nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-09-28 19:00:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,058,993 Commits 274 Branches 81 Tags
python-updates
Commit Graph

10397 Commits

Author SHA1 Message Date
TredwellGit
35ba4ae7a4 linux: 5.16.2 -> 5.16.3 2022-01-27 11:48:26 +00:00
TredwellGit
532ede5712 linux: 5.15.16 -> 5.15.17 2022-01-27 11:48:18 +00:00
TredwellGit
b14eceedca linux: 5.10.93 -> 5.10.94 2022-01-27 11:48:10 +00:00
TredwellGit
7b55056304 linux: 4.9.297 -> 4.9.298 2022-01-27 11:48:03 +00:00
TredwellGit
c0b2ac9b7a linux: 4.4.299 -> 4.4.300 2022-01-27 11:47:56 +00:00
TredwellGit
e0781196f7 linux: 4.19.225 -> 4.19.226 2022-01-27 11:47:50 +00:00
TredwellGit
388633adc5 linux: 4.14.262 -> 4.14.263 2022-01-27 11:47:44 +00:00
Gregor Pogacnik
a86365b055 linux: upgrade hardened kernel (CVE-2022-0185) 
5.4.172 -> 5.4.173, 5.10.92 -> 5.10.93, 5.15.15 -> 5.15.16
 2022-01-26 16:20:37 +00:00
Sandro
7d739f013f Merge pull request #151432 from Atemu/update/linux_lqx 2022-01-26 14:45:41 +01:00
Atemu
155ea72476 linux_lqx: 5.15.16-lqx1 -> 5.15.16-lqx2 2022-01-25 18:09:40 +01:00
Martino Fontana
8aae7afa3e linux: enable FF for many gamepads 2022-01-24 11:46:57 +01:00
Felix Buehler
027d353491 treewide: rename name to pname&version 2022-01-22 18:13:29 +01:00
Atemu
dbfea90833 linux-lqx: 5.15.15 -> 5.15.16 2022-01-21 16:14:44 +01:00
TredwellGit
89cc4c1ee6 linux: 5.4.172 -> 5.4.173 2022-01-20 19:29:58 +00:00
TredwellGit
581019ba48 linux: 5.16.1 -> 5.16.2 2022-01-20 19:29:51 +00:00
TredwellGit
fea530a537 linux: 5.15.15 -> 5.15.16 2022-01-20 19:29:44 +00:00
TredwellGit
6c1f8548a2 linux: 5.10.92 -> 5.10.93 2022-01-20 19:29:36 +00:00
Sandro
c392f1e9cb Merge pull request #155606 from SuperSandro2000/Lunarequest/master 2022-01-19 12:37:32 +01:00
nullrequest
eff260aaf2 linux config: enable Landlock LSM 2022-01-19 12:12:03 +01:00
TredwellGit
7c410af47e linux/hardened/patches/5.4: 5.4.171-hardened1 -> 5.4.172-hardened1 2022-01-19 01:35:46 +00:00
TredwellGit
632c0297ce linux/hardened/patches/5.15: 5.15.14-hardened1 -> 5.15.15-hardened1 2022-01-19 01:35:37 +00:00
TredwellGit
7bc3a9ee46 linux/hardened/patches/5.10: 5.10.91-hardened1 -> 5.10.92-hardened1 2022-01-19 01:35:28 +00:00
TredwellGit
3aec9d28ba linux: 5.4.171 -> 5.4.172 2022-01-19 01:34:30 +00:00
TredwellGit
ea3bccf3b8 linux: 5.16 -> 5.16.1 2022-01-19 01:34:23 +00:00
TredwellGit
05ad09bd54 linux: 5.15.14 -> 5.15.15 2022-01-19 01:34:15 +00:00
TredwellGit
0b04210a04 linux: 5.10.91 -> 5.10.92 2022-01-19 01:34:07 +00:00
Pavol Rusnak
6c18c013f4 Merge pull request #154348 from Stunkymonkey/treewide-pname-version-5 
treewide: rename name to pname&version
 2022-01-17 21:05:32 +01:00
Felix Buehler
6cbf83ba01 treewide: rename name to pname&version 2022-01-17 20:52:59 +01:00
Atemu
ec6f1661c7 linux-lqx: 5.15.12 -> 5.15.15 2022-01-16 18:07:36 +01:00
Bernardo Meurer
4fa2647449 Merge pull request #154994 from mweinelt/kernel-disable-unpriv-ebpf 
linux: enable BPF_UNPRIV_DEFAULT_OFF on 5.10 and later
 2022-01-16 00:46:51 +00:00
Martin Weinelt
3ee206291a linux: enable BPF_UNPRIV_DEFAULT_OFF between 5.10 and 5.15 
Disable unprivileged access to BPF syscalls to prevent denial of service
and privilege escalation via

a) potential speculative execution side-channel-attacks on unmitigated
hardware[0]

or

b) unvalidated memory access in ringbuffer helper functions[1].

Fixes: CVE-2021-4204, CVE-2022-23222

[0] https://ebpf.io/summit-2021-slides/eBPF_Summit_2021-Keynote-Daniel_Borkmann-BPF_and_Spectre.pdf
[1] https://www.openwall.com/lists/oss-security/2022/01/13/1
 2022-01-15 23:44:19 +01:00
TredwellGit
e19681509b linux/hardened/patches/5.4: 5.4.170-hardened1 -> 5.4.171-hardened1 2022-01-14 02:25:10 +00:00
TredwellGit
ead5545be3 linux/hardened/patches/5.15: 5.15.12-hardened1 -> 5.15.14-hardened1 2022-01-14 02:25:01 +00:00
TredwellGit
f14a7feff2 linux/hardened/patches/5.10: 5.10.89-hardened1 -> 5.10.91-hardened1 2022-01-14 02:24:52 +00:00
TredwellGit
56224051e3 linux/hardened/patches/4.19: 4.19.224-hardened1 -> 4.19.225-hardened1 2022-01-14 02:24:42 +00:00
TredwellGit
230a6813d9 linux/hardened/patches/4.14: 4.14.261-hardened1 -> 4.14.262-hardened1 2022-01-14 02:24:34 +00:00
TredwellGit
c5f9bb4d21 linux-rt_5_4: 5.4.161-rt67 -> 5.4.170-rt68 2022-01-14 02:23:37 +00:00
TredwellGit
61dd0c8e85 linux: 5.4.170 -> 5.4.171 2022-01-11 16:37:55 +00:00
TredwellGit
4cf69dc13a linux: 5.15.13 -> 5.15.14 2022-01-11 16:37:49 +00:00
TredwellGit
caa8c4963d linux: 5.10.90 -> 5.10.91 2022-01-11 16:37:40 +00:00
TredwellGit
84e167d8b3 linux: 4.9.296 -> 4.9.297 2022-01-11 16:37:32 +00:00
TredwellGit
e30d75558e linux: 4.4.298 -> 4.4.299 2022-01-11 16:37:26 +00:00
TredwellGit
7bf2f23df2 linux: 4.19.224 -> 4.19.225 2022-01-11 16:37:20 +00:00
TredwellGit
169ed1335f linux: 4.14.261 -> 4.14.262 2022-01-11 16:37:14 +00:00
Brandon Weeks
fbad6464be linux: enable FORTIFY_SOURCE 2022-01-10 17:00:08 -08:00
Bernardo Meurer
5f36161ae1 linuxKernel.kernels: mark {IO_,}STRICT_DEVMEM optional to unbreak hardened kernels 2022-01-10 17:49:30 -03:00
Alyssa Ross
0a99fa0331 linux_latest: 5.15.12 -> 5.16 2022-01-10 16:32:48 +00:00
Bernardo Meurer
c1376aedd7 linuxKernel.kernels: also enable SND_SOC_SOF_INTEL_SOUNDWIRE_LINK between 5.10-5.11 2022-01-10 11:15:24 -03:00
Brandon Weeks
8f200e0e38 linux: enable IO_STRICT_DEVMEM 2022-01-09 21:34:42 -08:00
Bernardo Meurer
501a2c13cc Merge pull request #154181 from brandonweeks/debug_list 2022-01-10 04:48:21 +00:00