Commit Graph
682384 Commits
Author SHA1 Message Date
EmilyandGitHub 3fbe70f3be OpenSSL maintenance 2024/09 (#339614) 2024-09-16 11:07:54 +01:00
Markus Theil 5b19e716f3 mention new OpenSSL default version in release notes
The new OpenSSL default 3.3.x increased the default security level,
mention this in release notes.

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 09:45:58 +02:00
Markus Theil 7ceece975d tpm2-tss: test with better maintained swtpm
Switch tpm2-tss to swtpm, which is more widely used than the IBM one.
tpm2-tss contains tests for both TPM 2.0 emulators.

This fixes a failing test, with the updated IBM sw tpm version.

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 09:44:41 +02:00
Markus Theil 7eb51a716e ibm-sw-tpm2: 1682 -> 1682-unstable-2024-08-02
In order to fix build with more recent OpenSSL versions (3.2.x+)
use new Github upstream URL, which is more recent than the sourceforge
release.

Only a tag and no release is made, so use the unstable versioning
scheme.

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 09:44:41 +02:00
Markus Theil 2cd1c935bb openssl_3_2: 3.2.2 -> 3.2.3
Contains two CVE fixes.

* Fixed possible denial of service in X.509 name checks. (CVE-2024-6119)
* Fixed possible buffer overread in SSL_select_next_proto(). (CVE-2024-5535)

Changelog: https://github.com/openssl/openssl/blob/openssl-3.2/CHANGES.md#changes-between-322-and-323-3-sep-2024

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 09:44:41 +02:00
Markus Theil 6fef5775cc openssl_3: 3.0.14 -> 3.0.15
Contains two CVE fixes.

* Fixed possible denial of service in X.509 name checks. (CVE-2024-6119)
* Fixed possible buffer overread in SSL_select_next_proto(). (CVE-2024-5535)

Changelog: https://github.com/openssl/openssl/blob/openssl-3.0/CHANGES.md#changes-between-3014-and-3015-3-sep-2024

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 09:44:41 +02:00
Markus Theil 64ab30598c openssl_3_3: 3.3.1 -> 3.3.2
Contains two CVE fixes.

* Fixed possible denial of service in X.509 name checks. (CVE-2024-6119)
* Fixed possible buffer overread in SSL_select_next_proto(). (CVE-2024-5535)

Changelog: https://github.com/openssl/openssl/blob/openssl-3.3/CHANGES.md#changes-between-331-and-332-3-sep-2024

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 09:44:41 +02:00
Markus Theil 7932bf5656 openssl: set default to openssl_3_3
OpenSSL releases different versions in parallel (currently active are
3.0.x, 3.1.x, 3.2.x, 3.3.x). IMHO We should try to stay on the most recent
release line, as probably not all security relevant fixes are identified
as such upstream and get backported.

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 09:44:41 +02:00
Markus Theil 38f10f915a openssl: switch to new download URL scheme (Github releases)
OpenSSL used to provide their software downloads on openssl.org.
Now they use links to Github releases.

OpenSSL 1.1.1w is also available at Github, but with a small
difference in the URL scheme.

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 09:44:40 +02:00
github-actions[bot]andGitHub 1c4acc409e Merge staging-next into staging 2024-09-16 06:05:33 +00:00
github-actions[bot]andGitHub 550639643c Merge master into staging-next 2024-09-16 06:05:08 +00:00
Paul MeyerandGitHub 0282c8767e dnf5: 5.2.5.0 -> 5.2.6.0 (#341970) 2024-09-16 08:00:20 +02:00
Rick van SchijndelandGitHub 99dc8785f6 hydra: 0-unstable-2024-08-27 -> 0-unstable-2024-09-15 (#342194) 2024-09-16 07:08:36 +02:00
Fabián Heredia MontielandGitHub b6227cadb5 python312Packages.datafusion: 38.0.1 -> 40.1.0 (#341997) 2024-09-15 21:38:17 -06:00
Lin JianandGitHub b4af5c7b2d emacsPackages.eglot: only build info manual when needed (#342184) 2024-09-16 11:06:10 +08:00
Lin JianandGitHub f5f9d0703b emacs: do not do native compilation for .dir-locals.el (#342178) 2024-09-16 11:05:51 +08:00
nixpkgs-merge-bot[bot]andGitHub 7e20c9cd44 sn0int: 0.26.0 -> 0.26.1 (#342093) 2024-09-16 02:51:43 +00:00
zowoq f550781924 hydra: 0-unstable-2024-08-27 -> 0-unstable-2024-09-15 2024-09-16 02:37:36 +00:00
zowoq 4d0986e5ff hydra: add unstableGitUpdater 2024-09-16 12:36:39 +10:00
Fabián Heredia MontielandGitHub 042b10441d SDL1: fix building for musl with GCC 14 (#342139) 2024-09-15 20:25:26 -06:00
Robert SchützandGitHub 8469873301 iptsd: 2 -> 3 (#341945) 2024-09-15 19:16:10 -07:00
AleksanaandGitHub a9312b0ca0 musescore: Switch to the more minimalist wrapGAppsNoGuiHook (#342089) 2024-09-16 09:56:03 +08:00
AleksanaandGitHub 28df6f7772 doc/stdenv/stdenv: document runHook function (#341972) 2024-09-16 09:54:06 +08:00
AleksanaandGitHub cb84b9331f hackgregator: init at 0.5.0-unstable-2023-12-05 (#341744) 2024-09-16 09:53:14 +08:00
R. RyanTMandGitHub 395d3350e4 ircdog: 0.5.4 -> 0.5.5 (#342181)
https://github.com/ergochat/ircdog/releases/tag/v0.5.5
2024-09-16 03:42:22 +02:00
Lin Jian 13cdb0775b emacsPackages.eglot: only build info manual when needed 2024-09-16 09:42:12 +08:00
Lin Jian 05d1238642 emacs: do not do native compilation for .dir-locals.el
This file is not a valid Emacs lisp file.

Some packages, such as auctex, el-get, helm and org, include this file
without using no-byte-compile in file-local variables to skip native
compilation, causing native compilation error like this:

Wrong type argument: "/nix/store/<hash>-emacs-org-9.7.10/share/emacs/site-lisp/elpa/org-9.7.10/.dir-locals.el", proper-list-p, (#<symbol org-edit-src-content-indentation at 304> . 0)

Some[1,2,3] of them decide to exclude this file.  Org includes this
file intendedly[4] but may add no-byte-compile to file-local
variables.  Hopefully, newer versions of them do not have this error.
However, to support old versions of them and potentially other new
packages with this problem, let's filter out this file in Nixpkgs.

[1]: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=73215
[2]: https://github.com/melpa/melpa/pull/9164
[3]: https://github.com/melpa/melpa/pull/9165
[4]: https://lists.gnu.org/archive/html/emacs-orgmode/2024-09/msg00179.html
2024-09-16 09:06:10 +08:00
rewineandGitHub 072a683017 simdutf: 5.4.15 -> 5.5.0 (#342126) 2024-09-16 08:36:01 +08:00
Peder Bergebakken SundtandGitHub ed43488d78 nomad-driver-containerd: init at 0.9.4 (#330775) 2024-09-16 02:32:49 +02:00
Peder Bergebakken SundtandGitHub 7226dd4070 tocpdf: init at 0.3.3 (#319145) 2024-09-16 02:22:49 +02:00
github-actions[bot]andGitHub 7aea2e99a8 Merge staging-next into staging 2024-09-16 00:14:57 +00:00
github-actions[bot]andGitHub 6eb4ee7d5e Merge master into staging-next 2024-09-16 00:14:32 +00:00
nixpkgs-merge-bot[bot]andGitHub f05282e212 regal: 0.25.0 -> 0.26.2 (#342119) 2024-09-16 00:12:20 +00:00
Peder Bergebakken SundtandGitHub 731d8683b2 hterm: init at 0.8.9 (#315966) 2024-09-16 02:05:32 +02:00
Peder Bergebakken SundtandGitHub c1fd2d5e9c prometheus-elasticsearch-exporter: init at 1.7.0 (#341475) 2024-09-16 01:54:55 +02:00
Lin JianandGitHub 622210b8ce emacsPackages.mu4e: misc improvements (#342147) 2024-09-16 07:52:13 +08:00
Peder Bergebakken SundtandGitHub 0bf16eb3ad doc/hooks/haredo: add documentation (#341886) 2024-09-16 01:44:20 +02:00
Luke Granger-BrownandGitHub 4d3269da01 envoy: 1.31.0 -> 1.31.1 (#342061) 2024-09-16 00:24:25 +01:00
KFearsoffandGitHub ad11a7357b maintainers: remove kfears (#342128)
remove kfears from maintainers
2024-09-16 00:57:14 +02:00
Peder Bergebakken SundtandGitHub 401a65280e kak-tree-sitter: init at 1.1.2 (#333951) 2024-09-16 00:21:16 +02:00
Philip TaronandGitHub eab44e8200 nixos/networking.firewall: fix refactor regression (#342159) 2024-09-15 15:17:11 -07:00
azahi 94c62f5036 nixos/networking.firewall: fix refactor regression
This fixes a regression that was introduced in #335631
2024-09-16 01:10:55 +03:00
Peder Bergebakken SundtandGitHub 9ef4e81f58 spacectl: init at 1.0.1 (#325033) 2024-09-16 00:10:01 +02:00
Jörg ThalheimandGitHub ba74d07245 treewide: remove a bunch of unmaintained and old packages (#341837) 2024-09-16 00:00:19 +02:00
Peder Bergebakken SundtandGitHub 039b72d0c7 mpvScripts.mpv-osc-tethys: init at 0-unstable-2024-08-19 (#335785) 2024-09-15 23:49:16 +02:00
Peder Bergebakken SundtandGitHub d109b34ab6 ayatana-ido,libayatana-indicator: move to pkgs/by-name and fix cross compilation (#338790) 2024-09-15 23:27:45 +02:00
Lin Jian 8acaf55d0a emacsPackages.mu4e: add linj to maintainers 2024-09-16 05:21:41 +08:00
Lin Jian 859dde2eb5 emacsPackages.mu4e: stop setting wrong meta.mainProgram 2024-09-16 05:13:25 +08:00
Lin Jian be4319b918 emacsPackages.mu4e: build package tarball in postBuild instead 2024-09-16 05:12:57 +08:00
Lin Jian 16f8c53652 emacsPackages.mu4e: make pname and version overridable 2024-09-16 05:10:55 +08:00