ldns: 1.9.0 -> 1.9.2#530337
Conversation
whispersofthedawn
left a comment
There was a problem hiding this comment.
fixes CVE-2026-10846. also see https://seclists.org/oss-sec/2026/q2/863
changelog: https://github.com/NLnetLabs/ldns/blob/1.9.1/Changelog
diff: NLnetLabs/ldns@1.9.0...1.9.1
changelog and diff seem fine enough. built ldns and all direct dependents (openssh, perlPackages.ZonemasterLDNS, freeswitch, strongswan, redwax-tool, libreswan, tlspool, dnsperf) on x86_64-linux and aarch64-linux too.
fe7c1ce to
7a49c13
Compare
|
Automatic update generated by nixpkgs-update tools. This update was made based on information from https://repology.org/project/ldns/versions. meta.description for ldns is: Library with the aim of simplifying DNS programming in C meta.homepage for ldns is: https://www.nlnetlabs.nl/projects/ldns/ Updates performed
To inspect upstream changesImpactChecks done
Rebuild report (if merged into master) (click to expand)Instructions to test this update (click to expand)Either download from the cache: (The nixpkgs-update cache is only trusted for this store-path realization.) Or, build yourself: Or: After you've downloaded or built it, look at the files and if there are any, run the binaries: Pre-merge build resultsNixpkgs review skipped Maintainer pingsTip As a maintainer, if your package is located under |
|
upstream diff for 1.9.2 looks completely innocuous. built |
|
Successfully created backport PR for |
Automatic update generated by nixpkgs-update tools. This update was made based on information from https://repology.org/project/ldns/versions.
meta.description for ldns is: Library with the aim of simplifying DNS programming in C
meta.homepage for ldns is: https://www.nlnetlabs.nl/projects/ldns/
Updates performed
To inspect upstream changes
Impact
Checks done
passthru.tests, if any, passedRebuild report (if merged into master) (click to expand)
Instructions to test this update (click to expand)
Either download from the cache:
(The nixpkgs-update cache is only trusted for this store-path realization.)
For the cached download to work, your user must be in the
trusted-userslist or you can usesudosince root is effectively trusted.Or, build yourself:
Or:
After you've downloaded or built it, look at the files and if there are any, run the binaries:
Pre-merge build results
Nixpkgs review skipped
Maintainer pings
Tip
As a maintainer, if your package is located under
pkgs/by-name/*, you can comment@NixOS/nixpkgs-merge-bot mergeto automatically merge this update using thenixpkgs-merge-bot.