gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
883,405 Commits 9 Branches 0 Tags
ecbfebd5f8be49158abc315feeaed2a6ad81b098
Commit Graph
883405 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Fernando Rodrigues ecbfebd5f8 xen: patch with XSA-476 
Xen Security Advisory CVE-2025-58149 / XSA-476

         Incorrect removal of permissions on PCI device unplug

When passing through PCI devices, the detach logic in libxl won't remove
access permissions to any 64bit memory BARs the device might have.  As a
result a domain can still have access any 64bit memory BAR when such
device is no longer assigned to the domain.

For PV domains the permission leak allows the domain itself to map the memory
in the page-tables.  For HVM it would require a compromised device model or
stubdomain to map the leaked memory into the HVM domain p2m.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
 2025-10-24 23:37:47 +11:00
nixpkgs-merge-bot[bot]andGitHub 62be5c9d5c automatic-timezoned: 2.0.93 -> 2.0.96 (#455205) 2025-10-24 12:07:04 +00:00
dotlambdaandGitHub 5b2f3d53d5 python3Packages.israel-rail-api: 0.1.3 -> 0.1.4 (#455129) 2025-10-24 11:53:51 +00:00
K900andGitHub 2a5306e15c staging-nixos merge for 2025-10-24 (#455209) 2025-10-24 11:35:37 +00:00
Masum RezaandGitHub 7e51aa4820 warp-terminal: 0.2025.10.15.08.12.stable_01 -> 0.2025.10.22.08.13.stable_01 (#455206) 2025-10-24 11:32:09 +00:00
K900andGitHub c790656c37 kernel updates for 2025-10-23 (#455052) 2025-10-24 14:30:26 +03:00
nixpkgs-ci[bot]andGitHub 713a15a8d6 Merge master into staging-nixos 2025-10-24 11:29:12 +00:00
R. Ryantm 1727ed07b5 warp-terminal: 0.2025.10.15.08.12.stable_01 -> 0.2025.10.22.08.13.stable_01 2025-10-24 11:16:07 +00:00
R. Ryantm 9c6aaa12c8 automatic-timezoned: 2.0.93 -> 2.0.96 2025-10-24 11:15:52 +00:00
Jörg ThalheimandGitHub 562f7285ce Add intel-ipsec-mb to dpdk (#455170) 2025-10-24 11:06:19 +00:00
Stanisław PituchaandGitHub 1040bc4182 ejsonkms: 0.2.8 -> 0.2.9 (#454983) 2025-10-24 10:38:19 +00:00
rewineandGitHub 176acdd41f wlroots: 0.19.1 -> 0.19.2 (#454865) 2025-10-24 10:31:13 +00:00
Gaétan LepageandGitHub 96eb22de75 codesnap: 0.10.9 -> 0.12.10 (#452545) 2025-10-24 10:21:20 +00:00
nixpkgs-merge-bot[bot]andGitHub 7227769bf6 lcm: 1.5.1 -> 1.5.2 (#455093) 2025-10-24 10:20:55 +00:00
Alyssa RossandGitHub 6f79754f08 qemu: 10.1.0 -> 10.1.2 (#450435) 2025-10-24 12:09:58 +02:00
nixpkgs-merge-bot[bot]andGitHub 4e01e49ae4 k9s: 0.50.15 -> 0.50.16 (#455017) 2025-10-24 10:03:06 +00:00
Thomas GerbetandGitHub 9948775ba1 fleet: 4.73.5 -> 4.75.1 (#453149) 2025-10-24 09:59:03 +00:00
nixpkgs-merge-bot[bot]andGitHub c2ff1ea497 xremap: 0.14.1 -> 0.14.2 (#455172) 2025-10-24 09:37:41 +00:00
Alyssa RossandGitHub 97001a6929 rust: Enable bootstrap on powerpc64le-unknown-linux-musl (#455174) 2025-10-24 09:36:04 +00:00
Matteo PaciniandGitHub 12daffbf7e gtree: 1.11.8 -> 1.11.9 (#455159) 2025-10-24 09:26:26 +00:00
André SilvaandGitHub 43d2a552d4 claude-code: 2.0.25 -> 2.0.26 (#455141) 2025-10-24 09:09:52 +00:00
Matteo PaciniandGitHub 246c9da20e paperless-ngx: 2.19.1 -> 2.19.2 (#455002) 2025-10-24 09:03:35 +00:00
R. Ryantm 2b52c70606 xremap: 0.14.1 -> 0.14.2 2025-10-24 08:49:44 +00:00
Thore Sommer 4fd550b3ea dpdk: add intel-ipsec-mb as dependency 
intel-ipsec-mb for some of the cryptodev features
 2025-10-24 10:47:55 +02:00
Thore Sommer e9c0f4d15d intel-ipsec-mb: add package for 2.0.1 2025-10-24 10:47:28 +02:00
Bruno BELANYIandGitHub 31e4e66897 caesura: 0.25.2 -> 0.26.0 (#455080) 2025-10-24 08:46:55 +00:00
Wolfgang WaltherandGitHub 395d0cb65c deterministic-zip: init at 5.2.0 (#355559) 2025-10-24 08:46:17 +00:00
Wolfgang WaltherandGitHub 266982a701 top-level: group throwIfNot checks and simplify (#455138) 2025-10-24 08:28:33 +00:00
nixpkgs-merge-bot[bot]andGitHub 26c953d16c haproxy: 3.2.6 -> 3.2.7 (#455084) 2025-10-24 08:24:01 +00:00
Wolfgang WaltherandGitHub b4f15dfff2 ly: 1.1.2 -> 1.2.0 (#454744) 2025-10-24 08:23:58 +00:00
Wolfgang WaltherandGitHub 642fae6c6a maintainers: drop rileyinman (#454629) 2025-10-24 08:04:35 +00:00
Matteo PaciniandGitHub 3c106f2ebb gdevelop: 5.5.243 -> 5.5.244 (#455140) 2025-10-24 08:02:21 +00:00
Matteo PaciniandGitHub cb2b1cbd55 cloud-nuke: 0.43.0 -> 0.44.0 (#455137) 2025-10-24 08:02:05 +00:00
R. Ryantm b3d1d35293 gtree: 1.11.8 -> 1.11.9 2025-10-24 07:44:36 +00:00
Jörg ThalheimandGitHub 02e2099091 nixos/facter: add boot and storage detection (#454847) 2025-10-24 07:20:42 +00:00
nixpkgs-merge-bot[bot]andGitHub ef41fb30ee foundry: 1.4.1 -> 1.4.3 (#455022) 2025-10-24 07:16:26 +00:00
nixpkgs-merge-bot[bot]andGitHub 8a835af82f re-isearch: 2.20220925.4.0a-unstable-2025-10-17 -> 2.20220925.4.0a-unstable-2025-10-22 (#455127) 2025-10-24 07:03:25 +00:00
R. Ryantm b1a1a6e7d0 gdevelop: 5.5.243 -> 5.5.244 2025-10-24 06:47:04 +00:00
Doron BeharandGitHub 898063709b musescore: 4.6.2 -> 4.6.3 (#454915) 2025-10-24 06:37:23 +00:00
Seth FlynnandGitHub d43d3ef7d0 libtheora: apply ARMv7 conditionals to all 32-bit ARM (#455107) 2025-10-24 06:35:09 +00:00
R. Ryantm 976d0a3714 cloud-nuke: 0.43.0 -> 0.44.0 2025-10-24 06:33:24 +00:00
nixpkgs-merge-bot[bot]andGitHub d58f5213a1 chirpstack-rest-api: 4.14.1 -> 4.15.0 (#453611) 2025-10-24 06:30:06 +00:00
Matt Sturgeon 321006d2d9 top-level: simplify checked using lib.all 2025-10-24 07:29:39 +01:00
Seth FlynnandGitHub b180fc9626 ghostty{,-bin}: 1.2.2 -> 1.2.3 (#455047) 2025-10-24 06:29:03 +00:00
Matt Sturgeon e92214c3a4 top-level: use parentheses to group checks 
Group `throwIfNot` chains with parentheses to improve readability and
hint to nixfmt the intended formatting.

This makes the result visually closer to the pre-nixfmt layout:

    checked =
      throwIfNot (lib.isList overlays) "The overlays argument to nixpkgs must be a list."
      lib.foldr (x: throwIfNot (lib.isFunction x) "All overlays passed to nixpkgs must be functions.") (r: r) overlays
      throwIfNot (lib.isList crossOverlays) "The crossOverlays argument to nixpkgs must be a list."
      lib.foldr (x: throwIfNot (lib.isFunction x) "All crossOverlays passed to nixpkgs must be functions.") (r: r) crossOverlays
      ;
 2025-10-24 07:26:03 +01:00
R. Ryantm 0b3f44aac1 fleet: 4.73.5 -> 4.75.1 2025-10-24 06:25:32 +00:00
Markus Hauck a8dfff653f claude-code: 2.0.25 -> 2.0.26 
https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
 2025-10-24 08:17:24 +02:00
nixpkgs-ci[bot]andGitHub e8707f82fb Merge master into staging-nixos 2025-10-24 06:07:51 +00:00
Samuel Holland 8cf7fbde48 rust: Enable bootstrap on powerpc64le-unknown-linux-musl 
Official tarballs for this target have been built since version 1.85.0.

Link: https://github.com/rust-lang/rust/pull/133801
 2025-10-24 00:59:03 -05:00
Ben SiraphobandGitHub c9f97ce391 imagelol: fix darwin and use system libpng (#454413) 2025-10-24 05:48:39 +00:00