nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-12-03 20:33:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
641,268 Commits 220 Branches 125 Tags 6.3 GiB
23363112ca
Commit Graph

227 Commits

Author SHA1 Message Date
Alexis Hildebrandt
755b915a15 treewide: Remove indefinite article from meta.description 
nix run nixpkgs#silver-searcher -- -G '\.nix$' -0l 'description.*"[Aa]n?' pkgs \
  | xargs -0 nix run nixpkgs#gnused -- -i '' -Ee 's/(description.*")[Aa]n? (.)/\1\U\2/'
 2024-06-09 23:07:45 +02:00
Thomas Gerbet
ef6fea2d86 openssh: move Kerberos support into a dedicated package 
The `openssh` and `openssh_hpn` packages are now built without
the Kerberos support by default in an effort to reduce the attack surface.

The Kerberos support is likely used only by a fraction of the total users
(I'm guessing mainly users integrating SSH in an Active Directory env) so
dropping it should not impact too many users. It should also be noted that
the Kerberos/GSSAPI auth is disabled by default in the configuration.
`opensshWithKerberos` and `openssh_hpnWithKerberos` are added in order
to provide an easy migration path for users needing this support.

The `openssh_gssapi` package is kept untouched.
 2024-06-05 19:45:31 +10:00
Luke Granger-Brown
402031bfe6
Merge pull request #308325 from wlcx/openssh-passwd 
openssh: build with correct passwd path
 2024-05-17 01:31:46 +01:00
Sam Willcocks
54a3d44e24 openssh: build with correct passwd path 2024-05-16 17:42:17 +01:00
Tom Fitzhenry
03e851ea8e openssh: fix linkOpenSSL=false by linking libxcrypt 
Possibly broken during https://github.com/NixOS/nixpkgs/pull/181764

Context: https://sourceware.org/legacy-ml/libc-alpha/2017-08/msg01257.html
 2024-04-29 00:17:17 +10:00
Thomas Gerbet
1a462800bf openssh_gssapi: 9.6p1 -> 9.7p1 
This is a follow up to #295133 now that the GSSAPI patch has been updated.

Upstream changes:
https://www.openssh.com/txt/release-9.7
 2024-04-27 23:01:20 +10:00
Tom Fitzhenry
62ace1bb03 openssh: add nixosTests.openssh to passthru.tests 2024-04-14 15:00:30 +10:00
Thomas Gerbet
6ee4b8c8bf openssh: disable support for DSA keys by default 
DSA signature is being deprecated by upstream as noted in the 9.7
release notes: https://www.openssh.com/txt/release-9.7

An attribute is added to allow users to restore support while it is
still possible.
 2024-04-03 16:03:29 +02:00
Robert Scott
a963a86e5c
Merge pull request #295142 from LeSuisse/openssh_gssapi-9.6p1 
openssh_gssapi: 9.5p1 -> 9.6p1
 2024-03-15 18:57:08 +00:00
Fabián Heredia Montiel
98114f7271
Merge pull request #295133 from LeSuisse/openssh-9.7p1 
openssh: 9.6p1 -> 9.7p1
 2024-03-12 14:43:43 -06:00
Thomas Gerbet
e2bac969aa openssh_gssapi: 9.5p1 -> 9.6p1 
Includes the mitigation for CVE-2023-48795.

Changes:
https://www.openssh.com/txt/release-9.6
 2024-03-11 23:26:46 +01:00
Thomas Gerbet
41ba7c816b openssh: 9.6p1 -> 9.7p1 
Changes:
https://www.openssh.com/txt/release-9.7
 2024-03-11 22:55:15 +01:00
Thomas Gerbet
99237c2958 openssh_hpn: 9.5p1 -> 9.7p1 
Includes the mitigation for CVE-2023-48795.

Changes:
https://www.openssh.com/txt/release-9.7
https://www.openssh.com/txt/release-9.6
 2024-03-11 22:39:46 +01:00
Robin Gloster
b5556f2c37
Merge pull request #268109 from helsinki-systems/helsinki-maintainer-team 
maintainers/teams: init and add helsinki-systems
 2023-12-20 11:43:29 +01:00
Sandro Jäckel
7d565226df
openssh: 9.5p1 -> 9.6p1 2023-12-18 20:34:20 +01:00
ajs124
7b6580dba4 maintainers/teams: init and add helsinki-systems 2023-11-30 19:11:08 +01:00
Janne Heß
73b2187e5f
Merge pull request #259459 from jcgruenhage/openssh-ldns 
openssh: enable ldns
 2023-10-30 11:03:41 +01:00
Jan Christian Grünhage
2342298229
openssh: enable ldns 
ldns is used for validating DNSSEC responses. With ldns enabled, using
SSHFP records on DNSSEC signed zones allows connecting to ssh servers
with host keys being automatically validated.
 2023-10-06 22:45:30 +02:00
Janne Heß
6cba6142f7
openssh_gssapi: 9.4p1 -> 9.5p1 2023-10-04 23:24:11 +02:00
Janne Heß
df07e83ff6
openssh_hpn: 9.4p1 -> 9.5p1 2023-10-04 21:30:56 +02:00
Janne Heß
2d99e37a9b
openssh: 9.4p1 -> 9.5p1 2023-10-04 21:30:42 +02:00
Artturi
2dd22620f3
Merge pull request #247443 from amjoseph-nixpkgs/pr/openssh/withPAM 2023-08-28 21:45:48 +03:00
Adam Joseph
49add44e4d openssh: add withPAM parameter 2023-08-28 20:38:32 +03:00
Sergei Trofimovich
5eb1879e4e openssh: backport zlib-1.3 support 2023-08-19 17:30:22 +01:00
Janne Heß
289c866529
openssh_gssapi: 9.3p2 -> 9.4p1 2023-08-11 14:27:04 +02:00
Janne Heß
3f51296ddb
openssh_hpn: 9.3p2 -> 9.4p1 2023-08-11 14:26:51 +02:00
Janne Heß
df8ba79183
openssh: 9.3p2 -> 9.4p1 2023-08-11 14:26:42 +02:00
Elliot Cameron
be38b2c2b5 openssh_gssapi: 9.0p1 -> 9.3p2 2023-08-07 17:22:29 -04:00
figsoda
251d2cbfc2 pkgs/tools/networking: remove dead code 2023-07-25 11:36:57 -04:00
Janne Heß
ebcb68135f
openssh: 9.3p1 -> 9.3p2 (#244402) 
Changelog: https://www.openssh.com/txt/release-9.3p2

This also updates openssh_hpn because the patches still apply on 9.3p2.
 2023-07-20 20:33:46 +02:00
Ashish SHUKLA
03c969f0cb
openssh_hpn: 9.2p1 -> 9.3p1 2023-05-24 10:21:18 +02:00
Janne Heß
53d9b6db12
openssh_*: Add knownVulnerabilities 2023-03-21 09:36:54 +01:00
Janne Heß
b73979f09b
openssh: 9.2p1 -> 9.3p1 2023-03-21 09:36:53 +01:00
Alexandre Iooss
284e7c020b openssh: enable strictDeps 2023-03-03 08:30:17 +01:00
Ashish SHUKLA
7df36e5add
openssh_hpn: 9.1p1 -> 9.2p1 
The latest patch has diffs with mixed strip prefixes counts
(i.e. patch -pX) so it needs to be split into two diffs, one that can
be applied with -p1 and one that needs to be fixed up
 2023-02-18 11:25:08 +00:00
Janne Heß
e918da4d48
openssh: 9.1p1 -> 9.2p1 2023-02-14 12:30:15 +01:00
Shawn8901
133fa5f867 treewide: remove global with lib; in pkgs/tools 2023-01-24 17:41:44 +01:00
Guillaume Girol
33afbf39f6 treewide: switch to nativeCheckInputs 
checkInputs used to be added to nativeBuildInputs. Now we have
nativeCheckInputs to do that instead. Doing this treewide change allows
to keep hashes identical to before the introduction of
nativeCheckInputs.
 2023-01-21 12:00:00 +00:00
Ashish SHUKLA
c9dc68ef7e openssh_hpn: 9.0p1 -> 9.1p1 2022-10-27 01:03:21 -04:00
Janne Heß
a13e1e6277
openssh: 9.0p1 -> 9.1p1 2022-10-04 12:56:15 +02:00
Bernardo Meurer
c249583234 openssh: enable kerberos on aarch64-darwin 2022-07-14 13:30:50 -07:00
Jairo Llopis
da4c6be018
openssh_gssapi: 8.4p1 -> 9.0p1 
Fixes https://github.com/NixOS/nixpkgs/issues/142999, CVE-2021-28041, CVE-2021-41617, CVE-2016-20012

@moduon MT-904
 2022-07-06 13:28:10 +01:00
wyndon
b2bebc3586 pkgsMusl.openssh: fix build 2022-04-24 10:34:42 +00:00
Guillaume Girol
0f9c731efa
Merge pull request #168326 from wahjava/update-openssh-hpn 
openssh_hpn: 8.9p1 -> 9.0p1
 2022-04-16 13:56:43 +00:00
Ashish SHUKLA
72ff0a0bf8
openssh_hpn: 8.9p1 -> 9.0p1 2022-04-12 02:27:03 +05:30
Janne Heß
07eeff9055
Merge #167852: openssh: 8.9p1 -> 9.0p1 
(cherry picked from commit 830b4daeb1)
> This release is focused on bug fixing.
 2022-04-10 11:20:04 +02:00
Alyssa Ross
c010a19a56
Merge remote-tracking branch 'nixpkgs/staging-next' into staging 
Conflicts:
	pkgs/development/python-modules/hypothesmith/default.nix
 2022-03-04 14:53:05 +00:00
Ashish SHUKLA
80dfb3f744
openssh_hpn: 8.8p1 -> 8.9p1 2022-03-04 02:50:34 +05:30
Janne Heß
0269c10d74
openssh: 8.8p1 -> 8.9p1 2022-02-23 20:36:18 +01:00
Dmitry Kalinkin
b7480c8674
pkgsStatic.openssh: fix build 
Remove reference to libredirect for cross builds, as for those the tests are disabled:
4818f809a9/pkgs/stdenv/generic/make-derivation.nix (L103)
 2022-01-19 09:12:27 -05:00