gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,043,046 Commits 9 Branches 0 Tags
current
Commit Graph

520 Commits

Author SHA1 Message Date
Emily fdb820602b treewide: drop simple x86_64-darwin mentions 
To reproduce:

    $ nix run nixpkgs/3b32825de172d0bc85664f495edb096b10862524#ast-grep \
        -- scan --update-all --inline-rules '
          id: nix-x86_64-darwin
          language: nix
          rule:
            any:
              - pattern: "\"x86_64-darwin\""
                kind: list_expression > string_expression
              - pattern:
                  context: "{ \"x86_64-darwin\" = $EXPR; }"
                  selector: binding
              - pattern:
                  context: "{ x86_64-darwin = $EXPR; }"
                  selector: binding
          fix:
            template: ""
        ' pkgs
    $ nix run nixpkgs/3b32825de172d0bc85664f495edb096b10862524#ast-grep \
        -- scan --update-all --inline-rules '
          id: json-first-x86_64-darwin
          language: json
          rule:
            kind: object > pair:nth-child(1)
            has:
              pattern: "\"x86_64-darwin\""
              field: key
          fix:
            template: ""
            expandEnd: { regex: "," }
        ' pkgs
    $ nix run nixpkgs/3b32825de172d0bc85664f495edb096b10862524#ast-grep \
        -- scan --update-all --inline-rules '
          id: json-x86_64-darwin
          language: json
          rule:
            kind: object > pair
            has:
              pattern: "\"x86_64-darwin\""
              field: key
          fix:
            template: ""
            expandStart: { regex: "," }
        ' pkgs
    $ git restore pkgs/by-name/om/omnix/package.nix
    $ git diff --name-only -z \
        | nix shell nixpkgs/3b32825de172d0bc85664f495edb096b10862524#gnused \
            -c xargs -0 sed -i '/^$/N; /^\n\? \+$/d'
    $ treefmt
 2026-07-15 03:58:16 +01:00
Martin Weinelt 67e8f29d94 openssl_3_6: 3.6.2 -> 3.6.3 (#530964) 2026-06-13 14:26:07 +00:00
nixpkgs-ci[bot] 557e97ba7e Merge staging-next into staging 2026-06-13 12:38:13 +00:00
Markus Theil 66c77575f3 openssl_4_0: 4.0.0 -> 4.0.1 
Update to fix multiple CVEs.

See: https://github.com/openssl/openssl/releases/tag/openssl-4.0.1

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-06-12 10:11:29 +02:00
Markus Theil cd221fe379 openssl_3_5: 3.5.6 -> 3.5.7 
Updated to fix multiple CVEs.

See: https://github.com/openssl/openssl/releases/tag/openssl-3.5.7

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-06-12 10:11:29 +02:00
Markus Theil 3ec7a2b088 openssl_3: 3.0.20 -> 3.0.21 
updated to fix multiple CVEs.

See: https://github.com/openssl/openssl/releases/tag/openssl-3.0.21

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-06-12 10:11:25 +02:00
Markus Theil ed6faeb409 openssl_3_6: 3.6.2 -> 3.6.3 
Update to fix multiple CVEs.

See: https://github.com/openssl/openssl/releases/tag/openssl-3.6.3

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-06-12 09:40:47 +02:00
nixpkgs-ci[bot] f50dc660d4 Merge staging-next into staging 2026-05-28 18:54:19 +00:00
Ethan Carter Edwards e848963f6f openssl: set meta.donationPage 
Signed-off-by: Ethan Carter Edwards <ethan@ethancedwards.com>
 2026-05-27 15:38:52 -07:00
nixpkgs-ci[bot] 3dd8c8415d Merge staging-next into staging 2026-05-24 00:43:24 +00:00
Audrey Dutcher 82c51c6fc8 openssl: fix tests on freebsd native 2026-05-22 12:38:45 -04:00
Sizhe Zhao 2b8ae0a0f1 openssl*: enable strictDeps and __structuredAttrs 2026-04-19 11:09:40 +08:00
K900 5d17008f6c Merge remote-tracking branch 'origin/staging-next' into staging 2026-04-18 21:18:53 +03:00
nixpkgs-ci[bot] f360d3dce0 Merge master into staging-next 2026-04-18 12:12:51 +00:00
Sizhe Zhao 9ef1da31a5 openssl_4_0: init at 4.0.0 2026-04-18 14:24:57 +08:00
Markus Theil f61a00a753 openssl: cleanup already upstreamed patches 
Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-04-09 22:26:29 +02:00
dish 2a2d1df32a openssl: 3.0.19 -> 3.0.20, 3.5.5 -> 3.5.6, 3.6.1 -> 3.6.2 (#507974) 2026-04-09 13:28:22 +00:00
Marcel 8390a9a137 openssl_3_6: 3.6.1 -> 3.6.2 2026-04-08 17:27:23 +02:00
Marcel 50e302513a openssl_3_5: 3.5.5 -> 3.5.6 2026-04-08 17:27:23 +02:00
Marcel 782609f5f7 openssl_3: 3.0.19 -> 3.0.20 2026-04-08 17:27:23 +02:00
nixpkgs-ci[bot] efa670fd22 Merge staging-next into staging 2026-03-14 00:22:22 +00:00
nixpkgs-ci[bot] 23ee7d594c Merge master into staging-next 2026-03-14 00:21:49 +00:00
Silvan Mosberger 9ae65c847f teams/security-review: init and add as maintainer (#496902) 2026-03-13 18:41:21 +00:00
Cosima Neidahl 134ef641fa {openssl_3_5,openssl_3_6}: Fix ELF ABI mismatch on powerpc64 (#497525) 2026-03-08 11:39:09 +00:00
OPNA2608 50cfe69800 {openssl_3_5,openssl_3_6}: Fix ELF ABI mismatch on powerpc64 2026-03-07 12:22:48 +01:00
Alexander Bantyev 2839911e81 various: add security-review team as a maintainer 
Adds the @NixOS/security-review team as a maintainer to multiple
packages deemed to be important security-wise.

For the motivation of the package list, see:
https://github.com/NixOS/nixpkgs/issues/494349#issuecomment-4005099033
 2026-03-05 15:19:44 +01:00
nixpkgs-ci[bot] 347c2c32a5 Merge staging-next into staging 2026-03-03 18:17:41 +00:00
Adam C. Stephens c1d68ce984 openssl_3_5: init at 3.5.5 
This is the latest LTS release supported until 2030/03
 2026-03-02 14:58:08 +00:00
Artemis Tosini 714f328f94 openssl: fix 3.6.1 build on mingw 
Remove one out-of-date patch and add a new necessary patch.
 2026-02-12 15:19:11 -05:00
nixpkgs-ci[bot] e217c74eac Merge staging-next into staging 2026-02-06 18:16:24 +00:00
Markus Sütter 196b385317 various: add meta.identifier.cpeParts to a batch of packages 2026-02-02 09:22:55 +01:00
nixpkgs-ci[bot] 42db76d24b Merge staging-next into staging 2026-01-31 00:22:08 +00:00
Marc Brinkmann 61e7d035d3 openssl_1_1: fix build after 3.0.19 patch update 
The security update for OpenSSL 3.0.19 (d1cc6bdd) updated
use-etc-ssl-certs.patch to match the new formatting in 3.0.19,
which removed whitespace from preprocessor directives.

OpenSSL 1.1.1w still uses the old formatting, causing the shared
patch to fail.

This patch restores the old patch files into subfolder `1.1`, they
are byte-for-byte identical (same git blob hash).
 2026-01-29 15:01:10 +01:00
nixpkgs-ci[bot] 604c926bea Merge staging-next into staging 2026-01-28 12:09:03 +00:00
Vladimír Čunát 3fccac4914 openssl_3: 3.0.18 -> 3.0.19 
The second item (severity: High) has possible unauthenticated RCE:
https://www.openwall.com/lists/oss-security/2026/01/27/5
https://github.com/openssl/openssl/blob/openssl-3.0.19/CHANGES.md#openssl-30

The patches differ in whitespace only, as that's what upstream changed.
 2026-01-28 08:15:49 +01:00
Vladimír Čunát eab028a911 openssl: 3.6.0 -> 3.6.1 
The second item (severity: High) has possible unauthenticated RCE:
https://www.openwall.com/lists/oss-security/2026/01/27/5
https://github.com/openssl/openssl/blob/openssl-3.6.1/CHANGES.md#openssl-36

The patches differ in whitespace only, as that's what upstream changed.
 2026-01-27 19:25:36 +01:00
Wolfgang Walther dfe9bbe186 teams/stridtech: drop 2026-01-11 00:14:22 +01:00
David McFarland 8c7629b824 openssl: fix cygwin build 2025-12-05 16:42:42 -04:00
simonzkl 54efca0fbb Reapply "openssl: disable failing test on cross to musl" 
This reverts commit 27278f6e01.
 2025-11-19 19:11:47 +01:00
simonzkl 8efa0cf1e5 Revert "openssl: help build system to detect cross builds" 
This reverts commit 5d006774c0.
 2025-11-19 19:11:37 +01:00
Aleksana 90b011f92a openssl: use --cross-compile-prefix to skip strerror tests (#451454) 2025-11-16 06:45:59 +00:00
Ulrik Strid 0d9bcf4d56 openssl_quantum: init at 3.3.2 (#364167) 2025-11-14 07:39:19 +00:00
Siddharth cad7c1213c openssl_oqs: init 2025-11-11 17:45:26 -06:00
Siddharth 23d0e5f31d openssl: Add provider support 2025-11-11 17:30:40 -06:00
nixpkgs-ci[bot] 487b79eb7a Merge master into staging-next 2025-11-08 12:06:49 +00:00
Grimmauld fdfbb9d05c openssl: don't build tests if check is disabled 2025-11-04 09:24:35 +01:00
K900 6ddff44990 Merge remote-tracking branch 'origin/staging-next' into staging 2025-11-01 11:19:41 +03:00
Ihar Hrachyshka 27278f6e01 Revert "openssl: disable failing test on cross to musl" 
This reverts commit 7500b79a6f.
 2025-10-29 19:18:42 -04:00
Ihar Hrachyshka 5d006774c0 openssl: help build system to detect cross builds 
Specifically, some tests that rely on build and host platforms using the
same libc will then be skipped.
 2025-10-29 19:18:42 -04:00
hellodword fdd903c161 openssl: fix mingwW64 build 2025-10-24 02:10:46 +00:00