gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,043,046 Commits 9 Branches 0 Tags
current
Commit Graph
323 Commits
Author SHA1 Message Date
Morgan Jones d9c82adcfb openssh_gssapi: 10.3p1 -> 10.4p1 2026-07-07 20:22:15 -07:00
Morgan Jones ca5fb292c1 openssh: drop old patches that are now never evaluated 2026-07-07 20:17:00 -07:00
Morgan Jones fe385d83f2 openssh: 10.3p1 -> 10.4p1 2026-07-07 20:15:46 -07:00
Tristan RossandGitHub f4df4db3be openssh_hpn: 10.2p1 -> 10.3p1 (#513862) 2026-05-21 03:49:40 +00:00
Morgan Jones 826411906e openssh_hpn: 10.2p1 -> 10.3p1 2026-05-18 20:15:58 -07:00
Morgan Jones 52b76ad35e openssh_gssapi: 10.2p1 -> 10.3p1 2026-04-19 16:45:03 -07:00
Morgan Jones aa13fbfb81 openssh_gssapi: update patch to latest 2026-04-05 21:09:57 -07:00
Morgan Jones 625b040143 openssh: 10.2p1 -> 10.3p1 2026-04-05 21:09:56 -07:00
Alexander Bantyev 2839911e81 various: add security-review team as a maintainer 
Adds the @NixOS/security-review team as a maintainer to multiple
packages deemed to be important security-wise.

For the motivation of the package list, see:
https://github.com/NixOS/nixpkgs/issues/494349#issuecomment-4005099033
 2026-03-05 15:19:44 +01:00
Markus Sütter 196b385317 various: add meta.identifier.cpeParts to a batch of packages 2026-02-02 09:22:55 +01:00
jopejoe1 2bd7eebb6e ssh-copy-id: set pname and version 2026-01-22 08:18:19 +01:00
Wolfgang Walther 550ed29363 teams/helsinki-systems: drop 2026-01-14 09:46:22 +01:00
nixpkgs-ci[bot]andGitHub a2302e778c Merge master into staging-next 2025-12-24 00:18:15 +00:00
Morgan Jones e6ab94024c openssh: add withAudit (default false) 
libaudit linking should be controllable independently of the static
build and should explicitly be added to configureFlags for users
that need it.
 2025-12-03 13:37:40 -08:00
Morgan Jones b8d7d975b3 openssh: fix PKCS#11 key enumeration and pin entry 
Arch has cherry-picked these commits to fix a bug in OpenSSH's PKCS#11
support; we should do them ourselves too.

https://gitlab.archlinux.org/archlinux/packaging/packages/openssh/-/issues/23

Replace our hand-rolled patch for the PKCS#11 tests with the
corresponding commits landing upstream.

Fixes: #466049
Signed-off-by: Morgan Jones <me@numin.it>
 2025-11-28 14:18:47 -08:00
Alois Wohlschlager 6301423f62 openssh_10_2: drop 
The main openssh package has already been updated in [1].

[1] https://github.com/NixOS/nixpkgs/pull/450658

This reverts commit 249e1f9730.
 2025-10-28 08:37:57 +01:00
nixpkgs-ci[bot]andGitHub 6a088f5b69 Merge staging-next into staging 2025-10-28 00:17:14 +00:00
Masum RezaandGitHub 1aefc212a7 openssh_10_2: init at 10.2p1 (#456258) 2025-10-27 18:23:26 +00:00
Alois Wohlschlager 249e1f9730 openssh_10_2: init at 10.2p1 
OpenSSH 10.1 contains a bug that makes it totally unusable with ControlPersist,
which is fixed in 10.2. Temporarily make the latter available as an option
while the rebuilds go through staging.
 2025-10-27 18:29:41 +01:00
K900 c1f2e30990 Merge remote-tracking branch 'origin/staging-next' into staging 2025-10-26 16:51:01 +03:00
numinitandGitHub 62c129dd33 pkgsStatic.openssh: fix build (#450865) 2025-10-26 07:55:26 +00:00
Morgan Jones aec6faf4d4 openssh: remove special-casing for 10.0p2 version 2025-10-24 23:09:54 -07:00
Morgan Jones 5c98215bcd openssh: fix PKCS#11 tests instead of disabling softhsm 
This is PRed upstream. While we usually do not apply patches to OpenSSH
itself prior to them being merged, this patch simply affects the tests
and lets us re-enable softhsm support.

See: https://github.com/NixOS/nixpkgs/issues/453782
See: https://github.com/openssh/openssh-portable/pull/602
 2025-10-22 22:17:41 -07:00
Ihar Hrachyshka 4a6c158fd6 openssh: --replace -> --replace-fail 2025-10-22 18:20:31 -04:00
Ihar Hrachyshka 061b844928 openssh: split out dev and man outputs 
Splitting `dev` allows to reduce the closure size for static build from
150MB to 75MB.
 2025-10-22 18:19:44 -04:00
nixpkgs-ci[bot]andGitHub ac9a250ff1 Merge staging-next into staging 2025-10-21 12:08:24 +00:00
Vladimír Čunát 5ee8efde22 opensshTest: nixfmt after the previous commit 
I'm sorry.
 2025-10-21 09:08:08 +02:00
Vladimír Čunát e25ac51ecc opensshTest: drop softhsm (failing part of the tests) 
https://github.com/NixOS/nixpkgs/issues/453782
 2025-10-21 09:01:25 +02:00
nixpkgs-ci[bot]andGitHub 202e16ba65 Merge staging-next into staging 2025-10-11 12:06:23 +00:00
nixpkgs-ci[bot]andGitHub e55c47d481 Merge master into staging-next 2025-10-11 12:05:40 +00:00
numinitandGitHub 68ddbb7ebb openssh: 10.1p1 -> 10.2p1 (#450658) 2025-10-11 08:04:12 +00:00
Ihar Hrachyshka 192545a4d0 pkgsStatic.openssh: fix build 
Fixes #445548
 2025-10-10 21:35:43 -04:00
nixpkgs-ci[bot]andGitHub 56806cd8a1 Merge staging-next into staging 2025-10-11 00:16:05 +00:00
nixpkgs-ci[bot]andGitHub e22452a49a Merge master into staging-next 2025-10-11 00:15:25 +00:00
Philip TaronandGitHub eda556d94b treewide: remove usages of obsolete pie hardening flag (#449771) 2025-10-10 15:17:28 -07:00
Thomas GerbetandThomas Gerbet 0014656c61 openssh_gssapi: 10.1p1 -> 10.2p1 
Changes:
https://www.openssh.com/releasenotes.html#10.2p1
 2025-10-10 20:16:55 +02:00
Thomas GerbetandThomas Gerbet 3953af8272 openssh_hpn: 10.1p1 -> 10.2p1 
Changes:
https://www.openssh.com/releasenotes.html#10.2p1
 2025-10-10 20:16:55 +02:00
Philip Taron 3ba43bda1d openssh: make the NixOS tests for openssh test the actual derivation being built 2025-10-10 08:45:06 -07:00
Thomas Gerbet 94830c05ed openssh: 10.1p1 -> 10.2p1 
Changes:
https://www.openssh.com/releasenotes.html#10.2p1
 2025-10-10 14:14:26 +02:00
nixpkgs-ci[bot]andGitHub 7e9e7583ef Merge master into staging-next 2025-10-10 00:16:30 +00:00
Luna Nova e7fbed853b treewide: remove usages of obsolete pie hardening flag 2025-10-09 10:13:03 -07:00
Thomas Gerbet 0a512b2cba openssh_gssapi: 10.0p2 -> 10.1p1 
Fixes CVE-2025-61984 and CVE-2025-61985.

https://www.openssh.com/txt/release-10.1
 2025-10-08 08:23:23 +02:00
Thomas Gerbet 5edafc5d28 openssh_hpn: 10.0p2 -> 10.1p1 
Fixes CVE-2025-61984 and CVE-2025-61985.

https://www.openssh.com/txt/release-10.1
 2025-10-08 08:23:04 +02:00
Janne Heß 70b1318702 openssh: 10.0p2 -> 10.1p1 2025-10-06 12:10:23 +02:00
Ben Wolsieffer 0de27edfbf openssh: remove softhsm ref when cross-compiling 
softhsm is used for tests, which don't run when cross-compiling, but it
was accidentally included anyway due to a mistake in the preCheck
conditionals. This fixes the cross build on armv6l.
 2025-08-06 23:38:09 -04:00
Wolfgang Walther 5a0711127c treewide: run nixfmt 1.0.0 2025-07-24 13:55:40 +02:00
Colin 38f9392f8c openssh: fix compilation to static hosts 2025-06-29 20:34:57 +00:00
Morgan Jones 827ab4b072 openssh: fix a 17 year old bug by using --with-mantype=doc 
Using --with-mantype=man slightly mangles ssh docs:

- See #418140 for the discussion of the part of the issue that causes
  "Ns" to be interspersed throughout the text, which dates back (and
  was reproducible) on nixpkgs from 2007. We discovered several other
  unimplemented control sequences, including -nosplit, Qq, and Mt, as
  well as the lack of spacing.
- Note the comparisons at https://github.com/numinit/ssh-man-compare.

Has been around since deb889e5f2, possibly
even earlier.
 2025-06-24 22:28:58 -07:00
K900 37a72a5aa2 Merge remote-tracking branch 'origin/staging-next' into staging 2025-05-29 12:02:16 +03:00
Morgan Jones 6b961cfe30 openssh: re-add numinit as maintainer 
Got deleted in a treewide merge conflict resolution:

- Originally added: ef4ac4cc7b
- Deleted: f96ac2dcd6
 2025-05-28 01:15:07 -07:00