nixpkgs security changes
nixpkgssecuritychanges.gerbet.me
nixpkgs security changes
@nixpkgssecuritychanges.gerbet.me
Bot publishing merged #nixpkgs pull-request with a security label

Managed by @thomas.gerbet.me / 🦣 https://social.gerbet.me/@Le_suisse

Also on 🦣 https://social.gerbet.me/@nixpkgssecuritychanges
[Backport release-25.11] librewolf-unwrapped: 146.0.1-1 -> 147.0-1

https://github.com/NixOS/nixpkgs/pull/480744

#security
January 18, 2026 at 2:03 PM
music-assistant: 2.7.3 -> 2.7.5, python3Packages.aiosendspin: 1.2.0 -> 2.1.0, python3Packages.py-opensonic: 7.0.4 -> 8.1.1

https://github.com/NixOS/nixpkgs/pull/480857

#security
January 18, 2026 at 1:32 AM
[Backport release-25.11] freerdp: 3.20.0 -> 3.20.2

https://github.com/NixOS/nixpkgs/pull/481118

#security
January 17, 2026 at 7:32 PM
January 17, 2026 at 5:34 PM
[Backport release-25.11] lasuite-docs: 4.2.0 -> 4.4.0

https://github.com/NixOS/nixpkgs/pull/481092

#security
January 17, 2026 at 5:34 PM
January 17, 2026 at 4:37 PM
glibc: 2.42-47 -> 2.42-50, fixes CVE-2026-0915, CVE-2026-0861

https://github.com/NixOS/nixpkgs/pull/480822

#security
January 17, 2026 at 3:35 PM
January 17, 2026 at 3:35 PM
[Backport release-25.11] wireshark: 4.6.2 -> 4.6.3

https://github.com/NixOS/nixpkgs/pull/481029

#security
January 17, 2026 at 2:35 PM
[Backport release-25.11] proxychains-ng: apply patch for CVE-2025-34451

https://github.com/NixOS/nixpkgs/pull/481004

#security
January 17, 2026 at 1:39 PM
January 17, 2026 at 1:39 PM
[25.11] paperless-ngx: add patches for GHSA-24x5-wp64-9fcc, GHSA-7cq3-mhxq-w946, GHSA-28cf-xvcf-hw6m

https://github.com/NixOS/nixpkgs/pull/480319

#security
January 17, 2026 at 12:45 PM
proxychains-ng: apply patch for CVE-2025-34451

https://github.com/NixOS/nixpkgs/pull/479844

#security
January 17, 2026 at 12:06 PM
[Backport release-25.11] pdns-recursor: 5.2.6 -> 5.2.7

https://github.com/NixOS/nixpkgs/pull/479945

#security
January 17, 2026 at 12:06 PM
[release-25.11] misskey: apply patch for CVE-2025-66402

https://github.com/NixOS/nixpkgs/pull/480284

#security
January 17, 2026 at 12:06 PM
[Backport release-25.11] salt: 3007.10 -> 3007.11

https://github.com/NixOS/nixpkgs/pull/480221

#security
January 17, 2026 at 11:32 AM
[Backport release-25.11] mattermost: 10.11.9 -> 10.11.10

https://github.com/NixOS/nixpkgs/pull/480574

#security
January 17, 2026 at 11:32 AM
[Backport release-25.11] brave: 1.85.120 -> 1.86.139

https://github.com/NixOS/nixpkgs/pull/480981

#security
January 17, 2026 at 11:32 AM
January 17, 2026 at 11:03 AM
librewolf-unwrapped: 146.0.1-1 -> 147.0-1

https://github.com/NixOS/nixpkgs/pull/479861

#security
January 16, 2026 at 4:42 PM
[Backport release-25.11] go_1_24: 1.24.11 -> 1.24.12

https://github.com/NixOS/nixpkgs/pull/480620

#security
January 16, 2026 at 8:05 AM
[Backport staging-25.11] go_1_25: 1.25.5 -> 1.25.6

https://github.com/NixOS/nixpkgs/pull/480621

#security
January 16, 2026 at 8:05 AM
January 16, 2026 at 7:37 AM
January 16, 2026 at 7:37 AM
January 16, 2026 at 3:31 AM