Age | Commit message (Collapse) | Author | Files | Lines |
|
[Backport release-23.11] nixos/ollama: add options to bypass sandboxing
|
|
(cherry picked from commit 552eb7596411235edb84b0cb1a3dda0ba3eb5054)
|
|
[Backport release-23.11] nixos/ollama: set service working directory to `home`
|
|
[Backport release-23.11] bob: fix vulnerable dependencies
|
|
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
(cherry picked from commit 39d27661d51150ff5e79eeaf77669df79ca1d0c3)
|
|
[Backport release-23.11] R: apply patch for CVE-2024-27322
|
|
Cherry picked from commit bb9e8704fe7adbc0759112b75acf642f2d1a1a61
Co-authored-by: Tom Fitzhenry <tom@tom-fitzhenry.me.uk>
|
|
Fixes CVE-2024-27285.
Changes:
https://github.com/lsegal/yard/releases/tag/v0.9.36
https://github.com/lsegal/yard/releases/tag/v0.9.35
|
|
risicle/ris-qemu-CVE-2024-3446-CVE-2024-3447-CVE-2024-3567-r23.11
[23.11] qemu: add patches for CVE-2024-3446, CVE-2024-3447, CVE-2024-3567
|
|
[23.11] flatpak: 1.14.4 -> 1.14.6, xdg-desktop-portal: 1.18.1 -> 1.18.4
|
|
[23.11] iwd: apply patches for CVE-2023-52161 and buffer overflows
|
|
https://hiddenlayer.com/research/r-bitrary-code-execution/
Patch has been identified by checking the SCM logs.
I was not able to find another part of the patch.
Fedora 39 went the same way in https://src.fedoraproject.org/rpms/R/c/b1a4e124f24f03916877bc116c1f9e89dd6c34a5?branch=f39
See also https://github.com/spack/spack/issues/43932
(cherry picked from commit 6a3601a1c654e27dc3a39e7732ed4b9972b8247f)
|
|
[Backport release-23.11] discord: 0.0.51 -> 0.0.52
|
|
[Backport release-23.11] google-chrome: move independently of `chromium`, add jnsgruk as maintainer, remove leftover `google-chrome-{beta,dev}` code paths
|
|
(cherry picked from commit 31b789ce8544f66b1cdce6633648cfce28dd0a7d)
|
|
They signaled interest in issue 306010.
(cherry picked from commit 1f88e2fa146c93330846958f95905e3a0d4d9cd3)
|
|
Historically, `google-chrome` used the version info and debian package
FOD provided by `chromium`.
This was very efficient, because `chromium` uses parts of the debian
tarball for Widevine (opt-in, via `.override`).
Meaning `chromium` has to track that debian tarball with each update
anyway.
And they always release in sync.
So why keep seperate `google-chrome` from `chromium` now?
- The current `chromium` maintainers are already at capacity
maintaining `chromium` and have no time for `google-chrome`.
- `chromium` bumps become sometimes a bottleneck for `google-chrome`.
This is because `chromium` is built from source and a lot more time
consuming and significantly more complex.
- Lately, `chromium` and `google-chrome` both had an upstream issue
under wayland with `--ozone-platform-hint`, rendering it unusable.
For `chromium` we were able to patch it, since unlike `google-chrome`
it's built from source.
The `chromium` maintainers simply forgot that `google-chrome` might
have the same issue, continued to merge the PR, rendering
`google-chrome` broken.
This PR also removes primeos from `meta.maintainers` since they only
added themself to `google-chrome` because it inherited `chromium`'s
version, stating they don't actually use `google-chrome`.
Furthermore, primeos no longer maintains `chromium`.
Ref 477e7d6b60e817661632ff3a8aaf2e39c4cceadc
(cherry picked from commit 9f96faf9d8d5ba69f1772d087284bb6d2a67f356)
|
|
Those are leftovers from when `google-chrome-{beta,dev}` were removed
due to lack of maintenance in 59719f787e94f39e64e9086d08eaedd8a9e61b22.
(cherry picked from commit dfd28b0c05d52782f821dbdf5e710a0a5c80d355)
|
|
[Backport release-23.11] linux_xanmod, linux_xanmod_latest: 2024-04-28
|
|
[Backport release-23.11] telegram-desktop: 4.16.8 -> 5.0.0
|
|
Diff: https://github.com/telegramdesktop/tdesktop/compare/v4.16.8...v5.0.0
Changelog: https://github.com/telegramdesktop/tdesktop/releases/tag/v5.0.0
(cherry picked from commit 6ecc2d869a87908becdcf4bc1ad3be8e2a4501d5)
|
|
Fixes a crash in sudo-rs' syslog code
Cherry picked from commit 61046902b55b161c72295ff61a816cc8f372da99
Co-authored-by: R. Ryantm <ryantm-bot@ryantm.com>
|
|
(cherry picked from commit 228e5f2da32d11eeef40bf16bb3caa314e8327e5)
|
|
(cherry picked from commit 66adbf1d9c27158bb75c9b1818a99dd45fc80d98)
|
|
[Backport release-23.11] linux_xanmod, linux_xanmod_latest: 2024-04-22
|
|
[23.11] opentofu: 1.6.2 -> 1.7.0
|
|
(cherry picked from commit 252f8d3423479b53dda86716b78a089188dfd925)
|
|
Diff: https://github.com/opentofu/opentofu/compare/v1.7.0-beta1...v1.7.0
Changelog: https://github.com/opentofu/opentofu/blob/v1.7.0/CHANGELOG.md
(cherry picked from commit aadbdc7d48913fe887fbadeb374203e463457f7d)
|
|
Diff: https://github.com/opentofu/opentofu/compare/v1.7.0-alpha1...v1.7.0-beta1
Changelog: https://github.com/opentofu/opentofu/blob/v1.7.0-beta1/CHANGELOG.md
(cherry picked from commit 5105b4bcbc68e42357ae01796af15ad00c1768fd)
|
|
Diff: https://github.com/opentofu/opentofu/compare/v1.6.2...v1.7.0-alpha1
Changelog: https://github.com/opentofu/opentofu/blob/v1.7.0-alpha1/CHANGELOG.md
(cherry picked from commit 25a4a18d8676fbb51b671cb75b893d2d37ce6a09)
|
|
[Backport release-23.11] rectangle: 0.76 -> 0.77
|
|
follows the commit https://gitlab.com/xanmod/linux/-/commit/b5ad63a6135deb8498ef4476a0a257600ffceafd
(cherry picked from commit ddf4c3d5dce50403692407e39aa863545c8d930c)
|
|
(cherry picked from commit 2b53188c8dc5ca681094967b091f168f071c029a)
|
|
(cherry picked from commit b99a510a43b2beafdb253489597400bf45d50063)
|
|
[Backport release-23.11] opentofu: 1.6.1 -> 1.6.2
|
|
Diff: https://github.com/rxhanson/Rectangle/compare/v0.76..v0.77
Changelog: https://github.com/rxhanson/Rectangle/releases/tag/v0.77
(cherry picked from commit c980864f86473d55b5de97b941fa8f4d11eadf1a)
|
|
[Backport release-23.11] rectangle: 0.75 -> 0.76
|
|
(cherry picked from commit c232935fc72566b811bcf8f2f65a29ede6697709)
|
|
[Backport release-23.11] rectangle: 0.74 -> 0.75
|
|
(cherry picked from commit 4d61ec245f60540a054b944b912b5659dd3baad0)
|
|
Diff: https://github.com/opentofu/opentofu/compare/v1.6.1...v1.6.2
Changelog: https://github.com/opentofu/opentofu/blob/v1.6.2/CHANGELOG.md
(cherry picked from commit 55af7e2300a0b460a9703d9cb159a1c79b027794)
|
|
[Backport release-23.11] Kernel updates for 2024-05-02
|
|
(cherry picked from commit 47b414822ac319788ecbdb3856bae50a0f81a011)
|
|
(cherry picked from commit 870dcb551616a7f99975fc14a1a0a3bc4856017e)
|
|
(cherry picked from commit 26b043649e3c81f02bb3d220591105fff485630a)
|
|
(cherry picked from commit eb076ad45772f3ced1a3f4388a6e44201d1b1172)
|
|
(cherry picked from commit 5db7cfd1965b210b64084767f523425e20cb7205)
|
|
(cherry picked from commit 9a12ebbc0572b521e1ea7f6cc64ab96e7fb83609)
|
|
(cherry picked from commit 4b15ecf11a9e9c64a11647411e0f36747f3e9177)
|
|
(cherry picked from commit a56c95daa1a3d9c581b5bd890c37fb73e043388f)
|