Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Networking proxy arp fix #62640

Closed
wants to merge 1,504 commits into from
Closed

Networking proxy arp fix #62640

wants to merge 1,504 commits into from

Conversation

kfiz
Copy link

@kfiz kfiz commented Jun 3, 2019

Motivation for this change

Fixes #62339

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
  • Built on platform(s)
    • NixOS
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Assured whether relevant documentation is up to date
  • Fits CONTRIBUTING.md.

Mic92 and others added 30 commits May 9, 2019 11:17
same motivation as in 7b77c27

(cherry picked from commit 8e1852a)
…#61187)

linux_{5_0,5_1,testing}: restore __kernel_fpu_{begin,restore} [19.03]
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/wireguard-tools/versions

(cherry picked from commit 08a62e0)
Ensure that only module-related targets from the project's Makefile are
built.

Co-authored-by: elseym <elseym@me.com>
Co-authored-by: Franz Pletz <fpletz@fnordicwalking.de>
(cherry picked from commit 2c3ab52)
wireguard: 0.0.20190123 -> 0.0.20190406 [backport 19.03]
It does not make sense to keep outdated minor versions

(cherry picked from commit c7b36b7)
(cherry picked from commit 78cb9b7)
Backport "elk: 7.0.0 -> 7.0.1" to release-19.03
Version 6.x is also the default for the other beats.

(cherry picked from commit a662f99)
this should fix CVE-2018-3836, CVE-2018-7186, CVE-2018-7247 & CVE-2018-7440

a fix for CVE-2018-7441 & CVE-2018-7442 is *not* included as its patches
are very wide-ranging

also enable tests to give confidence that I'm not completely butchering
the code
(cherry picked from commit bad4902)
(cherry picked from commit 29d35a9)
[r19.03 backport] leptonica: patch multiple CVEs
It's a port of #55442 to master.

(cherry picked from commit b1565e5)
I was surprised the build is so slow, and I see it's single-threaded
due to all work being done in install phase :-/
Please, do *not* rewrite phases unless you're really confident it's
a good approach; typically postFoo and preFoo is much better.

I considered filing this ffmpeg-related string of changes as a PR,
but in the end it doesn't seem likely to need review and we have too
many PRs as it is...

(cherry picked from commit 5236232)
(cherry picked from commit 58213cd)
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/libssh2/versions

(cherry picked from commit 75bbd76)
Seems suitable: https://www.libssh2.org/changes.html#1.8.2
(cherry picked from commit e6e3673)
@joachifm
Copy link
Contributor

joachifm commented Jun 4, 2019

Please rebase

@kfiz
Copy link
Author

kfiz commented Jun 4, 2019

yikes. sry. See #62671

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

networking.interfaces.<name?>.proxyARP doesn't enable IPv4 forwarding