From 2a894ad59322825411a3968c9795f05d7d8ea2e9 Mon Sep 17 00:00:00 2001 From: Daniel McCarney Date: Sat, 21 Mar 2026 09:57:47 -0400 Subject: [PATCH] rustls-ffi: 0.15.0 -> 0.15.1 This addresses RUSTSEC-2026-0049 by updating rustls-ffi from 0.15.0 to 0.15.1. Additionally, it fixes the pass-through tests which otherwise failed with a configure error of the form: "the detected TLS library does not support QUIC, making --with-ngtcp2 a no-no" --- pkgs/by-name/ru/rustls-ffi/package.nix | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/ru/rustls-ffi/package.nix b/pkgs/by-name/ru/rustls-ffi/package.nix index dd918af7ca30..71f69ebf2ec5 100644 --- a/pkgs/by-name/ru/rustls-ffi/package.nix +++ b/pkgs/by-name/ru/rustls-ffi/package.nix @@ -15,18 +15,18 @@ stdenv.mkDerivation (finalAttrs: { pname = "rustls-ffi"; - version = "0.15.0"; + version = "0.15.1"; src = fetchFromGitHub { owner = "rustls"; repo = "rustls-ffi"; tag = "v${finalAttrs.version}"; - hash = "sha256-m92kWH+J8wuGmI0msrp2aginY1K51iqgi3+u4ncmfts="; + hash = "sha256-mqC5uKkFIVVZW+7Z+8PF2lhx/6TVsKX4DW6oQuMMtDw="; }; cargoDeps = rustPlatform.fetchCargoVendor { inherit (finalAttrs) pname version src; - hash = "sha256-gqc6en59QQpD14hOgRuGEPWLvrkyGn9tPR9vQmRAxIg="; + hash = "sha256-ugU2tfG9VUvOhMeOQ4A+MBQIEw+bYb2dZllXrztQtrg="; }; propagatedBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [ @@ -62,6 +62,7 @@ stdenv.mkDerivation (finalAttrs: { curl = curl.override { opensslSupport = false; rustlsSupport = true; + http3Support = false; # rustls-ffi doesn't yet support QUIC rustls-ffi = finalAttrs.finalPackage; }; pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage; @@ -76,6 +77,9 @@ stdenv.mkDerivation (finalAttrs: { asl20 isc ]; - maintainers = [ lib.maintainers.lesuisse ]; + maintainers = [ + lib.maintainers.lesuisse + lib.maintainers.cpu + ]; }; })