gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,020,322 Commits 9 Branches 0 Tags
b036a47ec700ef1494de4e38c5737196e778ee08
Commit Graph
1020322 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Robert SchützandVladimír Čunát b036a47ec7 libde265: 1.1.0 -> 1.1.1 
Diff: https://github.com/strukturag/libde265/compare/v1.1.0...v1.1.1

Changelog: https://github.com/strukturag/libde265/releases/tag/v1.1.1
(cherry picked from commit 80edf6a630)
(cherry picked from commit 1706cb9fb147f760580d6cb50bd77da6e5abef63)
 2026-06-22 08:21:29 +02:00
whispersandVladimír Čunát cd50997cec freetype: add patches for four vulnerabilities from project zero 
- https://gitlab.freedesktop.org/freetype/freetype/-/work_items/1419 /
  https://gitlab.freedesktop.org/freetype/freetype/-/work_items/1420
- https://gitlab.freedesktop.org/freetype/freetype/-/work_items/1421
- https://gitlab.freedesktop.org/freetype/freetype/-/work_items/1423
- https://gitlab.freedesktop.org/freetype/freetype/-/work_items/1425

(cherry picked from commit a06fb593b6)
(cherry picked from commit ff252bdb2913aa7a371e51f665cded93345ecb7c)
 2026-06-22 08:21:29 +02:00
Cathal MullanandVladimír Čunát 7b8f0d2c39 rustPlatform.fetchCargoVendor: de-duplicate git sources by selector 
(cherry picked from commit 100e23324c)
(cherry picked from commit 28fe7e5b4d263e339b52c304e1aa34a3e06b1cef)
 2026-06-22 08:21:29 +02:00
Vladimír Čunát 8abfd69d34 libpng: 1.6.56 -> 1.6.58 
Fixes: CVE-2026-34757 and CVE-2026-40930 (#528286)
(cherry picked from commit 316db7c96c)
(cherry picked from commit 2d355d1abaa61f5d60dc524c3645c4d6cbb980be)
 2026-06-22 08:21:29 +02:00
Stig PalmquistandVladimír Čunát c6a6976a2a perl: backport security fixes 
Perl ships with some CPAN modules vendored as "dual-life", this commit
inject updated versions certain modules directly from CPAN rather than
applying patches from upstream, as they can be tricky to maintain.

It also includes a patch for CVE-2026-8376 which affects 32-bit
platforms.

- perl: CVE-2026-8376
  https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c

- HTTP-Tiny 0.094: CVE-2026-7010
  https://metacpan.org/release/HAARG/HTTP-Tiny-0.094/changes

- Compress-Raw-Zlib 2.222: CVE-2026-3381, CVE-2026-4176
  https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.222/changes

- Compress-Raw-Bzip2 2.218
  https://metacpan.org/release/PMQS/Compress-Raw-Bzip2-2.218/changes

- IO-Compress 2.220: CVE-2026-48959, CVE-2026-48961, CVE-2026-48962
  https://metacpan.org/release/PMQS/IO-Compress-2.220/changes

- Archive-Tar 3.12: CVE-2026-42496, CVE-2026-42497, CVE-2026-9538
  https://metacpan.org/release/BINGOS/Archive-Tar-3.12/changes

Assisted-by: Codex (OpenAI)
Signed-off-by: Stig Palmquist <git@stig.io>
(cherry picked from commit d59aeb80e5)
(cherry picked from commit 5613fd0d417095f6e8bf247b23ec19b0ee210a92)
 2026-06-22 08:21:28 +02:00
GrimmauldandVladimír Čunát 4907a03712 libxml2: 2.15.2 -> 2.15.3 
Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.15.3/NEWS

Fixes CVE-2026-6732
Other security issues fixed here seem to not have CVEs assigned (yet)

(cherry picked from commit efef7d2661)
(cherry picked from commit 2c2c8a3587fd408f44570b009d5b25e2abb14a68)
 2026-06-22 08:21:28 +02:00
Robert SchützandVladimír Čunát 7b57101193 krb5: patch CVE-2026-40355 and CVE-2026-40356 
(cherry picked from commit a42608a7a8)
(cherry picked from commit 3cff9ef0a777a198dcd45125284696f528522ab0)
 2026-06-22 08:21:28 +02:00
Robert SchützandVladimír Čunát 213f8e5f58 krb5: 1.22.1 -> 1.22.2 
Changelog: https://web.mit.edu/Kerberos/krb5-1.22/
(cherry picked from commit 5a91325042)
(cherry picked from commit b3a92ec281d998f0b947846c19956752ad275bfc)
 2026-06-22 08:21:28 +02:00
Robert SchützandVladimír Čunát 11899547f2 libde265: 1.0.19 -> 1.1.0 
Diff: https://github.com/strukturag/libde265/compare/v1.0.19...v1.1.0

Changelog: https://github.com/strukturag/libde265/releases/tag/v1.1.0
(cherry picked from commit eb64ffdbce)
(cherry picked from commit ca8d5775de348f1505ae1f84c3c08c5ca01dbf98)
 2026-06-22 08:21:28 +02:00
r-vdpandVladimír Čunát 2b7fc29323 systemd: drop upstreamed tmpfiles noatime patch 
(cherry picked from commit 3dbcb86c1f)
(cherry picked from commit 9bcbc7814a0b2a5515fdf6449c12a055712328d8)
 2026-06-22 08:21:28 +02:00
R. RyantmandVladimír Čunát 8336ce2319 systemd: 260.1 -> 260.2 
(cherry picked from commit d08a97a026)
(cherry picked from commit 8981bd36a7893b59577d0a4ae1de03f7a81e3609)
 2026-06-22 08:21:28 +02:00
Robert SchützandVladimír Čunát e4f8aa8b23 ghostscript: 10.07.0 -> 10.07.1 
Changelog: https://ghostscript.readthedocs.io/en/gs10.07.1/News.html
(cherry picked from commit 6f5cb5357c)
(cherry picked from commit cab7cf2acdb2294def13bbce083d9807dd95530b)
 2026-06-22 08:21:28 +02:00
whispersandVladimír Čunát 1cf8084a61 xvfb: 21.1.22 -> 21.1.23, drop rebuild avoidance 
xorg announcement: https://lists.x.org/archives/xorg-announce/2026-June/003703.html
xorg advisory: https://lists.x.org/archives/xorg-announce/2026-June/003702.html

(cherry picked from commit 8310c133b7)
(cherry picked from commit 128add25cfb35e89a5e101480ce15aaef73a6f43)
 2026-06-22 08:21:27 +02:00
Martin WeineltandVladimír Čunát 360c80e281 python3Packages.django_5: 5.2.14 -> 5.2.15 
https://docs.djangoproject.com/en/5.2/releases/5.2.15/
https://www.djangoproject.com/weblog/2026/jun/03/security-releases/

Fixes:
CVE-2026-6873, CVE-2026-7666, CVE-2026-8404, CVE-2026-35193,
CVE-2026-48587

(cherry picked from commit 3b5d44bff5)
(cherry picked from commit 32ff989879ca372003d44ee8421d81f3353c8ac0)
 2026-06-22 08:21:27 +02:00
Robert SchützandVladimír Čunát 608382cc0c python3Packages.pyjwt: 2.12.1 -> 2.13.0 
Diff: https://github.com/jpadilla/pyjwt/compare/2.12.1...2.13.0

Changelog: https://github.com/jpadilla/pyjwt/blob/2.13.0/CHANGELOG.rst
(cherry picked from commit 3b6cda4e40)
(cherry picked from commit 35e7bdb1f4f22d136664d22e742b10994635443d)
 2026-06-22 08:21:27 +02:00
Leon KlingeleandVladimír Čunát 9b9b7a4d93 go_1_26: 1.26.3 -> 1.26.4 
(cherry picked from commit b359a44a03)
(cherry picked from commit f16209a21ec4da1743f1137e02a62b93c4fe10cd)
 2026-06-22 08:21:27 +02:00
whispersandVladimír Čunát 15c74e4f1e libgcrypt: 1.11.2 -> 1.12.2 
1.12.0: https://dev.gnupg.org/T7643, https://lists.gnupg.org/pipermail/gnupg-announce/2026q1/000502.html
1.12.1: https://dev.gnupg.org/T8067
1.12.2: https://dev.gnupg.org/T8114, https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html

(cherry picked from commit 5131deab4e)
(cherry picked from commit 3cfb42b48e77a9ae29b846f9146402dc47692ced)
 2026-06-22 08:21:27 +02:00
Robert SchützandVladimír Čunát e40d42cbb7 bzip2: patch CVE-2026-42250 
(cherry picked from commit a7b6fa34c1)
(cherry picked from commit 2f092df439722bc95d790d0a2c734e637ff08006)
 2026-06-22 08:19:29 +02:00
kuflierlandVladimír Čunát b3bdc19f55 libheif: 1.22.2 -> 1.23.0 
changelog: https://github.com/strukturag/libheif/releases/tag/v1.23.0
(cherry picked from commit 536f85e8fc)
(cherry picked from commit 96b8fd4e618c2249400bea96e8b9ebdbb8b2d7b4)
 2026-06-22 08:19:28 +02:00
André SilvaandVladimír Čunát 2a0e0baec1 rustPlatform.fetchCargoVendor: remove duplicate fetcher 
(cherry picked from commit ddda3ed831)
(cherry picked from commit 570daf3d1c3b06ee4b9d96afc01536596b78d34a)
 2026-06-22 08:19:28 +02:00
winstonandVladimír Čunát 68be3d0beb sdl3: increase test timeout for testrwlock 
(cherry picked from commit 07bc340747)
(cherry picked from commit 5787be340983685f7490e1b46bdca5896ae1746d)
 2026-06-22 08:19:28 +02:00
Sergei TrofimovichandVladimír Čunát 1b76c29160 sdl3: 3.4.8 -> 3.4.10 
Changes: https://github.com/libsdl-org/SDL/releases/tag/release-3.4.10
(cherry picked from commit 29533d61c2)
(cherry picked from commit 6910e98a97602753d814b6a3f0877baa9bd7561c)
 2026-06-22 08:19:28 +02:00
Marcus RambergandVladimír Čunát f75e2f0964 perlPackages.HTTPDaemon: 6.16 -> 6.17 
(cherry picked from commit 6faf866564)
(cherry picked from commit dd4bec621ddd03146588e9c9f10af9da36486ad9)
 2026-06-22 08:19:28 +02:00
Michael DanielsandVladimír Čunát 83c65a6c34 gnupatch: disable flaky test 
Fixes #525260

(cherry picked from commit 64ae7d0e37)
(cherry picked from commit cebcbaab7a6e5fc72132855f96f3f81ebd567df5)
 2026-06-22 08:19:28 +02:00
Sefa EyeogluandVladimír Čunát 3fcd08afd1 curl: backport performance patch 
https://github.com/curl/curl/commit/2a2104f3cff44bb28bb570a093be52bbeeed8f23

See https://curl.se/mail/distros-2026-05/0000.html

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
(cherry picked from commit 06028a8aa5)
(cherry picked from commit 99edca13d244d3020cf906c5bf0a1cf5ff7e53a6)
 2026-06-22 08:19:28 +02:00
kuflierlandVladimír Čunát 96a47e2cd8 python3Packages.pillow-heif: disable tests that abuse spec and break in libheif 1.22.0, disable version check for libheif 
(cherry picked from commit 37ff020c2f)
(cherry picked from commit 37bd922bf9ef88c748c37e1080bf458d861d110c)
 2026-06-22 08:19:28 +02:00
kuflierlandVladimír Čunát dc108799c2 libheif: 1.21.2 -> 1.22.2 
(cherry picked from commit fd4f373715)
(cherry picked from commit bd4354a482ba98e5912e25686242d4c99736bcc3)
 2026-06-22 08:19:27 +02:00
R. RyantmandVladimír Čunát 1526af39b9 publicsuffix-list: 0-unstable-2026-03-26 -> 0-unstable-2026-05-13 
(cherry picked from commit 963f597bc3)
(cherry picked from commit 379e54dd196bfd9aa89c5566cbc0878aa6e9cdca)
 2026-06-22 08:19:27 +02:00
Martin WeineltandVladimír Čunát b7a103e1c9 rust-cbindgen: 0.29.2 -> 0.29.3 
https://github.com/mozilla/cbindgen/blob/v0.29.3/CHANGES
(cherry picked from commit a2e41bb76c)
(cherry picked from commit b8a547de99897e9ca171f207cfe9da97dadd5f87)
 2026-06-22 08:19:27 +02:00
HytheraandVladimír Čunát 29e701ec56 valkey: 9.0.4 -> 9.1.0 
changelog: https://github.com/valkey-io/valkey/releases/tag/9.1.0

diff: https://github.com/valkey-io/valkey/compare/9.0.4...9.1.0
(cherry picked from commit 51f6d0a44c)
(cherry picked from commit 09c98d00a43ad8ed5420af2885ecc846fe71c9b1)
 2026-06-22 08:19:27 +02:00
Marcin SerwinandVladimír Čunát dcc6f5d962 nodejs: pin icu to newer version 
Not-cherry-picked-because: icu will be advanced globally on the unstable branch by https://github.com/NixOS/nixpkgs/pull/520553
Signed-off-by: Marcin Serwin <marcin@serwin.dev>
(cherry picked from commit 4b965d7e22e3f82c9e9c77dd51bdd70679f0a904)
 2026-06-22 08:19:27 +02:00
Robert SchützandVladimír Čunát 9ad85fe44d ffmpeg_8: 8.1 -> 8.1.1 
Changelog: https://github.com/FFmpeg/FFmpeg/blob/n8.1.1/Changelog
(cherry picked from commit 91518f18f5)
(cherry picked from commit e5b3e52db386c03161a45b145328eb84dc5eb2bf)
 2026-06-22 08:19:27 +02:00
Robert SchützandVladimír Čunát 671e8aefd9 at-spi2-core: 2.60.1 -> 2.60.4 
(cherry picked from commit eb99a69943)
(cherry picked from commit 97dc0a920b756d88ce0d3d37ed8376eb8bdd2e25)
 2026-06-22 08:19:27 +02:00
dishandVladimír Čunát 1ed273b4fe rsync: 3.4.1 -> 3.4.3 
https://download.samba.org/pub/rsync/NEWS.html#3.4.2
https://download.samba.org/pub/rsync/NEWS.html#3.4.3
(cherry picked from commit 6f04e4e702)
(cherry picked from commit b63badda2293d801ec9e59867c4db91458b90a61)
 2026-06-22 08:19:18 +02:00
Robert SchützandVladimír Čunát 88fbe351f2 python3Packages.mistune: 3.2.0 -> 3.2.1 
Diff: https://github.com/lepture/mistune/compare/v3.2.0...v3.2.1

Changelog: https://github.com/lepture/mistune/blob/v3.2.1/docs/changes.rst
(cherry picked from commit efdf5458bd)
(cherry picked from commit 70c873b54906f9d82f329a6f6e5679ca180e0933)
 2026-06-22 08:16:20 +02:00
Lisanna DettwylerandVladimír Čunát 46b00f0ee0 rsync: skip chgrp test 
This test fails when built in a chroot store.

Signed-off-by: Lisanna Dettwyler <lisanna.dettwyler@gmail.com>
(cherry picked from commit 9d229c780e)
(cherry picked from commit 87aae16c78154ea23b8021d3c38538b8288de95b)
 2026-06-22 08:16:20 +02:00
Robert SchützandVladimír Čunát eac01b3060 fftw: 3.3.10 -> 3.3.11 
Changelog: https://github.com/FFTW/fftw3/blob/fftw-3.3.11/NEWS
(cherry picked from commit 07e44fb25f)
(cherry picked from commit 546ea47450680b3f5aa4947632d7937d6997d873)
 2026-06-22 08:16:17 +02:00
Doron BeharandVladimír Čunát fbaac14681 curl: set structuredAttrs 
(cherry picked from commit 160ca6558e)
(cherry picked from commit 9ea380a822df127898e92ebe6c5af1b8c8cff4e0)
 2026-06-22 08:16:17 +02:00
Robert SchützandVladimír Čunát 664ed12255 imagemagick: 7.1.2-23 -> 7.1.2-24 
Diff: https://github.com/ImageMagick/ImageMagick/compare/7.1.2-23...7.1.2-24

Changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
(cherry picked from commit 4a101f0ce8)
(cherry picked from commit 99cd697f9ff2c21f137236bf26955f510bd93b10)
 2026-06-22 08:16:17 +02:00
Robert SchützandVladimír Čunát 880289462e libadwaita: 1.9.0 -> 1.9.1 
Diff: https://gitlab.gnome.org/GNOME/libadwaita/-/compare/1.9.0...1.9.1

Changelog: https://gitlab.gnome.org/GNOME/libadwaita/-/blob/1.9.1/NEWS
(cherry picked from commit d2a5f7f0ca)
(cherry picked from commit 27504c8f0df600820cc88797834ab8c8a1011309)
 2026-06-22 08:16:17 +02:00
Robert SchützandVladimír Čunát f4dff6b5f9 e2fsprogs: 1.47.3 -> 1.47.4 
Changelog: https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.4
(cherry picked from commit ec681ffc8f)
(cherry picked from commit 4940e8201b0b1a632f629256a28637d89764f39f)
 2026-06-22 08:16:16 +02:00
R. RyantmandVladimír Čunát 8b70ffa9d0 libaec: 1.1.6 -> 1.1.7 
(cherry picked from commit 6a792a71bf)
(cherry picked from commit 8d7f1c326fedc792e8e3cb12345f1cba1625537f)
 2026-06-22 08:16:16 +02:00
whispersandVladimír Čunát a7e09a45bb cargo: add patches for CVE-2026-5222 and CVE-2026-5223 
Upstream pull request: https://github.com/rust-lang/cargo/pull/17031

Fixes: CVE-2026-5222, https://blog.rust-lang.org/2026/05/25/cve-2026-5222/
Fixes: CVE-2026-5223, https://blog.rust-lang.org/2026/05/25/cve-2026-5223/
Not-cherry-picked-because: master will get these fixes via the rust 1.96 upgrade on 2026-05-28
(cherry picked from commit 5f1133b2f1e36b654119f042b8eaf9f16aff706c)
 2026-06-22 08:16:16 +02:00
Liam MurphyandVladimír Čunát d0551bc010 openblas: 0.3.32 -> 0.3.33 
This release fixes build failures for linbox on aarch64
(https://hydra.nixos.org/build/327030681,
https://hydra.nixos.org/build/327030680); see
https://github.com/OpenMathLib/OpenBLAS/issues/5763.

(cherry picked from commit 2ba029a78e)
(cherry picked from commit af26b2500da6c199b3eaebfbafe25d7227b430d8)
 2026-06-22 08:16:16 +02:00
Paul GrandperrinandVladimír Čunát a7d2d596af systemd: fix tmpfiles errors when mount is noatime 
fixes #520485

(cherry picked from commit d28f57cdff)
(cherry picked from commit 6c3ff740324716f92fba901032bd2511dd9af7f5)
 2026-06-22 08:16:16 +02:00
Martin WeineltandVladimír Čunát f8562c7283 python3Packages.fastapi: 0.135.3 -> 0.136.3 
https://github.com/fastapi/fastapi/releases/tag/0.136.0
https://github.com/fastapi/fastapi/releases/tag/0.136.1
https://github.com/fastapi/fastapi/releases/tag/0.136.2
https://github.com/fastapi/fastapi/releases/tag/0.136.3
(cherry picked from commit b481729faf)
(cherry picked from commit bab01dc06d12e17407068fc3ebba0ac81947592b)
 2026-06-22 08:15:15 +02:00
Martin WeineltandVladimír Čunát 96f63700bc python3Packages.starlette: 0.52.1 -> 1.1.0 
https://www.starlette.io/release-notes/#110
https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr

Fixes: CVE-2026-48710
(cherry picked from commit 83ece5c3a1)
(cherry picked from commit a416d0dc4ff922c0ba1f72c0d5ed53bef01f4ed7)
 2026-06-22 08:15:15 +02:00
R. RyantmandVladimír Čunát 752123aaa9 libde265: 1.0.18 -> 1.0.19 
(cherry picked from commit 8aa7c75b47)
(cherry picked from commit a14161da713e1511cdffa409d62ee71adc34c509)
 2026-06-22 08:15:15 +02:00
R. RyantmandVladimír Čunát 179557247b freetype: 2.14.2 -> 2.14.3 
(cherry picked from commit 21622bac70)
(cherry picked from commit 3a60965e1736cb336b6e1b9d0405b13409153fd0)
 2026-06-22 08:15:15 +02:00
Thomas GerbetandVladimír Čunát bd2d251cdc libcaca: apply patch for CVE-2026-42046 
Fixes https://github.com/NixOS/nixpkgs/issues/519387

(cherry picked from commit 00cd8e646c)
(cherry picked from commit 8513d19d4f92c99ec7403755360bbb225d681aa7)
 2026-06-22 08:15:15 +02:00