Commit Graph
1024580 Commits
Author SHA1 Message Date
Robert Schütz e2eaadff39 python3Packages.pytest-cases: use setuptools_80
Otherwise it fails to build with

    ModuleNotFoundError: No module named 'pkg_resources'
2026-06-26 14:32:29 -07:00
StigandGitHub a0e7162237 perlPackages: bulk security updates (#533010) 2026-06-26 20:42:51 +00:00
Stig Palmquist 03a06252a4 perlPackages.libwwwperl: 6.72 -> 6.83
Fixes CVE-2026-8368. Covers both the libwwwperl and LWP attributes.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:31:14 +02:00
Stig Palmquist d95a5e6344 perlPackages.HTTPMessage: 6.45 -> 7.02
Required by libwww-perl 6.83.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:31:13 +02:00
Stig Palmquist a06c0268f6 perlPackages.IOCompress: 2.220 -> 2.221
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:28:38 +02:00
Stig Palmquist 5b6275f405 perlPackages.Mojolicious: 9.39 -> 9.46
Fixes CVE-2024-58135.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:48 +02:00
Stig Palmquist 49ef24302d perlPackages.CryptCBC: 2.33 -> 3.07
Fixes CVE-2025-2814.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist 2c79c8f23a perlPackages.YAMLLibYAML: 0.89 -> 0.907.0
Fixes CVE-2025-40908.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist 02bfa3d8bc perlPackages.PlackMiddlewareSession: 0.33 -> 0.36
Fixes CVE-2025-40923, CVE-2013-10031.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist 3cb2e3221a perlPackages.CookieBaker: 0.11 -> 0.12
Required by Plack::Middleware::Session 0.36.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist 02ee43b56f perlPackages.ConfigIniFiles: 3.000003 -> 3.002000
Fixes CVE-2026-11527.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist 55c68fd7a0 perlPackages.GD: 2.78 -> 2.86
Fixes CVE-2026-11526.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist d22c1175af perlPackages.Starlet: 0.31 -> 0.32
Fixes CVE-2026-40561.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist 4b37127ec0 perlPackages.CryptScryptKDF: 0.010 -> 0.011
Fixes CVE-2026-8647.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist 62e6ec8536 perlPackages.CryptPasswdMD5: 1.42 -> 1.43
Fixes CVE-2026-6659.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist 5fb740257c perlPackages.XMLLibXML: 2.0210 -> 2.0213
Fixes CVE-2026-8177. Drops the libxml-2.13 test patch, now included upstream.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist 261df4c82c perlPackages.Sereal: 5.004 -> 5.006
Fixes CVE-2026-8796. Covers Sereal, Sereal::Decoder and Sereal::Encoder.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist e86a4b4e44 perlPackages.CryptDSA: 1.17 -> 1.21
Fixes CVE-2026-8700, CVE-2026-8704, CVE-2026-12205.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:47 +02:00
Stig Palmquist f098e09528 perlPackages.ConvertPEM: init at 0.13
Dependency of Crypt::DSA.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist b7bd8c9e93 perlPackages.CryptDESEDE3: init at 0.03
Dependency of Convert::PEM.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist 9f61f7a1b0 perlPackages.ClassErrorHandler: init at 0.04
Dependency of Convert::PEM.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig PalmquistandRobert Schütz de1d803f43 perlPackages.CryptArgon2: 0.019 -> 0.031
Fixes CVE-2026-8463.

Co-authored-by: Robert Schütz <nix@dotlambda.de>
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig PalmquistandRobert Schütz 46324ed6bb perlPackages.DistBuild: init at 0.028
Build dependency of Crypt::Argon2.

Co-authored-by: Robert Schütz <nix@dotlambda.de>
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist 47c2f1daf9 perlPackages.ExtUtilsBuilderCompiler: init at 0.037
Dependency of Dist::Build.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist 5ebb6bf806 perlPackages.ExtUtilsBuilder: init at 0.020
Dependency of Dist::Build.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist f57d979624 perlPackages.ExtUtilsConfig: 0.008 -> 0.010
Required by ExtUtils::Builder.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist 32536524af perlPackages.ExtUtilsHelpers: 0.026 -> 0.028
Required by ExtUtils::Builder.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist f1ec9089c3 perlPackages.CryptPBKDF2: 0.161520 -> 0.261630
Fixes CVE-2017-20240, CVE-2026-9638, CVE-2026-9641.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist 0002e3ea35 perlPackages.ProtocolHTTP2: 1.11 -> 1.13
Fixes CVE-2026-10725.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist 9020587aa0 perlPackages.NetStatsd: 0.12 -> 0.13
Fixes CVE-2026-46739.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist 7a4c9efd01 perlPackages.HTMLParser: 3.81 -> 3.85
Fixes CVE-2026-8829.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:46 +02:00
Stig Palmquist 66e7adfa8f perlPackages.CpanelJSONXS: 4.37 -> 4.42
Fixes CVE-2026-9334, CVE-2026-9516. Supersedes the in-tree CVE-2025-40929 patch.

Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io>
2026-06-26 22:23:45 +02:00
Martin WeineltandGitHub d451ff2f67 libidn: 1.43 -> 1.44 (#532509) 2026-06-26 19:29:11 +00:00
Martin WeineltandGitHub ddb7748d3a giflib: suppress missing symbol error on Darwin (#531959) 2026-06-26 19:28:55 +00:00
Martin WeineltandGitHub a01cced088 socat: 1.8.1.2 -> 1.8.1.3 (#535779) 2026-06-26 19:28:33 +00:00
Martin WeineltandGitHub 7ee5283dac libfabric: 2.5.1 -> 2.6.0 (#534333) 2026-06-26 19:27:05 +00:00
R. RyantmandMartin Weinelt 2f05530db2 libidn: 1.43 -> 1.44
https://codeberg.org/libidn/libidn/src/tag/v1.44/NEWS

Fixes: CVE-2026-57053
2026-06-26 21:22:01 +02:00
Martin WeineltandGitHub 657deaf57a jsoncpp: 1.9.7 -> 1.9.8, adopt (#533317) 2026-06-26 19:19:58 +00:00
Sergei Trofimovich 8b4b26561f socat: 1.8.1.2 -> 1.8.1.3
Changes: http://www.dest-unreach.org/socat/CHANGES
2026-06-26 20:19:32 +01:00
Martin WeineltandGitHub 0c2e75f5f9 curlMinimal: 8.20.0 -> 8.21.0 (#534906) 2026-06-26 19:19:15 +00:00
Martin WeineltandGitHub e509e23929 uthash: 2.3.0 -> 2.4.0 (#535437) 2026-06-26 19:16:53 +00:00
Martin WeineltandGitHub 4464f99d3d linux-pam: 1.7.1 -> 1.7.2 (#531929) 2026-06-26 19:09:42 +00:00
Martin WeineltandGitHub bd2fdcc80b motioneye: 0.43.1 -> 0.44.0 (#535230) 2026-06-26 18:44:15 +00:00
K900 d4c077ace1 Merge remote-tracking branch 'origin/staging-next' into staging 2026-06-26 21:41:51 +03:00
MarcelandMartin Weinelt 8221f1e025 motioneye: add versionCheckHook 2026-06-26 20:38:11 +02:00
MarcelandMartin Weinelt 6a12e47976 motioneye: 0.43.1 -> 0.44.0
Diff: https://github.com/motioneye-project/motioneye/compare/0.43.1...0.44.0
2026-06-26 20:38:11 +02:00
MarcelandMartin Weinelt 75e6236ca1 python3Packages.tornado: 6.5.4 -> 6.5.7
https://www.tornadoweb.org/en/stable/releases/v6.5.5.html
https://www.tornadoweb.org/en/stable/releases/v6.5.6.html
https://www.tornadoweb.org/en/stable/releases/v6.5.7.html

Fixes: CVE-2026-49853, CVE-2026-49855, CVE-2026-49854
2026-06-26 20:38:10 +02:00
nixpkgs-ci[bot]andGitHub d3f7488df6 Merge master into staging-next 2026-06-26 18:37:48 +00:00
Nick CaoandGitHub da86400f73 dolt: 2.1.7 -> 2.1.9 (#535499) 2026-06-26 18:26:41 +00:00
Nick CaoandGitHub 3e2ba9baf3 vscode-extensions.bmewburn.vscode-intelephense-client: 1.18.4 -> 1.18.5 (#535498) 2026-06-26 18:26:11 +00:00