gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
936,430 Commits 9 Branches 0 Tags
4da05a7076ff657457ada5c5e8fdee6a978e4b0e
Commit Graph
936430 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Philip Taron 4da05a7076 quickjs: mark vulnerable for CVE-2026-1144, CVE-2026-1145 
These vulnerabilities affect quickjs 2025-09-13-2 and earlier:

- CVE-2026-1144: use-after-free in Atomics Ops Handler
- CVE-2026-1145: heap-based buffer overflow in js_typed_array_constructor_ta

Upstream fix is pending: https://github.com/bellard/quickjs/pull/483

Once the PR is merged and a new release is available, this package
should be updated and the knownVulnerabilities removed.
 2026-01-28 14:29:22 -08:00
Philip Taron b06212255a quickjs-ng: fix CVE-2026-1144, CVE-2026-1145 
These vulnerabilities affect quickjs-ng 0.11.0 and earlier:

- CVE-2026-1145: heap-based buffer overflow in js_typed_array_constructor_ta
  https://github.com/quickjs-ng/quickjs/issues/1305

- CVE-2026-1144: use-after-free in Atomics Ops Handler
  https://github.com/quickjs-ng/quickjs/issues/1301
  https://github.com/quickjs-ng/quickjs/issues/1302

Apply upstream patches as no new release is available yet.
 2026-01-28 14:25:00 -08:00
Robert HensingandGitHub 45c24c18c2 nixVersions.git: fix cygwin build (#483426) 2026-01-28 21:12:54 +00:00
Pol DellaieraandGitHub c4b6a0009f iosevka-bin: 34.0.0 -> 34.1.0 (#484626) 2026-01-28 21:10:11 +00:00
AnthonyandGitHub e2a8bd293f python3Packages.python-aodhclient: 3.9.1 -> 3.10.0 (#483311) 2026-01-28 21:07:22 +00:00
Gaétan LepageandGitHub 372e718427 python3Packages.fastmcp: disable flaky test on Darwin (#484490) 2026-01-28 21:07:08 +00:00
Gaétan LepageandGitHub cf8c962f16 python3Packages.paramax: 0.0.3 -> 0.0.5 (#484851) 2026-01-28 21:06:32 +00:00
AnthonyandGitHub 5482f4b7c6 python3Packages.python-openstackclient: 8.2.0 -> 8.3.0 (#484233) 2026-01-28 21:05:26 +00:00
Gergő GutyinaandGitHub 6bc0621ff4 usb-modeswitch-data: refactor into its own package (#484584) 2026-01-28 20:59:21 +00:00
Gaétan LepageandGitHub 0a46f5fce1 python3Packages.py-key-value-aio: drop pytest-xdist due to test crashes (#484275) 2026-01-28 20:56:37 +00:00
R. RyantmandGaetan Lepage 027ef50d06 python3Packages.paramax: 0.0.3 -> 0.0.5 2026-01-28 20:51:14 +00:00
Gergő GutyinaandGitHub 090fc84af7 vtfedit: use scopes as arguments, remove all-packages.nix override (#484596) 2026-01-28 20:50:50 +00:00
nixpkgs-ci[bot]andGitHub 2540649d83 qrrs: 0.1.10 -> 0.1.11 (#484848) 2026-01-28 20:49:57 +00:00
Gergő GutyinaandGitHub 54dfdcc9c6 rescript-language-server: use scopes as arguments, remove all-packages.nix override (#484594) 2026-01-28 20:48:58 +00:00
Sarah ClarkandGaetan Lepage ab99ecdf53 python3Packages.py-key-value-aio: drop pytest-xdist 
see https://github.com/strawgate/py-key-value/issues/266
 2026-01-28 20:48:43 +00:00
Bjørn ForsmanandGitHub 3407edd68c espeak-ng: enable compat symlinks like before (#482043) 2026-01-28 20:48:41 +00:00
Gergő GutyinaandGitHub a7f23b1af4 {vanillatd,vanillara}: use explicit default values, remove override in all-packages.nix (#484586) 2026-01-28 20:47:40 +00:00
Gergő GutyinaandGitHub 6fda5f2dee element-web: use explicit default values, remove override in all-packages.nix (#484588) 2026-01-28 20:45:46 +00:00
Gaétan LepageandGitHub d90dc4a981 python3Packages.jishaku: 2.6.0 -> 2.6.3 (#482837) 2026-01-28 20:40:01 +00:00
Gaétan LepageandGitHub b362ed47ab zed-editor: 0.220.6 -> 0.221.4 (#484798) 2026-01-28 20:39:52 +00:00
AnthonyandGitHub f86e9fe549 python3Packages.python-ironicclient: 5.14.0 -> 5.15.0 (#484238) 2026-01-28 20:28:45 +00:00
Gaétan LepageandGitHub 63b8d60737 python3Packages.nvidia-ml-py: 13.590.44 -> 13.590.48 (#484778) 2026-01-28 20:23:53 +00:00
Thiago Kenji OkadaandGitHub 804b24ed57 unrar-free: fix darwin build (#484831) 2026-01-28 20:22:40 +00:00
Gergő GutyinaandGitHub 1c395f100d dunst: 1.13.0 -> 1.13.1 (#484823) 2026-01-28 20:22:14 +00:00
R. Ryantm ce65ac2ef6 qrrs: 0.1.10 -> 0.1.11 2026-01-28 20:18:42 +00:00
JoandGitHub cc3ab37cdf firefox-{beta,devedition}-unwrapped: 148.0b{6,7} -> 148.0b8 (#484839) 2026-01-28 20:08:19 +00:00
kirillrdyandGitHub d7973e76dd exo: 1.0.65 -> 1.0.67 (#484190) 2026-01-28 20:05:33 +00:00
jopejoe1 b636b70996 firefox-devedition-unwrapped: 148.0b7 -> 148.0b8 2026-01-28 20:01:36 +00:00
jopejoe1 cec49b77af firefox-beta-unwrapped: 148.0b6 -> 148.0b8 2026-01-28 20:00:55 +00:00
AnthonyandGitHub eba51ed596 tomcat: 11.0.15 -> 11.0.18 (#484775) 2026-01-28 20:00:33 +00:00
Fabian AffolterandGitHub 3377aca4ca python3Packages.llama-index-embeddings-google: 0.4.1 -> 0.4.2 (#484781) 2026-01-28 19:51:07 +00:00
AnthonyandGitHub fd4a07a559 ironicclient: 5.14.0 -> 5.15.0 (#484101) 2026-01-28 19:49:22 +00:00
EmilyandGitHub 8e3cde03dc ungoogled-chromium: 144.0.7559.96-1 -> 144.0.7559.109-1 (#484826) 2026-01-28 19:39:44 +00:00
nixpkgs-ci[bot]andGitHub b21ffda6f7 myks: 5.6.0 -> 5.7.0 (#484740) 2026-01-28 19:38:56 +00:00
Anthony Roussel 01b93689bc unrar-free: fix darwin build 2026-01-28 20:37:09 +01:00
David McFarlandandGitHub 46d304577a godot: add darwin support (#420528) 2026-01-28 19:33:08 +00:00
networkException 2a554cefb7 ungoogled-chromium: 144.0.7559.96-1 -> 144.0.7559.109-1 
https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_27.html

This update includes 1 security fix.

CVEs:
CVE-2026-1504
 2026-01-28 20:29:18 +01:00
Felix BargfeldtandGitHub 938aa333a3 nixos/ly: add support for auto-login (#473013) 2026-01-28 19:26:37 +00:00
Pol DellaieraandGitHub 81140a086b upsun: 5.8.0 -> 5.9.0 (#484790) 2026-01-28 19:19:00 +00:00
R. Ryantm ed747559fb dunst: 1.13.0 -> 1.13.1 2026-01-28 19:18:12 +00:00
Masum RezaandGitHub 88ab93e453 vscode: 1.108.1 -> 1.108.2 (#484123) 2026-01-28 18:54:39 +00:00
Masum RezaandGitHub a61a7d279a hyprshutdown: 0-unstable-2026-01-11 -> 0-unstable-2026-01-27 (#484716) 2026-01-28 18:54:25 +00:00
Fabian AffolterandGitHub 5b0ab66238 python313Packages.llama-index-embeddings-google: migrate to finalAttrs 2026-01-28 19:53:40 +01:00
TomaandGitHub 4fc1018011 python3Packages.arelle: 2.38.4 -> 2.38.7 (#482183) 2026-01-28 18:43:39 +00:00
R. RyantmandGaetan Lepage e61744a0ca python3Packages.nvidia-ml-py: 13.590.44 -> 13.590.48 2026-01-28 18:40:24 +00:00
Zachary Arnaise 8ea20e5812 nixos/ly: add support for auto-login 2026-01-28 19:14:44 +01:00
David McFarland 51a9f8be74 godot: add darwin support 2026-01-28 14:08:06 -04:00
Pol DellaieraandGitHub 88bbdb44d0 ulfius: fix dependencies propagation. (#478129) 2026-01-28 18:05:51 +00:00
Matthieu CoudronandGitHub fb29c54106 tree-sitter-grammers.tree-sitter-phpdoc: add phpdoc (#484248) 2026-01-28 19:09:33 +01:00
nixpkgs-ci[bot]andGitHub c9003c5df3 clickhouse-lts: 25.8.14.17-lts -> 25.8.15.35-lts (#484424) 2026-01-28 17:57:05 +00:00