diff --git a/configuration/common/ssh.nix b/configuration/common/ssh.nix index e62aab5..110c670 100644 --- a/configuration/common/ssh.nix +++ b/configuration/common/ssh.nix @@ -7,6 +7,9 @@ PasswordAuthentication = false; KbdInteractiveAuthentication = false; PermitRootLogin = lib.mkDefault "no"; + + # Hotfix CVE-2024-6387 https://github.com/NixOS/nixpkgs/pull/323753 + LoginGraceTime = 0; }; services.openssh.hostKeys = lib.mkForce [ # Only create ed25519 host keys diff --git a/flake.lock b/flake.lock index a55a488..7d23272 100644 --- a/flake.lock +++ b/flake.lock @@ -268,11 +268,11 @@ }, "nixpkgs_3": { "locked": { - "lastModified": 1719506693, - "narHash": "sha256-C8e9S7RzshSdHB7L+v9I51af1gDM5unhJ2xO1ywxNH8=", + "lastModified": 1719690277, + "narHash": "sha256-0xSej1g7eP2kaUF+JQp8jdyNmpmCJKRpO12mKl/36Kc=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "b2852eb9365c6de48ffb0dc2c9562591f652242a", + "rev": "2741b4b489b55df32afac57bc4bfd220e8bf617e", "type": "github" }, "original": { diff --git a/hosts/web-2/nogo2024.nix b/hosts/web-2/nogo2024.nix index 5a39690..26c7433 100644 --- a/hosts/web-2/nogo2024.nix +++ b/hosts/web-2/nogo2024.nix @@ -11,8 +11,8 @@ locations."= /nogo2024.ics" = { root = pkgs.fetchgit { url = "https://git.clerie.de/clerie/nogo2024.git"; - rev = "348bbe99daf1b1f331783a0298a445f24ca58c85"; - sha256 = "sha256-QYOadI1RUUmS6UDG3MAeor6qERaBiaCBUG0+cchm1FQ="; + rev = "fdc07667e6cfa09e91eaaee488528fb842a6115d"; + sha256 = "sha256-qRviw0sQnMmrkwBO0+AWnmeqZK8wXeFxZJgmLMUtzn4="; }; }; };