From f616c55cb3d4f7a3d9421a1b895f8bf05610b610 Mon Sep 17 00:00:00 2001 From: Arnout Engelen Date: Thu, 24 Sep 2026 18:31:02 +0200 Subject: [PATCH 1/2] cpio: pin GNU info page 'updated' time to SDE Fixes #566543 --- pkgs/by-name/cp/cpio/package.nix | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/pkgs/by-name/cp/cpio/package.nix b/pkgs/by-name/cp/cpio/package.nix index 30e608bda31f..cf902f2ed079 100644 --- a/pkgs/by-name/cp/cpio/package.nix +++ b/pkgs/by-name/cp/cpio/package.nix @@ -41,6 +41,13 @@ stdenv.mkDerivation (finalAttrs: { }) ]; + postPatch = '' + # This file determines the date shown in the infopage. + # It is unreproducible because CVE-2026-66486.patch touches it. + # We could reset it to SOURCE_DATE_EPOCH or the date of that patch. + touch -d $(date --utc --date="@''${SOURCE_DATE_EPOCH:-$(date +%s)}" +%Y-%m-%d) doc/cpio.texi + ''; + nativeBuildInputs = [ autoreconfHook texinfo # for makeinfo From 069392e07b2098e0f82a90fec9f9a00317ad899f Mon Sep 17 00:00:00 2001 From: Arnout Engelen Date: Sun, 27 Sep 2026 12:08:30 +0200 Subject: [PATCH 2/2] cpio: mark raboof as maintainer as the package is currently unmaintained --- pkgs/by-name/cp/cpio/package.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/by-name/cp/cpio/package.nix b/pkgs/by-name/cp/cpio/package.nix index cf902f2ed079..e8d8c6221980 100644 --- a/pkgs/by-name/cp/cpio/package.nix +++ b/pkgs/by-name/cp/cpio/package.nix @@ -77,6 +77,7 @@ stdenv.mkDerivation (finalAttrs: { homepage = "https://www.gnu.org/software/cpio/"; description = "Program to create or extract from cpio archives"; license = lib.licenses.gpl3; + maintainers = with lib.maintainers; [ raboof ]; platforms = lib.platforms.all; priority = 6; # resolves collision with gnutar's "libexec/rmt" mainProgram = "cpio";