge pull request #103678 from r-ryantm/auto-update/forkstat
forkstat: 0.02.15 -> 0.02.16
2020-11-13 21:09:23 -05:00
Mario Rodas
126e37ed45
Merge pull request #103685 from cmacrae/upgrade/yabai/3.3.2
yabai: 3.3.0 -> 3.3.3
2020-11-13 21:02:22 -05:00
Frederik Rietdijk
9fc4a4db5a Merge staging-next into staging 2020-11-13 20:59:08 +01:00
Frederik Rietdijk
463f738cc6 Merge master into staging-next 2020-11-13 20:58:35 +01:00
Jonathan Ringer
f525d54c55 zfsUnstable: 2.0.0-rc5 -> 2.0.0-rc6 2020-11-13 09:31:18 -08:00
Tim Steinbach
c9845cdaed
linux: 5.10-rc2 -> 5.10-rc3 2020-11-13 11:33:33 -05:00
cmacrae
7fb1069a13
yabai: 3.3.0 -> 3.3.3 2020-11-13 14:47:11 +00:00
Tim Steinbach
eb64d1518f
linux-rt_5_4: 5.4.74-rt41 -> 5.4.74-rt42 2020-11-13 09:28:18 -05:00
Andreas Rammhold
df620fd81a
Merge pull request #103637 from mweinelt/intelMicrocode
microcodeIntel: 20201110 -> 20201112
2020-11-13 15:20:50 +01:00
R. RyanTM
568d95e11e forkstat: 0.02.15 -> 0.02.16 2020-11-13 10:12:04 +00:00
Jörg Thalheim
440c5808a1
Merge pull request #103006 from Mic92/bcc
linuxPackages.bcc: 0.16.0 -> 0.17.0
2020-11-13 08:37:12 +01:00
Mario Rodas
53402d6981
Merge pull request #103640 from r-ryantm/auto-update/criu
criu: 3.14 -> 3.15
2020-11-12 20:32:47 -05:00
Daiderd Jordan
411f9e25d7
Merge pull request #98541 from thefloweringash/darwin-tapi-stdenv
darwin (Big Sur): tbd based stdenv
2020-11-13 00:14:25 +01:00
Jonas Chevalier
a7cb88c3de
tree-wide: unify Bash completions outputs (#103421)
Use $out/share/bash-completion/completions to store the Bash completions
2020-11-12 21:22:18 +00:00
Matthieu Coudron
2bbfa82c2f
Merge pull request #103232 from teto/mptcp_official
linux_mptcp_5_9: init upstream multipath TCP at 5.9
2020-11-12 22:15:02 +01:00
R. RyanTM
fb0f4c5652 criu: 3.14 -> 3.15 2020-11-12 20:03:56 +00:00
Martin Weinelt
eaf889aea0 microcodeIntel: 20201110 -> 20201112
Update to Pentium Silver N/J5xxx, Celeron N/J4xxx

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html

Fixes: CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
2020-11-12 20:09:49 +01:00