NixOS/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 7 Packages Projects Releases Wiki Activity
1,037,713 Commits 1 Branch 0 Tags
nixos-unstable
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Thomas GerbetandGitHub f7424c71a3 _7zz: 26.0.1 -> 26.0.2; _7zz-rar: move to pkgs/by-name (#543354) 2026-07-19 21:46:22 +00:00
Thomas GerbetandGitHub 605d60a13d veilid: 0.5.6 -> 0.5.7 (#543547) 2026-07-19 17:36:15 +00:00
Thomas GerbetandGitHub 9a36eee59a mediawiki: 1.45.3 -> 1.45.4 (#536853) 2026-07-17 15:45:40 +00:00
Thomas GerbetandGitHub 4a3eaa286a filebrowser: 2.63.15 -> 2.63.18 (#536496) 2026-07-17 14:50:08 +00:00
Thomas GerbetandGitHub da9e996db8 Clarify Security Support Status of Different Architectures (#539504) 2026-07-17 14:28:06 +00:00
Thomas GerbetandGitHub 070aa82bf4 brave: 1.92.139 -> 1.92.140 (#542434) 2026-07-17 14:20:05 +00:00
Thomas GerbetandGitHub 3cff5b55bd mago: 1.29.0 -> 1.43.0 (#540226) 2026-07-17 11:22:17 +00:00
Thomas GerbetandGitHub 1bfc52137a go_1_27: 1.27rc1 -> 1.27rc2 (#539540) 2026-07-14 16:37:34 +00:00
Thomas GerbetandGitHub 34f21fb4e6 otf2: 3.1.1 -> 3.2 (#541838) 2026-07-14 16:26:25 +00:00
Thomas GerbetandGitHub a5f6677118 tandoor-recipes: 2.6.9 -> 2.6.13 (#540983) 2026-07-12 18:17:19 +00:00
Thomas GerbetandGitHub d9cd59c37e gittuf: 0.12.0 -> 0.15.0 (#540875) 2026-07-12 18:05:36 +00:00
Thomas GerbetandGitHub 79840719e6 wget: add patches for several CVEs (#539576) 2026-07-11 19:22:55 +00:00
Thomas GerbetandGitHub 716c7a2664 brave: 1.92.134 -> 1.92.139 (#540192) 2026-07-11 17:41:08 +00:00
Thomas GerbetandGitHub 37fdb52b0d temporal: 1.30.5 → 1.31.2 (#538644) 2026-07-11 17:33:30 +00:00
Thomas GerbetandGitHub 03ac00d1d1 osquery: 5.23.0 -> 5.23.1 (#540001) 2026-07-09 14:52:33 +00:00
Thomas GerbetandGitHub fe18534c04 cinny-unwrapped: 4.12.2 -> 4.12.3, cinny-desktop: 4.12.2 -> 4.12.5 (#539103) 2026-07-09 14:02:13 +00:00
Thomas GerbetandGitHub 0772c70441 brave: 1.91.180 -> 1.92.134 (#538140) 2026-07-09 13:44:36 +00:00
Thomas GerbetandGitHub 3c6eeea9ed copyparty: 1.20.16 -> 1.20.17 (#539067) 2026-07-09 08:47:11 +00:00
Thomas GerbetandGitHub 997db51cba fulcio: 1.8.7 -> 1.8.8 (#539679) 2026-07-09 08:39:44 +00:00
Thomas GerbetandGitHub 8da3adcca1 prometheus: 3.12.0 → 3.13.0 (#538626) 2026-07-05 20:48:08 +00:00
Thomas GerbetandGitHub 7cf8508eb7 rekor-cli: 1.5.2 -> 1.5.3 (#537748) 2026-07-05 20:43:55 +00:00
Thomas GerbetandGitHub 7f20a05640 zizmor: 1.25.2 -> 1.26.1 (#538250) 2026-07-05 20:29:23 +00:00
Thomas GerbetandGitHub e58be98c76 mysql84: 8.4.9 -> 8.4.10 (#533954) 2026-07-05 17:26:03 +00:00
Thomas GerbetandGitHub b58a5c28d1 docker: 29.6.0 -> 29.6.1 (#538107) 2026-07-05 17:25:44 +00:00
Thomas GerbetandGitHub 7bde72eae6 seafile-client: 9.0.15 -> 9.0.20 (#538242) 2026-07-05 16:25:53 +00:00
Thomas GerbetandGitHub 584196f474 bazarr: 1.5.6 -> 1.6.0 (#538399) 2026-07-05 16:20:23 +00:00
Thomas GerbetandGitHub e6a197a0a0 openvpn: 2.6.19 -> 2.6.21 (#538353) 2026-07-05 15:39:49 +00:00
Thomas GerbetandGitHub 627cd5379d avml: 0.18.0 -> 0.19.0 (#537231) 2026-07-01 15:07:27 +00:00
Thomas GerbetandGitHub 30a98390ab picocrypt-ng: 2.17 -> 2.18 (#536483) 2026-06-30 19:08:48 +00:00
Thomas GerbetandGitHub 9a8c703a7e tor-browser: 15.0.16 -> 15.0.17 (#536478) 2026-06-30 18:52:02 +00:00
Thomas GerbetandGitHub 750a240986 opencolorio: 2.5.1 -> 2.5.2 (#522871) 2026-06-28 21:13:53 +00:00
Thomas GerbetandGitHub d5dbcebb8c libreoffice-bin: 25.8.6 -> 26.2.4 (#531035) 2026-06-28 20:24:01 +00:00
Thomas GerbetandGitHub 669a4b9226 pdns-recursor: 5.4.1 -> 5.4.3 (#536176) 2026-06-28 19:34:05 +00:00
Thomas GerbetandGitHub da0799c0d2 python3Packages.yara-x: 1.18.0 -> 1.19.0 (#536258) 2026-06-28 12:46:50 +00:00
Thomas GerbetandGitHub 8bcc0151e4 brave: 1.91.175 -> 1.91.180 (#535103) 2026-06-28 11:45:14 +00:00
Thomas GerbetandGitHub 177154c733 yara-x: 1.18.0 -> 1.19.0 (#535047) 2026-06-25 08:23:44 +00:00
Thomas GerbetandGitHub 67b034f8e5 nixos/mysql: fix initialScript option after security fix (#534866) 2026-06-24 12:03:50 +00:00
Thomas Gerbet 1d6947077e nixos/mysql: fix default MySQL/Percona Server insecure authentication 
Existing deployments using MySQL or Percona Server with `services.mysql`
do not restrict authentication to the root@localhost user allowing any
user on the system to log in without a password.

With this changes:
* new deployments will use the `auth_socket` authentication by default
  to only allow the local root user to log in as the MySQL root user
* existing deployments with a stateVersion > 26.05 will also be moved to
  the `auth_socket` authentication
* existing deployments with a stateVersion <= 26.05 have a warning
  logged when the local authentication seems to be open

Users can disable this behavior by setting `services.mysql.secureSuperUserByDefault`
to `false`.
 2026-06-22 17:24:49 +02:00
Thomas GerbetandGitHub 57c2eccae9 matrix-continuwuity: 0.5.9 -> 0.5.10 (#533664) 2026-06-21 22:04:26 +00:00
Thomas GerbetandGitHub 14125f75df perlPackages.{IOCompress,CompressRawZlib,CompressRawBzip2}: bump to latest cpan release (#525980) 2026-06-21 19:03:06 +00:00
Thomas Gerbet d528156e99 mysql84: 8.4.9 -> 8.4.10 
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-10.html

Fixes CVE-2026-46863.
 2026-06-21 18:09:01 +02:00
Thomas GerbetandGitHub 86f122e7aa python3Packages.yara-x: 1.17.0 -> 1.18.0 (#533508) 2026-06-21 13:31:35 +00:00
Thomas GerbetandGitHub 1badc423dc librenms: 26.5.1 -> 26.6.1 (#532812) 2026-06-18 22:37:14 +00:00
Thomas GerbetandGitHub 8aae35f0b5 python3Packages.python-statemachine: 3.0.0 -> 3.2.0 (#532940) 2026-06-18 21:14:33 +00:00
Thomas Gerbet 374ed9f147 squid: 7.5 -> 7.6 
Fixes CVE-2026-47729

https://github.com/squid-cache/squid/releases/tag/SQUID_7_6
 2026-06-18 22:13:16 +02:00
Thomas GerbetandGitHub 0a4e8c95d0 brave: 1.91.171 -> 1.91.175 (#532873) 2026-06-18 18:58:01 +00:00
Thomas GerbetandGitHub 6fea4f15a8 clamav: 1.4.3 -> 1.5.2 (#525764) 2026-06-17 10:34:57 +00:00
Thomas GerbetandGitHub cf3501b791 lldap: 0.6.2 -> 0.6.3 (#515359) 2026-06-17 10:17:04 +00:00
Thomas GerbetandGitHub 546d006657 filebrowser-quantum: 1.2.2-stable -> 1.3.3-stable (#529626) 2026-06-17 07:44:57 +00:00
Thomas GerbetandGitHub 40dca4cbd0 weblate: 5.17 -> 2026.6.1 (#520436) 2026-06-15 13:50:40 +00:00
Thomas GerbetandGitHub 352426357c cosign: 3.0.6 -> 3.1.1 (#528787) 2026-06-15 11:36:19 +00:00
Thomas GerbetandGitHub 9f18bc66c3 prometheus: 3.11.3 → 3.12.0 (#530387) 2026-06-12 18:37:10 +00:00
Thomas GerbetandGitHub f9fbf8d5b7 apacheHttpd: 2.4.67 -> 2.4.68 (#530173) 2026-06-10 18:50:44 +00:00
Thomas GerbetandGitHub 3931e46ecb xen: patch with XSAs 490 through 494 (#529926) 2026-06-10 15:01:06 +00:00
Thomas GerbetandGitHub 06535a2913 gitsign: 0.16.0 -> 0.16.1 (#529728) 2026-06-09 07:52:22 +00:00
Thomas GerbetandGitHub 148931d918 phpPackages.composer: 2.10.0 -> 2.10.1 (#528026) 2026-06-08 20:40:31 +00:00
Thomas GerbetandGitHub 9de4dbb008 fulcio: 1.8.6 -> 1.8.7 (#528428) 2026-06-05 15:22:28 +00:00
Thomas GerbetandGitHub 4d72a4ae06 adguardhome: 0.107.76 -> 0.107.77 (#527227) 2026-06-04 07:59:24 +00:00
Thomas GerbetandGitHub 3dbdae131a apache-airflow: fix building on darwin (#527651) 2026-06-04 06:37:50 +00:00
Thomas GerbetandGitHub 00bf98593a opensc: fix CVE-2026-10275 (#527058) 2026-06-03 12:33:50 +00:00
Thomas GerbetandGitHub ee0632b43f apache-airflow: 3.2.1 -> 3.2.2 (#527066) 2026-06-03 09:05:34 +00:00
Thomas GerbetandGitHub 7b6cf6c59e python3Packages.stanza: 1.12.0 -> 1.12.1 (#527089) 2026-06-03 08:54:26 +00:00
Thomas GerbetandGitHub 317a18ffea exiftool: 13.58 -> 13.59 (#525534) 2026-06-03 07:11:18 +00:00
Thomas GerbetandGitHub 77454c3316 weechat-unwrapped: 4.9.0 -> 4.9.1 (#526428) 2026-06-03 06:45:09 +00:00
Thomas GerbetandGitHub cdc94f6de7 python3Packages.yara-x: 1.16.0 -> 1.17.0 (#526769) 2026-06-01 17:05:06 +00:00
Thomas Gerbet 10648d2877 exim: 4.99.3 -> 4.99.4 
Fixes CVE-2026-48840 / EXIM-Security-2026-05-19.1
https://www.exim.org/static/doc/security/EXIM-Security-2026-05-19.1/EXIM-Security-2026-05-19.1.txt

https://code.exim.org/exim/exim/releases/tag/exim-4.99.4
 2026-05-29 17:16:35 +02:00
Thomas GerbetandGitHub 104a842924 putty: 0.83 -> 0.84 (#524426) 2026-05-29 08:35:48 +00:00
Thomas GerbetandGitHub 128c7008eb wireshark{,-cli}: 4.6.5 -> 4.6.6 (#525326) 2026-05-28 22:09:18 +00:00
Thomas GerbetandGitHub 90c179dd65 yara-x: 1.16.0 -> 1.17.0 (#525190) 2026-05-28 15:53:55 +00:00
Thomas GerbetandGitHub 7fbf150377 fulcio: 1.8.5 -> 1.8.6 (#524667) 2026-05-27 09:10:45 +00:00
Thomas GerbetandGitHub 5743af0870 rekor-cli: 1.5.1 -> 1.5.2 (#524555) 2026-05-27 07:48:12 +00:00
Thomas GerbetandGitHub 92c689c930 avml: 0.17.0 -> 0.18.0 (#524343) 2026-05-26 07:45:11 +00:00
Thomas GerbetandGitHub 57b60da4ab varnish: fixes for VSV00019 (#522046) 2026-05-21 09:29:18 +00:00
Thomas GerbetandGitHub 7712f1fa01 zizmor: 1.25.0 -> 1.25.2 (#522093) 2026-05-20 09:17:11 +00:00
Thomas GerbetandGitHub 86ae87b3b8 cinny{-unwrapped,-desktop}: 4.11.1 -> 4.12.1 (#520385) 2026-05-17 19:21:23 +00:00
Thomas GerbetandGitHub b3a0792dc5 turbo-unwrapped: 2.9.6 -> 2.9.14 (#518655) 2026-05-16 14:14:42 +00:00
Thomas GerbetandGitHub bfc39a7f7c coredns: 1.14.2 -> 1.14.3 (#517990) 2026-05-16 11:55:47 +00:00
Thomas GerbetandGitHub 154fede95d opentelemetry-cpp: 1.26.0 -> 1.27.0, opentelemetry-proto: 1.8.0 -> 1.10.0 (#520278) 2026-05-15 16:32:17 +00:00
Thomas GerbetandGitHub 86da815f8b brave: 1.90.121 -> 1.90.122 (#519898) 2026-05-15 16:03:36 +00:00
Thomas GerbetandGitHub 4851b0126b nixos/oauth2-proxy: add trustedProxyIP option and warning when it is not set in combination with reverseProxy (#518211) 2026-05-15 15:14:39 +00:00
Thomas GerbetandGitHub f92583986d jenkins: 2.555.1 -> 2.555.2 (#519882) 2026-05-15 15:11:49 +00:00
Thomas GerbetandGitHub 9dc10e5af8 dovecot: 2.4.3 -> 2.4.4 (#519492) 2026-05-14 19:05:54 +00:00
Thomas GerbetandGitHub 70783cf449 exim: 4.99.2 -> 4.99.3 (#519615) 2026-05-14 18:19:12 +00:00
Thomas GerbetandGitHub be70d1a55b rucio: 39.3.1 -> 39.4.2 (#517676) 2026-05-13 13:26:09 +00:00
Thomas GerbetandGitHub 65013810da heimdall-proxy: 0.17.13 -> 0.17.14 (#514102) 2026-05-11 22:09:47 +00:00
Thomas GerbetandGitHub cb3dd058e7 tomcat10: 10.1.52 -> 10.1.54 (#503310) 2026-05-11 21:50:49 +00:00
Thomas GerbetandGitHub f6464b7bf2 tomcat9: 9.0.115 -> 9.0.117 (#502954) 2026-05-11 21:33:49 +00:00
Thomas GerbetandGitHub f5fc006966 tomcat11: 11.0.20 -> 11.0.21 (#507767) 2026-05-11 21:25:30 +00:00
Thomas Gerbet c0cef1c5dd mysql84: 8.4.8 -> 8.4.9 
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-9.html

Fixes CVE-2026-34270
Fixes CVE-2026-34271
Fixes CVE-2026-34276
Fixes CVE-2026-34308
Fixes CVE-2026-22009
Fixes CVE-2026-22017
Fixes CVE-2026-34303
Fixes CVE-2025-14017
Fixes CVE-2026-34318
Fixes CVE-2026-34317
Fixes CVE-2025-14017
Fixes CVE-2026-34318
Fixes CVE-2026-34317
Fixes CVE-2026-34319
Fixes CVE-2026-22004
Fixes CVE-2026-34304
Fixes CVE-2026-35236
Fixes CVE-2026-35237
Fixes CVE-2026-35238
Fixes CVE-2026-35239
Fixes CVE-2026-21998
Fixes CVE-2026-22005
Fixes CVE-2026-22002
Fixes CVE-2026-35240
Fixes CVE-2026-22015
Fixes CVE-2026-22001

https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixMSQL
 2026-05-11 23:14:19 +02:00
Thomas GerbetandGitHub fd542b8da9 perlPackages.NetCIDRLite: 0.23 -> 0.24 (#518896) 2026-05-11 18:34:03 +00:00
Thomas GerbetandGitHub 32f2a10034 pgbouncer: 1.25.1 -> 1.25.2 (#518233) 2026-05-11 18:33:33 +00:00
Thomas Gerbet 6482b46d61 dnsmasq: 2.92 -> 2.92rel2 
Fixes CVE-2026-2291
Fixes CVE-2026-4890
Fixes CVE-2026-4891
Fixes CVE-2026-4892
Fixes CVE-2026-4893
Fixes CVE-2026-5172

https://kb.cert.org/vuls/id/471747

Changelog:
```
version 2.92rel2
        2.92 point release incorporating fixes for
	CVE-2026-2291
	CVE-2026-4890
	CVE-2026-4891
	CVE-2026-4892
	CVE-2026-4893
	CVE-2026-5172
```
 2026-05-11 19:22:43 +02:00
Thomas GerbetandGitHub 8f99f65327 exiftool: 13.52 -> 13.58 (#515897) 2026-05-10 19:36:19 +00:00
Thomas GerbetandGitHub 3f93b67eac librewolf-bin-unwrapped: 150.0.1-1 -> 150.0.2-1 (#518061) 2026-05-10 12:46:18 +00:00
Thomas GerbetandGitHub 7b532ed231 brave: 1.89.145 -> 1.90.121 (#518124) 2026-05-10 12:36:15 +00:00
Thomas GerbetandGitHub 7ebae83e14 gitsign: 0.15.0 -> 0.16.0 (#518658) 2026-05-10 11:51:42 +00:00
Thomas GerbetandGitHub f579dd6aab osquery: 5.22.1 -> 5.23.0 (#518381) 2026-05-10 11:39:52 +00:00
Thomas GerbetandGitHub 1021c517a4 proftpd: patch CVE-2026-44331 (#517211) 2026-05-07 13:21:16 +00:00
Thomas GerbetandGitHub 695b801744 freerdp: 3.24.2 -> 3.26.0 (#512944) 2026-05-07 10:49:06 +00:00
Thomas GerbetandGitHub fced126a59 python3Packages.yara-x: 1.15.0 -> 1.16.0 (#517431) 2026-05-07 06:25:21 +00:00