Fabian Affolter and GitHub
fa37cf6c85
python3Packages.pytest-cases: use setuptools_80 ( #535826 )
2026-06-26 22:09:21 +00:00
Robert Schütz
e2eaadff39
python3Packages.pytest-cases: use setuptools_80
...
Otherwise it fails to build with
ModuleNotFoundError: No module named 'pkg_resources'
2026-06-26 14:32:29 -07:00
Stig and GitHub
a0e7162237
perlPackages: bulk security updates ( #533010 )
2026-06-26 20:42:51 +00:00
Stig Palmquist
03a06252a4
perlPackages.libwwwperl: 6.72 -> 6.83
...
Fixes CVE-2026-8368. Covers both the libwwwperl and LWP attributes.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:31:14 +02:00
Stig Palmquist
d95a5e6344
perlPackages.HTTPMessage: 6.45 -> 7.02
...
Required by libwww-perl 6.83.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:31:13 +02:00
Stig Palmquist
a06c0268f6
perlPackages.IOCompress: 2.220 -> 2.221
...
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:28:38 +02:00
Stig Palmquist
5b6275f405
perlPackages.Mojolicious: 9.39 -> 9.46
...
Fixes CVE-2024-58135.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:48 +02:00
Stig Palmquist
49ef24302d
perlPackages.CryptCBC: 2.33 -> 3.07
...
Fixes CVE-2025-2814.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
2c79c8f23a
perlPackages.YAMLLibYAML: 0.89 -> 0.907.0
...
Fixes CVE-2025-40908.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
02bfa3d8bc
perlPackages.PlackMiddlewareSession: 0.33 -> 0.36
...
Fixes CVE-2025-40923, CVE-2013-10031.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
3cb2e3221a
perlPackages.CookieBaker: 0.11 -> 0.12
...
Required by Plack::Middleware::Session 0.36.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
02ee43b56f
perlPackages.ConfigIniFiles: 3.000003 -> 3.002000
...
Fixes CVE-2026-11527.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
55c68fd7a0
perlPackages.GD: 2.78 -> 2.86
...
Fixes CVE-2026-11526.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
d22c1175af
perlPackages.Starlet: 0.31 -> 0.32
...
Fixes CVE-2026-40561.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
4b37127ec0
perlPackages.CryptScryptKDF: 0.010 -> 0.011
...
Fixes CVE-2026-8647.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
62e6ec8536
perlPackages.CryptPasswdMD5: 1.42 -> 1.43
...
Fixes CVE-2026-6659.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
5fb740257c
perlPackages.XMLLibXML: 2.0210 -> 2.0213
...
Fixes CVE-2026-8177. Drops the libxml-2.13 test patch, now included upstream.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
261df4c82c
perlPackages.Sereal: 5.004 -> 5.006
...
Fixes CVE-2026-8796. Covers Sereal, Sereal::Decoder and Sereal::Encoder.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
e86a4b4e44
perlPackages.CryptDSA: 1.17 -> 1.21
...
Fixes CVE-2026-8700, CVE-2026-8704, CVE-2026-12205.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:47 +02:00
Stig Palmquist
f098e09528
perlPackages.ConvertPEM: init at 0.13
...
Dependency of Crypt::DSA.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
b7bd8c9e93
perlPackages.CryptDESEDE3: init at 0.03
...
Dependency of Convert::PEM.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
9f61f7a1b0
perlPackages.ClassErrorHandler: init at 0.04
...
Dependency of Convert::PEM.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist and Robert Schütz
de1d803f43
perlPackages.CryptArgon2: 0.019 -> 0.031
...
Fixes CVE-2026-8463.
Co-authored-by: Robert Schütz <nix@dotlambda.de >
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist and Robert Schütz
46324ed6bb
perlPackages.DistBuild: init at 0.028
...
Build dependency of Crypt::Argon2.
Co-authored-by: Robert Schütz <nix@dotlambda.de >
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
47c2f1daf9
perlPackages.ExtUtilsBuilderCompiler: init at 0.037
...
Dependency of Dist::Build.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
5ebb6bf806
perlPackages.ExtUtilsBuilder: init at 0.020
...
Dependency of Dist::Build.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
f57d979624
perlPackages.ExtUtilsConfig: 0.008 -> 0.010
...
Required by ExtUtils::Builder.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
32536524af
perlPackages.ExtUtilsHelpers: 0.026 -> 0.028
...
Required by ExtUtils::Builder.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
f1ec9089c3
perlPackages.CryptPBKDF2: 0.161520 -> 0.261630
...
Fixes CVE-2017-20240, CVE-2026-9638, CVE-2026-9641.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
0002e3ea35
perlPackages.ProtocolHTTP2: 1.11 -> 1.13
...
Fixes CVE-2026-10725.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
9020587aa0
perlPackages.NetStatsd: 0.12 -> 0.13
...
Fixes CVE-2026-46739.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
7a4c9efd01
perlPackages.HTMLParser: 3.81 -> 3.85
...
Fixes CVE-2026-8829.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:46 +02:00
Stig Palmquist
66e7adfa8f
perlPackages.CpanelJSONXS: 4.37 -> 4.42
...
Fixes CVE-2026-9334, CVE-2026-9516. Supersedes the in-tree CVE-2025-40929 patch.
Assisted-by: Claude Code (Claude Opus 4.8)
Signed-off-by: Stig Palmquist <git@stig.io >
2026-06-26 22:23:45 +02:00
Martin Weinelt and GitHub
d451ff2f67
libidn: 1.43 -> 1.44 ( #532509 )
2026-06-26 19:29:11 +00:00
Martin Weinelt and GitHub
ddb7748d3a
giflib: suppress missing symbol error on Darwin ( #531959 )
2026-06-26 19:28:55 +00:00
Martin Weinelt and GitHub
a01cced088
socat: 1.8.1.2 -> 1.8.1.3 ( #535779 )
2026-06-26 19:28:33 +00:00
Martin Weinelt and GitHub
7ee5283dac
libfabric: 2.5.1 -> 2.6.0 ( #534333 )
2026-06-26 19:27:05 +00:00
R. Ryantm and Martin Weinelt
2f05530db2
libidn: 1.43 -> 1.44
...
https://codeberg.org/libidn/libidn/src/tag/v1.44/NEWS
Fixes: CVE-2026-57053
2026-06-26 21:22:01 +02:00
Martin Weinelt and GitHub
657deaf57a
jsoncpp: 1.9.7 -> 1.9.8, adopt ( #533317 )
2026-06-26 19:19:58 +00:00
Sergei Trofimovich
8b4b26561f
socat: 1.8.1.2 -> 1.8.1.3
...
Changes: http://www.dest-unreach.org/socat/CHANGES
2026-06-26 20:19:32 +01:00
Martin Weinelt and GitHub
0c2e75f5f9
curlMinimal: 8.20.0 -> 8.21.0 ( #534906 )
2026-06-26 19:19:15 +00:00
Martin Weinelt and GitHub
e509e23929
uthash: 2.3.0 -> 2.4.0 ( #535437 )
2026-06-26 19:16:53 +00:00
Martin Weinelt and GitHub
4464f99d3d
linux-pam: 1.7.1 -> 1.7.2 ( #531929 )
2026-06-26 19:09:42 +00:00
Martin Weinelt and GitHub
bd2fdcc80b
motioneye: 0.43.1 -> 0.44.0 ( #535230 )
2026-06-26 18:44:15 +00:00
K900
d4c077ace1
Merge remote-tracking branch 'origin/staging-next' into staging
2026-06-26 21:41:51 +03:00
Marcel and Martin Weinelt
8221f1e025
motioneye: add versionCheckHook
2026-06-26 20:38:11 +02:00
Marcel and Martin Weinelt
6a12e47976
motioneye: 0.43.1 -> 0.44.0
...
Diff: https://github.com/motioneye-project/motioneye/compare/0.43.1...0.44.0
2026-06-26 20:38:11 +02:00
Marcel and Martin Weinelt
75e6236ca1
python3Packages.tornado: 6.5.4 -> 6.5.7
...
https://www.tornadoweb.org/en/stable/releases/v6.5.5.html
https://www.tornadoweb.org/en/stable/releases/v6.5.6.html
https://www.tornadoweb.org/en/stable/releases/v6.5.7.html
Fixes: CVE-2026-49853, CVE-2026-49855, CVE-2026-49854
2026-06-26 20:38:10 +02:00
nixpkgs-ci[bot] and GitHub
d3f7488df6
Merge master into staging-next
2026-06-26 18:37:48 +00:00
Nick Cao and GitHub
da86400f73
dolt: 2.1.7 -> 2.1.9 ( #535499 )
2026-06-26 18:26:41 +00:00