gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,013,546 Commits 9 Branches 0 Tags
1629ccf012bd98563ee9f4b418ecc0ae490fb3d2
Commit Graph
1013546 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Fernando Rodrigues 1629ccf012 xen: patch with XSA-491 
Xen Security Advisory CVE-2026-42487 / XSA-491
                               version 2

                    x86 HVM I/O port list traversal

HVM guest I/O port accesses are subject to either emulation or at least
translation.  Translations are managed by the device model (via
XEN_DOMCTL_ioport_mapping), and hence the linked list used may changed
at any time.  Traversal of those lists (while handling guest I/O port
accesses) therefore needs synchronizing with updates, which was missing
so far.

A device model of a HVM guest can cause a hypervisor crash, causing a
Denial of Service (DoS) of the entire host.  Privilege escalation and
information leaks cannot be ruled out.

https://xenbits.xen.org/xsa/advisory-491.html

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2026-06-09 22:57:58 +10:00
Fernando Rodrigues a343770e93 xen: patch with XSA-490 
Released a while ago. We had difficulties adding it to Nixpkgs at the time as
our Xen needed to be updated to the .3 release.

            Xen Security Advisory CVE-2025-54518 / XSA-490

                   x86: CPU Opcode Cache corruption

AMD have disclosed a potential vulnerability in certain CPUs which can
cause instructions to execute at a higher privilege.

For more information, see:
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7052.html

Code of any privilege could escalate to a higher privilege, including
userspace to kernel, and guest to host.

https://xenbits.xen.org/xsa/advisory-490.html

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2026-06-09 22:57:57 +10:00
Martin WeineltandGitHub 8acd72a724 necesse-server: 1.2.0-22728942 -> 1.2.0-23522718 (#528564) 2026-06-09 12:10:53 +00:00
nixpkgs-ci[bot]andGitHub 9439413a79 pocketbase: 0.39.0 -> 0.39.3 (#529905) 2026-06-09 12:09:18 +00:00
zowoqandGitHub 5647c8b083 staging-nixos merge for 2026-06-09 (#529881) 2026-06-09 22:11:09 +10:00
R. Ryantm 52f7191837 pocketbase: 0.39.0 -> 0.39.3 2026-06-09 11:53:29 +00:00
zowoqandGitHub 9ebfaa3411 kernel updates for 2026-06-09 (#529878) 2026-06-09 11:52:05 +00:00
LIN, JianandGitHub 89361a8c3d emacs: enable __structuredAttrs (#528753) 2026-06-09 11:51:56 +00:00
nixpkgs-ci[bot]andGitHub 89561a98fd telemt: 3.4.13 -> 3.4.15 (#529855) 2026-06-09 11:48:42 +00:00
Nick CaoandGitHub 443ce63728 v2ray-domain-list-community: 20260531040030 -> 20260609060640 (#529877) 2026-06-09 11:28:15 +00:00
Marc JakobiandGitHub 1dbad34ec8 neovim-unwrapped: apply CVE-2026-11487.patch (#529865) 2026-06-09 11:18:05 +00:00
isabelandGitHub ee5e4ba955 git-bug: fix fish completions (#529885) 2026-06-09 11:16:42 +00:00
Martin WeineltandGitHub bc6ffd79e3 python3Packages.python-duco-connectivity: init at 0.5.0 (#529012) 2026-06-09 11:06:55 +00:00
Yohann BonifaceandGitHub c2fa0cb1ca maintainers: add spk to blackfire (#529433) 2026-06-09 11:05:03 +00:00
ArtturinandGitHub 74d38bfa57 copyq: 15.0.0 -> 16.0.0 (#526281) 2026-06-09 11:01:05 +00:00
Pol DellaieraandGitHub dae551de89 ollama: 0.30.5 -> 0.30.6 (#529660) 2026-06-09 10:57:28 +00:00
zowoq 0088fcded6 linux_6_12: 6.12.92 -> 6.12.93 2026-06-09 10:56:50 +00:00
zowoq 4e8d7d7406 linux_6_18: 6.18.34 -> 6.18.35 2026-06-09 10:56:46 +00:00
zowoq a53339212c linux_7_0: 7.0.11 -> 7.0.12 2026-06-09 10:56:43 +00:00
zowoq b027095b14 linux_testing: 7.1-rc6 -> 7.1-rc7 2026-06-09 10:56:39 +00:00
Yohann BonifaceandGitHub fc8aab7070 vscode, vscodium: set meta.changelog (#529627) 2026-06-09 10:56:05 +00:00
Alexis HildebrandtandGitHub b7dc3cce74 ibm-plex: 1.1.0 -> 0-unstable-2026-02-12, refactor, add maintainer magicquark (#505549) 2026-06-09 10:53:44 +00:00
Alexis HildebrandtandGitHub 2a5f1b8429 anytype: 0.54.11 -> 0.55.5 (#520906) 2026-06-09 10:52:03 +00:00
Doron BeharandGitHub 0d12681d79 octave: 11.2.0 -> 11.3.0 (#529703) 2026-06-09 10:51:19 +00:00
Pol DellaieraandGitHub bbc19d0943 python3Packages.rns: 1.3.4 -> 1.3.5 (#529845) 2026-06-09 10:46:59 +00:00
R. Ryantm 1c20931a2b v2ray-domain-list-community: 20260531040030 -> 20260609060640 2026-06-09 10:45:50 +00:00
nixpkgs-ci[bot]andGitHub 48e38743b7 dcp: 0.24.3 -> 0.25.0 (#529831) 2026-06-09 10:40:17 +00:00
nixpkgs-ci[bot]andGitHub fddbf83953 spotiflac: 7.1.7 -> 7.1.8 (#529746) 2026-06-09 10:40:09 +00:00
nixpkgs-ci[bot]andGitHub a4069e76bb clj-kondo: 2026.04.15 -> 2026.05.25 (#528617) 2026-06-09 10:39:41 +00:00
nixpkgs-ci[bot]andGitHub c2b27dc8bc k3d: 5.8.3 -> 5.9.0 (#527281) 2026-06-09 10:39:27 +00:00
nixpkgs-ci[bot]andGitHub 5ae82b8f41 openfga: 1.14.2 -> 1.16.1 (#514112) 2026-06-09 10:39:20 +00:00
nixpkgs-ci[bot]andGitHub 42fe7ba9fe openfga-cli: 0.7.13 -> 0.7.15 (#522326) 2026-06-09 10:39:13 +00:00
Mohammad Rafiq b5e9cca166 git-bug: fix fish completions 2026-06-09 18:31:12 +08:00
kirillrdyandGitHub 8ac47a0acc python3Packages.transformer-engine: 2.15 -> 2.16 (#529820) 2026-06-09 10:30:01 +00:00
Martin WeineltandGitHub 9bdc8f0616 nixos/home-assistant: open firewall ports for homekit component (#529038) 2026-06-09 10:27:34 +00:00
Marc JakobiandGitHub 91be81031c luaPackages.coop-nvim: init at 1.2.0-0 (#529573) 2026-06-09 10:22:14 +00:00
kirillrdyandGitHub de1f7ca0be python3Packages.emmiai-noether: fix by relaxing torch (#529800) 2026-06-09 10:21:51 +00:00
Marc Jakobi fcbcfa55dd neovim-unwrapped: apply CVE-2026-11487.patch 2026-06-09 12:17:58 +02:00
Thiago Kenji OkadaandGitHub 4743e51d18 libretro.opera: 0-unstable-2026-05-30 -> 0-unstable-2026-06-09 (#529857) 2026-06-09 10:09:36 +00:00
Pol Dellaiera 5e1c3a97aa python3Packages.lxmf: remove rns constraint 2026-06-09 12:01:29 +02:00
Pol Dellaiera 5502fac45a python3Packages.rns: 1.3.4 -> 1.3.5 2026-06-09 12:01:29 +02:00
YtandGitHub 8323cae31b stalwart: remove euxane from maintainers (#529772) 2026-06-09 09:54:38 +00:00
R. Ryantm a624a1e523 telemt: 3.4.13 -> 3.4.15 2026-06-09 09:41:24 +00:00
R. Ryantm bfad9c3180 libretro.opera: 0-unstable-2026-05-30 -> 0-unstable-2026-06-09 2026-06-09 09:41:10 +00:00
Michal Koutenskýandxmnlz 2684678b1e anytype: 0.54.11 -> 0.55.5 
Co-authored-by: xmnlz <lemmeq9@gmail.com>
 2026-06-09 11:28:26 +02:00
nixpkgs-ci[bot]andGitHub 872eb0174d muffet: 2.11.4 -> 2.11.5 (#529821) 2026-06-09 09:23:59 +00:00
nixpkgs-ci[bot]andGitHub b4bc5a1efe bazaar: 0.8.1 -> 0.8.3 (#529777) 2026-06-09 09:23:44 +00:00
Matt SturgeonandGitHub 3a4e374ec9 helmify: init at 0.4.20 (#525507) 2026-06-09 09:19:35 +00:00
Matt SturgeonandGitHub 4577aad111 pipeform: init at 0.2.1 (#525194) 2026-06-09 09:17:48 +00:00
Silvan MosbergerandGitHub e3e87d1158 alvr: use ffmpeg_6 with patches from alvr source (#508407) 2026-06-09 09:15:32 +00:00