Samuel Dionne-Riel
284f3600c4
avahi: Handle 5 security findings
...
- CVE-2025-68276 / GHSA-mhf3-865v-g5rc
- CVE-2025-68468 / GHSA-cp79-r4x9-vf52
- CVE-2025-68471 / GHSA-56rf-42xr-qmmg
- CVE-2026-24401 / GHSA-h4vp-5m8j-f6w3
- CVE-2026-34933 / GHSA-w65r-6gxh-vhvc
2026-04-08 11:54:46 -04:00
Samuel Dionne-Riel
10557b50b5
avahi: Add commented-out knownVulnerabilities for CVE-2024-52615
...
It would be better if there was a way to mark those mitigated issues in
a way that can be machine-consumed, without causing the package to be
marked insecure.
In actuality, the `insecure` bit for this particular vulnerability would
dpeend on the daemon configuration. The package itself cannot depend on
the system configuration.
A warning could be added to the NixOS module when the mitigation is
disabled.
2026-04-08 11:54:45 -04:00
Samuel Dionne-Riel
f386db92db
avahi: Add disabled patch for CVE-2024-52615
...
The CVE-2024-52615 fix introduces another security issue,
CVE-2025-59529.
Instead CVE-2024-52615 will be mitigated via system configuration.
2026-04-08 11:54:37 -04:00
Martin Weinelt and GitHub
68d8aa3d66
home-assistant-custom-lovelace-modules.bubble-card: 3.1.1 -> 3.1.6 ( #507017 )
2026-04-05 21:03:29 +00:00
Pavol Rusnak and GitHub
32859dbd6f
python3Packages.ffmpeg-progress-yield: 1.1.2 -> 1.1.3 ( #507062 )
2026-04-05 21:03:17 +00:00
kirillrdy and GitHub
df57418221
nextpnr: 0.9-unstable-2026-02-08 -> 0.10 ( #500969 )
2026-04-05 21:03:13 +00:00
nixpkgs-ci[bot] and GitHub
87afe22daa
renode-unstable: 1.16.1-unstable-2026-03-31 -> 1.16.1-unstable-2026-04-03 ( #506808 )
2026-04-05 20:59:05 +00:00
Pol Dellaiera and GitHub
cbfe24f99c
smiley-sans: use installFonts hook ( #505696 )
2026-04-05 20:57:32 +00:00
Pol Dellaiera and GitHub
887f370b0c
hubot-sans: use installFonts hook ( #505705 )
2026-04-05 20:57:12 +00:00
Pol Dellaiera and GitHub
1b0a9b584d
code: 0.6.83 -> 0.6.90 ( #505886 )
2026-04-05 20:54:52 +00:00
Pol Dellaiera and GitHub
1f9e7c4365
scientifica: use installFonts ( #506022 )
2026-04-05 20:54:14 +00:00
Pol Dellaiera and GitHub
7ef1591245
diffoscope: 315 -> 316 ( #506092 )
2026-04-05 20:53:13 +00:00
Pol Dellaiera and GitHub
5a71a23fac
runc: 1.4.1 -> 1.4.2 ( #506191 )
2026-04-05 20:53:04 +00:00
Pol Dellaiera and GitHub
ccfceab851
jetty: 12.1.7 -> 12.1.8 ( #506202 )
2026-04-05 20:52:01 +00:00
Pol Dellaiera and GitHub
d703e7a14d
python3Packages.instructor: 1.14.5 -> 1.15.1 ( #506262 )
2026-04-05 20:51:39 +00:00
Pol Dellaiera and GitHub
391a30167f
museum: 1.3.24 -> 1.3.28 ( #506268 )
2026-04-05 20:50:57 +00:00
Pol Dellaiera and GitHub
a92154dd8a
laravel: 5.24.10 -> 5.25.2 ( #506559 )
2026-04-05 20:42:56 +00:00
Pol Dellaiera and GitHub
cd3f48902e
blst: fix incorrect pkg-config flags ( #506965 )
2026-04-05 20:41:46 +00:00
nixpkgs-ci[bot] and GitHub
768c5cd621
ludusavi: 0.30.0 -> 0.31.0 ( #506830 )
2026-04-05 20:41:34 +00:00
Pol Dellaiera and GitHub
2efb1c1307
cpeditor: 7.0.1 -> 7.0.2 ( #506966 )
2026-04-05 20:41:14 +00:00
Pol Dellaiera and GitHub
f16991f7f2
isolate: 2.2 -> 2.3 ( #506806 )
2026-04-05 20:40:26 +00:00
Pol Dellaiera and GitHub
8a6095e0da
penna: use installFonts ( #506918 )
2026-04-05 20:38:52 +00:00
Pol Dellaiera and GitHub
91aab9aed9
valhalla: 3.5.1 -> 3.6.3 ( #506961 )
2026-04-05 20:37:44 +00:00
Pol Dellaiera and GitHub
02239ec814
nixos/drupal: refactor sites dir interface ( #506644 )
2026-04-05 20:34:35 +00:00
R. Ryantm
4471170f92
python3Packages.ffmpeg-progress-yield: 1.1.2 -> 1.1.3
2026-04-05 20:30:06 +00:00
Thomas Gerbet and GitHub
9c95ce8f93
filebrowser: 2.61.2 -> 2.62.2 [CVE] ( #506228 )
2026-04-05 20:29:30 +00:00
Andrew Benbow
f2cfbe07c3
nixos/drupal: refactor sites dir interface
2026-04-05 16:28:20 -04:00
Gaétan Lepage and GitHub
a8590c844a
python3Packages.dm-tree: 0.1.9 -> 0.1.10 ( #506906 )
2026-04-05 20:19:49 +00:00
Pol Dellaiera and GitHub
f46e46fa54
claude-usage-tracker: init at 3.0.3 ( #507019 )
2026-04-05 20:19:44 +00:00
Pol Dellaiera and GitHub
4a82cdae97
mago: 1.13.3 -> 1.18.1 ( #507047 )
2026-04-05 20:19:42 +00:00
Pol Dellaiera and GitHub
d9673dc9c0
python3Packages.unifi-discovery: 1.2.0 -> 1.3.0 ( #506974 )
2026-04-05 20:17:43 +00:00
Pol Dellaiera and GitHub
e76d0dc19e
air: 1.64.5 -> 1.65.0 ( #506972 )
2026-04-05 20:17:29 +00:00
nixpkgs-ci[bot] and GitHub
ff7878f6db
mprisence: 1.4.5 -> 1.5.1 ( #506862 )
2026-04-05 20:16:48 +00:00
Pol Dellaiera and GitHub
a0e02efe95
greed: 4.3 -> 4.5 ( #506363 )
2026-04-05 20:15:55 +00:00
Pol Dellaiera and GitHub
1ea8a4ef10
hey-mail: 1.2.17 -> 1.3.1 ( #506368 )
2026-04-05 20:14:37 +00:00
Pol Dellaiera and GitHub
0aa54355d4
vscode-extensions.wakatime.vscode-wakatime: 29.0.3 -> 30.0.4 ( #506460 )
2026-04-05 20:14:27 +00:00
Pol Dellaiera and GitHub
e2b0ef0941
python3Packages.ignite: 0.5.3 -> 0.5.4 ( #506474 )
2026-04-05 20:14:18 +00:00
Pol Dellaiera and GitHub
6378235e03
vscode-extensions.foam.foam-vscode: 0.33.0 -> 0.35.0 ( #506483 )
2026-04-05 20:13:16 +00:00
Pol Dellaiera and GitHub
ca500ec1ea
vscode-extensions.waderyan.gitblame: 13.0.0 -> 13.0.1 ( #506487 )
2026-04-05 20:13:09 +00:00
Pol Dellaiera and GitHub
c20439bf17
vscode-extensions.prisma.prisma: 31.6.0 -> 31.8.0 ( #506492 )
2026-04-05 20:13:04 +00:00
Pol Dellaiera and GitHub
23f8b4aba0
typos-lsp: 0.1.50 -> 0.1.51 ( #506543 )
2026-04-05 20:12:15 +00:00
Gaetan Lepage
49e6626ca8
python3Packages.dm-tree: 0.1.9 -> 0.1.10
...
Diff: https://github.com/deepmind/tree/compare/0.1.9...0.1.10
Changelog: https://github.com/google-deepmind/tree/releases/tag/0.1.10
2026-04-05 20:11:27 +00:00
Pol Dellaiera and GitHub
494297a694
inspircd: 4.9.0 -> 4.10.0 ( #506598 )
2026-04-05 20:11:26 +00:00
Pol Dellaiera and GitHub
66655121d4
typos: 1.44.0 -> 1.45.0 ( #506602 )
2026-04-05 20:10:24 +00:00
Pol Dellaiera and GitHub
f00d64a734
leetgo: 1.4.16 -> 1.4.17 ( #506606 )
2026-04-05 20:10:10 +00:00
Pol Dellaiera and GitHub
ea5c434394
catimg: 2.7.0 -> 2.8.0 ( #506618 )
2026-04-05 20:09:46 +00:00
Pol Dellaiera and GitHub
6d054f121e
opencode: generate and passthru schema for config.json and tui.json ( #506689 )
2026-04-05 20:07:51 +00:00
Thiago Kenji Okada and GitHub
589a85ee34
libretro.ppsspp: 0-unstable-2026-03-27 -> 0-unstable-2026-03-31 ( #507009 )
2026-04-05 20:01:39 +00:00
Pol Dellaiera and GitHub
39b5de7038
emptty: 0.16.0 -> 0.16.1 ( #506682 )
2026-04-05 19:59:00 +00:00
Peder Bergebakken Sundt and GitHub
886976b8db
veryl: 0.19.0 -> 0.19.1 ( #505766 )
2026-04-05 19:58:55 +00:00
Samuel Dionne-Riel