From 83adec09b0e5e007f6ccaef8c2a2ccd88af7fc3d Mon Sep 17 00:00:00 2001
From: Shawn8901 <shawn8901@googlemail.com>
Date: Fri, 6 Dec 2024 20:13:07 +0100
Subject: [PATCH 1/3] linux_xanmod_latest: 6.11.10 -> 6.11.11

(cherry picked from commit a4b5b5f89dd510deaf69c5b476d66d8897386f90)
---
 pkgs/os-specific/linux/kernel/xanmod-kernels.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
index c603f0194374..840c40973496 100644
--- a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
+++ b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
@@ -18,8 +18,8 @@ let
     };
 
     main = {
-      version = "6.11.10";
-      hash = "sha256-WNzMM+P8c8Mv+FdrwcEPHwv/ppvgN2fiM+SHMmlAPYw=";
+      version = "6.11.11";
+      hash = "sha256-ZBDm6qbzXQhIBVK4EWNI/3WdD7HArwGf5uKCDVBV59c=";
     };
   };
 

From 3e05b92a43baa4b4a79e2faf753b6462885b0fb8 Mon Sep 17 00:00:00 2001
From: Tomodachi94 <tomodachi94@protonmail.com>
Date: Mon, 9 Dec 2024 06:49:14 +0000
Subject: [PATCH 2/3] racket_7_9: mark insecure

---
 pkgs/development/interpreters/racket/racket_7_9.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/development/interpreters/racket/racket_7_9.nix b/pkgs/development/interpreters/racket/racket_7_9.nix
index 1446be8f2460..4ee6edbca0a9 100644
--- a/pkgs/development/interpreters/racket/racket_7_9.nix
+++ b/pkgs/development/interpreters/racket/racket_7_9.nix
@@ -145,6 +145,7 @@ stdenv.mkDerivation rec {
       "x86_64-linux"
       "aarch64-linux"
     ];
+    knownVulnerabilities = [ "CVE-2021-32773" ];
     broken = stdenv.isDarwin; # No support yet for setting FFI lookup path
   };
 }

From e3949eee386a56914761d1353389f3ff0c63a320 Mon Sep 17 00:00:00 2001
From: Tomodachi94 <tomodachi94@protonmail.com>
Date: Mon, 9 Dec 2024 01:28:54 +0000
Subject: [PATCH 3/3] nixos/networking-interfaces-scripted: use read -r

...instead of plain read, which can cause issues.

See SC2162:
https://www.shellcheck.net/wiki/SC2162

(cherry picked from commit 2e98ec0e0eb30615a75242233b3ba1d92cd20631)
---
 nixos/modules/tasks/network-interfaces-scripted.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/nixos/modules/tasks/network-interfaces-scripted.nix b/nixos/modules/tasks/network-interfaces-scripted.nix
index bbf2d337aac6..91c78b467e39 100644
--- a/nixos/modules/tasks/network-interfaces-scripted.nix
+++ b/nixos/modules/tasks/network-interfaces-scripted.nix
@@ -237,7 +237,7 @@ let
             preStop = ''
               state="/run/nixos/network/routes/${i.name}"
               if [ -e "$state" ]; then
-                while read cidr; do
+                while read -r cidr; do
                   echo -n "deleting route $cidr... "
                   ip route del "$cidr" dev "${i.name}" >/dev/null 2>&1 && echo "done" || echo "failed"
                 done < "$state"
@@ -246,7 +246,7 @@ let
 
               state="/run/nixos/network/addresses/${i.name}"
               if [ -e "$state" ]; then
-                while read cidr; do
+                while read -r cidr; do
                   echo -n "deleting address $cidr... "
                   ip addr del "$cidr" dev "${i.name}" >/dev/null 2>&1 && echo "done" || echo "failed"
                 done < "$state"