From e81d553fd5bd192524af37f231ed1bc3a1d17d7d Mon Sep 17 00:00:00 2001 From: Yureka Date: Wed, 27 May 2026 15:30:59 +0200 Subject: [PATCH 1/3] fastnetmon-advanced: 2.0.372 -> 2.0.380 https://github.com/FastNetMon/fastnetmon-advanced-releases/releases/tag/v2.0.380 Fixes: CVE-2026-48691, CVE-2026-48690, CVE-2026-48688, CVE-2026-48683, CVE-2026-48684, CVE-2026-48689, CVE-2026-48686 (cherry picked from commit f9f9f1be278c24fb5f9da662cbb9cdb134e19b53) --- pkgs/by-name/fa/fastnetmon-advanced/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/fa/fastnetmon-advanced/package.nix b/pkgs/by-name/fa/fastnetmon-advanced/package.nix index 2c2061dac530..e19e5820bc3b 100644 --- a/pkgs/by-name/fa/fastnetmon-advanced/package.nix +++ b/pkgs/by-name/fa/fastnetmon-advanced/package.nix @@ -9,11 +9,11 @@ stdenv.mkDerivation rec { pname = "fastnetmon-advanced"; - version = "2.0.372"; + version = "2.0.380"; src = fetchurl { - url = "https://repo.fastnetmon.com/fastnetmon_ubuntu_jammy/pool/fastnetmon/f/fastnetmon/fastnetmon_${version}_amd64.deb"; - hash = "sha256-FwYAbTBkk+AciDVxTIimswsB0M3gbzKX+03PD0fLMsY="; + url = "https://repo.fastnetmon.com/fastnetmon_ubuntu_noble/pool/fastnetmon/f/fastnetmon/fastnetmon_${version}_amd64.deb"; + hash = "sha256-4hCrDaFat0kEbyzKg6nHdV+LlqCBYYJEojyvXyPYKD0="; }; nativeBuildInputs = [ From 0ce502e7741ffb93e5cafb9b0201c981a467766a Mon Sep 17 00:00:00 2001 From: Yureka Date: Wed, 27 May 2026 16:16:46 +0200 Subject: [PATCH 2/3] nixos/fastnetmon: always define global hostgroup Fixes nixosTests.fastnetmon-advanced with fastnetmon-advanced 2.0.376+ (cherry picked from commit 334db00fa1026540be8e2d9186966638bf7bbc42) --- nixos/modules/services/networking/fastnetmon-advanced.nix | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/nixos/modules/services/networking/fastnetmon-advanced.nix b/nixos/modules/services/networking/fastnetmon-advanced.nix index 87ed120291f9..5ed87d18c1d8 100644 --- a/nixos/modules/services/networking/fastnetmon-advanced.nix +++ b/nixos/modules/services/networking/fastnetmon-advanced.nix @@ -207,6 +207,10 @@ in AmbientCapabilities = "cap_net_bind_service"; }; }; + + services.fastnetmon-advanced.hostgroups = { + global = { }; + }; }) (lib.mkIf (cfg.enable && cfg.enableAdvancedTrafficPersistence) { From a7d9e04f3ae6d8c6440b375303921a017e44d64c Mon Sep 17 00:00:00 2001 From: Yureka Date: Wed, 27 May 2026 16:34:03 +0200 Subject: [PATCH 3/3] nixos/tests/fastnetmon-advanced: adjust gobgp peer up message (cherry picked from commit 0020162e2e5cb75e563895c3c56377d79cf8cb89) --- nixos/tests/fastnetmon-advanced.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/tests/fastnetmon-advanced.nix b/nixos/tests/fastnetmon-advanced.nix index e9bce4f8eb9f..957f26017f4c 100644 --- a/nixos/tests/fastnetmon-advanced.nix +++ b/nixos/tests/fastnetmon-advanced.nix @@ -62,7 +62,7 @@ bird.wait_for_unit("bird.service") fnm.wait_until_succeeds('journalctl -eu fastnetmon.service | grep "BGP daemon restarted correctly"') - fnm.wait_until_succeeds("journalctl -eu gobgp.service | grep BGP_FSM_OPENCONFIRM") + fnm.wait_until_succeeds('journalctl -eu gobgp.service | grep "Peer Up"') bird.wait_until_succeeds("birdc show protocol fnm | grep Estab") fnm.wait_until_succeeds('journalctl -eu fastnetmon.service | grep "API server listening"') fnm.succeed("fcli set blackhole 172.23.42.123")