Change:
Currently the kernel in branch release-16.03 is not up to date. Could the following commits be cherry-picked from master into release-16.03? commit Author: Tim Steinbach <: Sat Oct 22 12:10:34 2016 -0400 linux: 4.4.26 -4.4.27 commit Author: Tim Steinbach <: Sun Oct 30 10:29:37 2016 -0400 linux: 4.4.27 -4.4.28 commit Author: Eelco Dolstra <: Tue Nov 1 11:31:00 2016 +0100 linux: 4.4.28 -4.4.30
My understanding is that 16.03 is no longer maintained (and is likely to contain multiple vulnerabilities).
Unfortunately I can not update to release-16.09 because of (see my comment ). Until it is fixed I have to keep some commits cherry-picked on top of release-16.03. It would be great if some of them are applied upstream too. BTW where can I find EOL dates for nixos releases? I tried to do this before submitting this bug report, but I didn't find it on neither the official site nor github.
it's really lots of work to keep up with all those CVEs, and AFAIK contributors generally didn't want to do the work longer than a few weeks after a new stable release. I picked linux-4.4.30. Just suitable patches, and submit PR against release-16.03 (you can repeat once a while). Perhaps ping me, if noone merges it. The Hydra job should not be a problem, if given a lower priority; it's the manpower/motivation that is/was missing.
I announce EOL with new stable release, for example
Ah, thanks for correcting that.
Thank you. I see now. I assumed this policy, but as some commits got into 16.03 after 16.09 was announced, I thought that probably this is not the case. Thank you. I will make a PR if I have any appropriate patches.

Discussion:
# TODO add plugins having various licenses, see http://www.vamp-plugins.org/download.html <del> { stdenv, fetchurl, alsaLib, bzip2, fftw, jackaudio, libX11, liblo, libmad, libogg, librdf, librdf_raptor, librdf_rasqal, libsamplerate, libsndfile, makeWrapper, pulseaudio, qt4, redland, rubberband, vampSDK </del> <ins> { stdenv, fetchurl, alsaLib, bzip2, fftw, jackaudio, libX11, liblo , libmad, libogg, librdf, librdf_raptor, librdf_rasqal, libsamplerate , libsndfile, makeWrapper, pkgconfig, pulseaudio, qt4, redland , rubberband, vampSDK </ins> }: <del> stdenv.mkDerivation { name = "sonic-visualiser-1.8"; </del> <ins> stdenv.mkDerivation rec { name = "sonic-visualiser-${version}"; version = "1.9"; </ins> src = fetchurl { <del> url = http://downloads.sourceforge.net/sv1/sonic-visualiser-1.8.tar.gz; sha256 = "16ik6q9n92wljvnqcv7hyzb9v3yp3ixxp6df9kasf53fii973dh7"; </del> <ins> url = "http://code.soundsoftware.ac.uk/attachments/download/194/${name}.tar.gz"; sha256 = "00igf7j6s8xfyxnlkbqma0yby9pknxqzy8cmh0aw95ix80cw56fq"; </ins> }; buildInputs = [ libsndfile qt4 fftw /* should be fftw3f ??*/ bzip2 librdf rubberband libsamplerate vampSDK alsaLib librdf_raptor librdf_rasqal redland <ins> pkgconfig </ins> # optional jackaudio # portaudio

description = "View and analyse contents of music audio files"; homepage = http://www.sonicvisualiser.org/; license = "GPLv2"; <del> maintainers = [ stdenv.lib.maintainers.marcweber stdenv.lib.maintainers.goibhniu ]; </del> <ins> maintainers = [ stdenv.lib.maintainers.marcweber stdenv.lib.maintainers.goibhniu ]; </ins> platforms = stdenv.lib.platforms.linux; }; }