-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 30 Oct 2026 11:31:40 -0700 Source: nix Architecture: source Version: 2.35.4+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Jordan Justen <jljusten@debian.org> Changed-By: Jordan Justen <jljusten@debian.org> Closes: 1145021 1151197 Changes: nix (2.35.4+dfsg-1) unstable; urgency=medium . * New upstream release (Closes: #1145021, #1151197) Fixes CVE-2026-64846, CVE-2026-110449, CVE-2026-110450 and CVE-2026-110452. * d/patches: Rebase patches for 2.35.4 * d/rules: Update meson options for 2.35 * d/copyright: Drop stale file references Checksums-Sha1: 79ab7d48d99f2d9563c3a6d8db6d786d2a111375 2920 nix_2.35.4+dfsg-1.dsc ed53e6e70b16e41b753e5dc828af59be6c6a6178 1642492 nix_2.35.4+dfsg.orig.tar.xz b58b01b20a2d2111207c8de1ac885ebf0697f703 13444 nix_2.35.4+dfsg-1.debian.tar.xz 53377d88939024a528e00a1c818e32d2595ae682 12050 nix_2.35.4+dfsg-1_source.buildinfo Checksums-Sha256: 2dfe3a2184b6ab1dfa046f452522ce63cb75b05f89675281888dbb2bd8d7c7fe 2920 nix_2.35.4+dfsg-1.dsc bac850e41c33ba870ac799da3245ee5656ace806d9099748fc70e916356b146b 1642492 nix_2.35.4+dfsg.orig.tar.xz 60a2f7610fe76d5a979296882be9d103ebefb39e4f8ea747d6da6e1e5de05b1a 13444 nix_2.35.4+dfsg-1.debian.tar.xz 8e84c53328233fbcbf746cabfb83716b58ee3e52a2a48abca224f7f5d72b2115 12050 nix_2.35.4+dfsg-1_source.buildinfo Files: 056e8a98aff4edfb4285cc6e2432f4a9 2920 devel optional nix_2.35.4+dfsg-1.dsc c783a37ff9c34ed3937260f29070a248 1642492 devel optional nix_2.35.4+dfsg.orig.tar.xz 13dbf4b53b63c279966e9b05bd55dea1 13444 devel optional nix_2.35.4+dfsg-1.debian.tar.xz 2a9ac698bf6b14b6a2f7d7ab2f8909d8 12050 devel optional nix_2.35.4+dfsg-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwnSFIXQUyd8CMWwuN/mfaMr5kusFAmrlAjQACgkQN/mfaMr5 kuvl0g//en4F9xVzmTZ6iDJi925A2MCSEht4DZPnN/Z6bT6l+WtaA7FLkWS8gMRn +srVwSFoh2pD2jUpLNWUXAJTdiIxpb8FuuLCnAmW+rm+UaJ8tWe/s99KGapFD/+j RfkOBraOK9pL83oGDbf2YidiEgIQPPamHkKXwvhIbh28EyRK1Oh0hXkO8N+NM15P L6wtE+G+W3o3CqwK3YUf5V/qs8z5OKyjeFRbdrnFu5BpJ9bQkosNdaiq33bbS2g+ 3mIr4JX9eE7F3A3QzgYCL3vL67k1eeYkALS1s2kZzlaggDoZFnrZEExbgNC6CABr DWn91HNuiRQvQ3h/UkFuQdamtU7zFcsx9hnkPGFf5jL99e8T+wk/6dXUB9ApeJpc m/NU1Zp5t9rX7YUujOyPjXHeoxuTZ6jS+cfn4czIfkiyvvW8BVBylWvWZa4VZ+C7 bYqvUkdRNEsk98++TCBbe37pDDS9RofQbLFaV5BvRfuRRN2TLiwqV2ZYFfRzpkig bxaydXDqCvBmopoYWUp3Lgle+eXfbcVxK+03eANWhZaDFbEzNdxvfZfCKsihbv53 wGEsWoWRLmJukWEQlcryBUvY7jp9YT2OTejMOyQNsLL5UG5p3hhPHW7ri/581ZKC uuTF9gKvqXNB/pa+a2JhAuqdvvIVUXfakgmhudDDNIFQwqxtqko= =UvUq -----END PGP SIGNATURE-----
