From 4b31278cdc9880fe2e0927b8bacecfb9cac990d5 Mon Sep 17 00:00:00 2001 From: Markus Theil Date: Fri, 8 May 2026 19:39:13 +0200 Subject: [PATCH 1/3] botan3: 3.11.1 -> 3.12.0 Fixes: (CVE-2026-44378): BER decoding denial of service Signed-off-by: Markus Theil --- pkgs/by-name/bo/botan3/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/bo/botan3/package.nix b/pkgs/by-name/bo/botan3/package.nix index 512bc3de9d12..665977d0123d 100644 --- a/pkgs/by-name/bo/botan3/package.nix +++ b/pkgs/by-name/bo/botan3/package.nix @@ -60,7 +60,7 @@ let ''; in stdenv.mkDerivation (finalAttrs: { - version = "3.11.1"; + version = "3.12.0"; pname = "botan"; __structuredAttrs = true; @@ -82,7 +82,7 @@ stdenv.mkDerivation (finalAttrs: { owner = "randombit"; repo = "botan"; tag = finalAttrs.version; - hash = "sha256-AzQ/IblJF2atUXBTwI+84gmcceVQ6aMMElS3wOsfUDM="; + hash = "sha256-2ODTjqsWSmlornOKh5m6pOX7cNOBHS3+ALblRyC8lPw="; }; nativeBuildInputs = [ From e3512cc0ea108565ae61f365f752a2dbc2e8edea Mon Sep 17 00:00:00 2001 From: Markus Theil Date: Sun, 10 May 2026 19:32:25 +0200 Subject: [PATCH 2/3] haskellPackages.botan-low: 0.1.0.0 -> 0.2.0.1 Signed-off-by: Markus Theil --- pkgs/development/haskell-modules/configuration-common.nix | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/pkgs/development/haskell-modules/configuration-common.nix b/pkgs/development/haskell-modules/configuration-common.nix index e8d9286f0706..53b00d5220ba 100644 --- a/pkgs/development/haskell-modules/configuration-common.nix +++ b/pkgs/development/haskell-modules/configuration-common.nix @@ -3351,6 +3351,14 @@ with haskellLib; stripe-concepts = doJailbreak super.stripe-concepts; stripe-signature = doJailbreak super.stripe-signature; stripe-wreq = doJailbreak super.stripe-wreq; + + # 2026-05-10: Remove again, when hackage bump is recent enough + botan-low = overrideCabal { + version = "0.2.0.1"; + sha256 = "sha256-yC+GJDNO58TIc197Mgn/vqpt4fY3YghLhJfmGkQjsxk="; + revision = null; + editedCabalFile = null; + } (warnAfterVersion "0.2.0.1" super.botan-low); } // import ./configuration-tensorflow.nix { inherit pkgs haskellLib; } self super From 6458bafb729fade6d4d21991a080b2059e7efdd3 Mon Sep 17 00:00:00 2001 From: Markus Theil Date: Sun, 10 May 2026 19:32:53 +0200 Subject: [PATCH 3/3] haskellPackages.botan-bindings: 0.2.0.0 -> 0.3.0.0 Signed-off-by: Markus Theil --- pkgs/development/haskell-modules/configuration-common.nix | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/pkgs/development/haskell-modules/configuration-common.nix b/pkgs/development/haskell-modules/configuration-common.nix index 53b00d5220ba..cd1831da650c 100644 --- a/pkgs/development/haskell-modules/configuration-common.nix +++ b/pkgs/development/haskell-modules/configuration-common.nix @@ -3359,6 +3359,14 @@ with haskellLib; revision = null; editedCabalFile = null; } (warnAfterVersion "0.2.0.1" super.botan-low); + + # 2026-05-10: Remove again, when hackage bump is recent enough + botan-bindings = overrideCabal { + version = "0.3.0.0"; + sha256 = "sha256-tsarIc3LcUKPgSWZ+xcGPWGO2f9OF6SWHB6nmX/vJYw="; + revision = null; + editedCabalFile = null; + } (warnAfterVersion "0.3.0.0" super.botan-bindings); } // import ./configuration-tensorflow.nix { inherit pkgs haskellLib; } self super