nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-03 21:40:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,085,627 Commits 261 Branches 81 Tags
python-updates
Commit Graph

535 Commits

Author SHA1 Message Date
nixpkgs-ci[bot]
4795780625 Merge staging-next into staging 2026-09-30 18:12:34 +00:00
whispers
e9f80ab297 openssl_4_0: 4.0.2 -> 4.0.3 (#568281) 2026-09-30 13:25:51 +00:00
nixpkgs-ci[bot]
4532417f82 Merge staging-next into staging 2026-09-30 06:17:21 +00:00
whispers
643cbea547 openssl_3_5: 3.5.8 -> 3.5.9 
https://github.com/openssl/openssl/releases/tag/openssl-3.5.9

Fixes: CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872,
CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804,
CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782,
CVE-2026-84784
 2026-09-29 10:20:51 -04:00
whispers
550e4789f4 openssl_3_6: 3.6.4 -> 3.6.5 
https://github.com/openssl/openssl/releases/tag/openssl-3.6.5

Fixes: CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872,
CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804,
CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782,
CVE-2026-84784
 2026-09-29 10:14:24 -04:00
whispers
5ed3d50c67 openssl_4_0: 4.0.2 -> 4.0.3 
https://github.com/openssl/openssl/releases/tag/openssl-4.0.3

Fixes: CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872,
CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804,
CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782,
CVE-2026-84783, CVE-2026-84784
 2026-09-29 10:08:43 -04:00
Adam C. Stephens
1f4520617f openssl_3: remove as end of life 2026-09-28 10:03:46 -04:00
Vladimír Čunát
45a706d908 openssl_3_6: 3.6.3 -> 3.6.4 (#557397) 2026-08-29 06:41:55 +00:00
Adam C. Stephens
5f817cd551 openssl_3_6: 3.6.3 -> 3.6.4 
Changelog: https://github.com/openssl/openssl/releases/tag/openssl-3.6.4
 2026-08-28 09:58:25 -04:00
Adam C. Stephens
be467b2cf5 openssl_4_0: 4.0.1 -> 4.0.2 
Changelog: https://github.com/openssl/openssl/releases/tag/openssl-4.0.2
 2026-08-28 09:57:23 -04:00
Adam C. Stephens
2a33cb7d90 openssl_3_5: 3.5.7 -> 3.5.8 
Changelog: https://github.com/openssl/openssl/releases/tag/openssl-3.5.8
 2026-08-28 09:57:21 -04:00
Adam C. Stephens
9075dd2236 openssl_3: 3.0.21 -> 3.0.22 
Changelog: https://github.com/openssl/openssl/releases/tag/openssl-3.0.22
 2026-08-28 09:55:57 -04:00
Martin Weinelt
e189cf1e3d openssl_1_1: drop (#545128) 2026-08-06 21:20:38 +02:00
ajs124
3e3a8a8025 openssl_1_1: drop 
finally
 2026-08-06 20:16:36 +02:00
·𐑑𐑴𐑕𐑑𐑩𐑤
6b7f1b45dd openssl: no separateDebugInfo for picolibc 2026-07-28 22:33:36 -07:00
Emily
fdb820602b treewide: drop simple x86_64-darwin mentions 
To reproduce:

    $ nix run nixpkgs/3b32825de172d0bc85664f495edb096b10862524#ast-grep \
        -- scan --update-all --inline-rules '
          id: nix-x86_64-darwin
          language: nix
          rule:
            any:
              - pattern: "\"x86_64-darwin\""
                kind: list_expression > string_expression
              - pattern:
                  context: "{ \"x86_64-darwin\" = $EXPR; }"
                  selector: binding
              - pattern:
                  context: "{ x86_64-darwin = $EXPR; }"
                  selector: binding
          fix:
            template: ""
        ' pkgs
    $ nix run nixpkgs/3b32825de172d0bc85664f495edb096b10862524#ast-grep \
        -- scan --update-all --inline-rules '
          id: json-first-x86_64-darwin
          language: json
          rule:
            kind: object > pair:nth-child(1)
            has:
              pattern: "\"x86_64-darwin\""
              field: key
          fix:
            template: ""
            expandEnd: { regex: "," }
        ' pkgs
    $ nix run nixpkgs/3b32825de172d0bc85664f495edb096b10862524#ast-grep \
        -- scan --update-all --inline-rules '
          id: json-x86_64-darwin
          language: json
          rule:
            kind: object > pair
            has:
              pattern: "\"x86_64-darwin\""
              field: key
          fix:
            template: ""
            expandStart: { regex: "," }
        ' pkgs
    $ git restore pkgs/by-name/om/omnix/package.nix
    $ git diff --name-only -z \
        | nix shell nixpkgs/3b32825de172d0bc85664f495edb096b10862524#gnused \
            -c xargs -0 sed -i '/^$/N; /^\n\? \+$/d'
    $ treefmt
 2026-07-15 03:58:16 +01:00
Martin Weinelt
67e8f29d94 openssl_3_6: 3.6.2 -> 3.6.3 (#530964) 2026-06-13 14:26:07 +00:00
nixpkgs-ci[bot]
557e97ba7e Merge staging-next into staging 2026-06-13 12:38:13 +00:00
Markus Theil
66c77575f3 openssl_4_0: 4.0.0 -> 4.0.1 
Update to fix multiple CVEs.

See: https://github.com/openssl/openssl/releases/tag/openssl-4.0.1

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-06-12 10:11:29 +02:00
Markus Theil
cd221fe379 openssl_3_5: 3.5.6 -> 3.5.7 
Updated to fix multiple CVEs.

See: https://github.com/openssl/openssl/releases/tag/openssl-3.5.7

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-06-12 10:11:29 +02:00
Markus Theil
3ec7a2b088 openssl_3: 3.0.20 -> 3.0.21 
updated to fix multiple CVEs.

See: https://github.com/openssl/openssl/releases/tag/openssl-3.0.21

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-06-12 10:11:25 +02:00
Markus Theil
ed6faeb409 openssl_3_6: 3.6.2 -> 3.6.3 
Update to fix multiple CVEs.

See: https://github.com/openssl/openssl/releases/tag/openssl-3.6.3

Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-06-12 09:40:47 +02:00
nixpkgs-ci[bot]
f50dc660d4 Merge staging-next into staging 2026-05-28 18:54:19 +00:00
Ethan Carter Edwards
e848963f6f openssl: set meta.donationPage 
Signed-off-by: Ethan Carter Edwards <ethan@ethancedwards.com>
 2026-05-27 15:38:52 -07:00
nixpkgs-ci[bot]
3dd8c8415d Merge staging-next into staging 2026-05-24 00:43:24 +00:00
Audrey Dutcher
82c51c6fc8 openssl: fix tests on freebsd native 2026-05-22 12:38:45 -04:00
Sizhe Zhao
2b8ae0a0f1 openssl*: enable strictDeps and __structuredAttrs 2026-04-19 11:09:40 +08:00
K900
5d17008f6c Merge remote-tracking branch 'origin/staging-next' into staging 2026-04-18 21:18:53 +03:00
nixpkgs-ci[bot]
f360d3dce0 Merge master into staging-next 2026-04-18 12:12:51 +00:00
Sizhe Zhao
9ef1da31a5 openssl_4_0: init at 4.0.0 2026-04-18 14:24:57 +08:00
Markus Theil
f61a00a753 openssl: cleanup already upstreamed patches 
Signed-off-by: Markus Theil <theil.markus@gmail.com>
 2026-04-09 22:26:29 +02:00
dish
2a2d1df32a openssl: 3.0.19 -> 3.0.20, 3.5.5 -> 3.5.6, 3.6.1 -> 3.6.2 (#507974) 2026-04-09 13:28:22 +00:00
Marcel
8390a9a137 openssl_3_6: 3.6.1 -> 3.6.2 2026-04-08 17:27:23 +02:00
Marcel
50e302513a openssl_3_5: 3.5.5 -> 3.5.6 2026-04-08 17:27:23 +02:00
Marcel
782609f5f7 openssl_3: 3.0.19 -> 3.0.20 2026-04-08 17:27:23 +02:00
nixpkgs-ci[bot]
efa670fd22 Merge staging-next into staging 2026-03-14 00:22:22 +00:00
nixpkgs-ci[bot]
23ee7d594c Merge master into staging-next 2026-03-14 00:21:49 +00:00
Silvan Mosberger
9ae65c847f teams/security-review: init and add as maintainer (#496902) 2026-03-13 18:41:21 +00:00
Cosima Neidahl
134ef641fa {openssl_3_5,openssl_3_6}: Fix ELF ABI mismatch on powerpc64 (#497525) 2026-03-08 11:39:09 +00:00
OPNA2608
50cfe69800 {openssl_3_5,openssl_3_6}: Fix ELF ABI mismatch on powerpc64 2026-03-07 12:22:48 +01:00
Alexander Bantyev
2839911e81 various: add security-review team as a maintainer 
Adds the @NixOS/security-review team as a maintainer to multiple
packages deemed to be important security-wise.

For the motivation of the package list, see:
https://github.com/NixOS/nixpkgs/issues/494349#issuecomment-4005099033
 2026-03-05 15:19:44 +01:00
nixpkgs-ci[bot]
347c2c32a5 Merge staging-next into staging 2026-03-03 18:17:41 +00:00
Adam C. Stephens
c1d68ce984 openssl_3_5: init at 3.5.5 
This is the latest LTS release supported until 2030/03
 2026-03-02 14:58:08 +00:00
Artemis Tosini
714f328f94 openssl: fix 3.6.1 build on mingw 
Remove one out-of-date patch and add a new necessary patch.
 2026-02-12 15:19:11 -05:00
nixpkgs-ci[bot]
e217c74eac Merge staging-next into staging 2026-02-06 18:16:24 +00:00
Markus Sütter
196b385317 various: add meta.identifier.cpeParts to a batch of packages 2026-02-02 09:22:55 +01:00
nixpkgs-ci[bot]
42db76d24b Merge staging-next into staging 2026-01-31 00:22:08 +00:00
Marc Brinkmann
61e7d035d3 openssl_1_1: fix build after 3.0.19 patch update 
The security update for OpenSSL 3.0.19 (d1cc6bdd) updated
use-etc-ssl-certs.patch to match the new formatting in 3.0.19,
which removed whitespace from preprocessor directives.

OpenSSL 1.1.1w still uses the old formatting, causing the shared
patch to fail.

This patch restores the old patch files into subfolder `1.1`, they
are byte-for-byte identical (same git blob hash).
 2026-01-29 15:01:10 +01:00
nixpkgs-ci[bot]
604c926bea Merge staging-next into staging 2026-01-28 12:09:03 +00:00
Vladimír Čunát
3fccac4914 openssl_3: 3.0.18 -> 3.0.19 
The second item (severity: High) has possible unauthenticated RCE:
https://www.openwall.com/lists/oss-security/2026/01/27/5
https://github.com/openssl/openssl/blob/openssl-3.0.19/CHANGES.md#openssl-30

The patches differ in whitespace only, as that's what upstream changed.
 2026-01-28 08:15:49 +01:00