Skip to content

staging-next 2025-03-03#386822

Merged
vcunat merged 385 commits intomasterfrom
staging-next
Mar 11, 2025
Merged

staging-next 2025-03-03#386822
vcunat merged 385 commits intomasterfrom
staging-next

Conversation

mweinelt and others added 30 commits February 21, 2025 02:00
Fixes heap overflow vulnerability

GHSA-m99q-5j7x-7m9x

Signed-off-by: Markus Theil <[email protected]>
mweinelt and others added 3 commits March 10, 2025 17:42
tracefs is a special-purpose filesystem in Linux used for tracing filesystem and kernel operations.

This was added to the kernel back in 2015 to replace debugfs. For security reasons, some system do not mount debugfs at all. Tracefs reduces the attack surface by allowing to trace without mounting debugfs. Additionally it provides features not supported by debugfs (such as calls for mkdir and rmdir

Debian and Arch Linux both enable this by default.
RHEL 8 and later, they enable tracefs by default.

Signed-off-by: John Titor <[email protected]>
@github-actions github-actions bot added the 6.topic: printing Drivers, CUPS & Co. label Mar 10, 2025
nixpkgs-ci bot and others added 13 commits March 10, 2025 17:24
- remove unneeded dependencies
- switch to wrapGAppsNoGuiHook
- add patch to fix sound validation similar to icon validation
- rebase other patches
- use a single python env with all test dependencies, as pytest path is hardcoded
  into installed tests
- fix installed tests, reenable location test (it works now)
- clean up a bunch of old hacks

Co-authored-by: aucub <[email protected]>
Co-authored-by: Jan Tojnar <[email protected]>
@github-actions github-actions bot added the 6.topic: mate The MATE Desktop Environment label Mar 11, 2025
@vcunat vcunat merged commit 0d53485 into master Mar 11, 2025
18 of 19 checks passed
@LordMZTE LordMZTE mentioned this pull request Mar 22, 2025
3 tasks
@wolfgangwalther wolfgangwalther added the 4.workflow: staging A staging-next or staging-next-XX.YY branch label May 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 4.workflow: staging A staging-next or staging-next-XX.YY branch 6.topic: golang Go is a high-level general purpose programming language that is statically typed and compiled. 6.topic: kernel The Linux kernel 6.topic: llvm/clang Issues related to llvmPackages, clangStdenv and related 6.topic: mate The MATE Desktop Environment 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 6.topic: ocaml OCaml is a general-purpose, high-level, multi-paradigm programming language. 6.topic: php PHP is a general-purpose scripting language geared towards web development. 6.topic: printing Drivers, CUPS & Co. 6.topic: python Python is a high-level, general-purpose programming language. 6.topic: qt/kde Object-oriented framework for GUI creation 6.topic: ruby A dynamic, open source programming language with a focus on simplicity and productivity. 6.topic: rust General-purpose programming language emphasizing performance, type safety, and concurrency. 6.topic: stdenv Standard environment 6.topic: systemd Software suite that provides an array of system components for Linux operating systems. 6.topic: vim Advanced text editor 8.has: module (update) This PR changes an existing module in `nixos/` 10.rebuild-darwin: 501+ This PR causes many rebuilds on Darwin and should normally target the staging branches. 10.rebuild-darwin: 5001+ This PR causes many rebuilds on Darwin and must target the staging branches. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 5001+ This PR causes many rebuilds on Linux and must target the staging branches.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

curl: version 8.12.0 causes segfault in kodi