From 94c6bc4eacb9b6813681c8b2136cf07d74c9cfcb Mon Sep 17 00:00:00 2001 From: whispers Date: Thu, 3 Sep 2026 17:59:02 -0400 Subject: [PATCH 1/2] go_1_26: 1.26.7 -> 1.26.8 changelog: https://go.dev/doc/devel/release#go1.26.minor diff: https://github.com/golang/go/compare/go1.26.7...go1.26.8 (cherry picked from commit 54c6f0648c477d595312ad315cb99eb331aa343a) --- pkgs/development/compilers/go/1.26.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/compilers/go/1.26.nix b/pkgs/development/compilers/go/1.26.nix index ccb5b67f17af..0a2708bba8da 100644 --- a/pkgs/development/compilers/go/1.26.nix +++ b/pkgs/development/compilers/go/1.26.nix @@ -25,11 +25,11 @@ let in stdenv.mkDerivation (finalAttrs: { pname = "go"; - version = "1.26.7"; + version = "1.26.8"; src = fetchurl { url = "https://go.dev/dl/go${finalAttrs.version}.src.tar.gz"; - hash = "sha256-DtJOrHVRBQhbif6cq8J0K5GgrXuUtZ0602SRjryJVq0="; + hash = "sha256-Tjm5jkL5RvoFrIvFtxh335fb23y7Gnd7VBZnrXEX/S4="; }; strictDeps = true; From 257cd5b258336d6254b2bf4b5c12156b7b8f8821 Mon Sep 17 00:00:00 2001 From: whispers Date: Tue, 29 Sep 2026 10:12:34 -0400 Subject: [PATCH 2/2] openssl_3_6: 3.6.4 -> 3.6.5 https://github.com/openssl/openssl/releases/tag/openssl-3.6.5 Fixes: CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84784 (cherry picked from commit 550e4789f4e756029e46522f21549165866bb84b) --- pkgs/development/libraries/openssl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix index 8322e3065fdb..21f934044112 100644 --- a/pkgs/development/libraries/openssl/default.nix +++ b/pkgs/development/libraries/openssl/default.nix @@ -506,8 +506,8 @@ in }; openssl_3_6 = common { - version = "3.6.4"; - hash = "sha256-m/+qGtHgezVMIb0zJOwC+hVXn0Wn0ElLPnS8RJtzM+8="; + version = "3.6.5"; + hash = "sha256-ohV8KDDv3sN4iTmwDJsGODBtPwu7dtxIMu5QO7OX35g="; patches = [ # Support for NIX_SSL_CERT_FILE, motivation: