From 175f2e147f95214731b26733aea20461b12ca3bc Mon Sep 17 00:00:00 2001 From: Andreas Rammhold Date: Fri, 8 Dec 2017 10:25:59 +0100 Subject: [PATCH 1/4] erlangR20: 20.1 -> 20.1.7 (fixes CVE-2017-1000385) --- pkgs/development/interpreters/erlang/R20.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/erlang/R20.nix b/pkgs/development/interpreters/erlang/R20.nix index cf94a8800f9c..866a38e25759 100644 --- a/pkgs/development/interpreters/erlang/R20.nix +++ b/pkgs/development/interpreters/erlang/R20.nix @@ -1,8 +1,8 @@ { mkDerivation, fetchurl }: mkDerivation rec { - version = "20.1"; - sha256 = "13f53lzgq2himg9kax41f66rzv5pjfrb1ln8b54yv9spkqx2hqqi"; + version = "20.1.7"; + sha256 = "0sbxl10d76bm7awxb9s07l9815jiwfg78bps07xj2ircxdr08pls"; prePatch = '' substituteInPlace configure.in --replace '`sw_vers -productVersion`' '10.10' From 366355f7eb44b3d7edab6d7ac1fbfec78d929e44 Mon Sep 17 00:00:00 2001 From: Andreas Rammhold Date: Fri, 8 Dec 2017 10:19:18 +0100 Subject: [PATCH 2/4] erlangR19: 19.3 -> 19.3.6.4 (fixes CVE-2017-1000385) --- pkgs/development/interpreters/erlang/R19.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/erlang/R19.nix b/pkgs/development/interpreters/erlang/R19.nix index 5e2e1c7f215d..aa8c941eb93b 100644 --- a/pkgs/development/interpreters/erlang/R19.nix +++ b/pkgs/development/interpreters/erlang/R19.nix @@ -1,8 +1,8 @@ { mkDerivation, fetchurl, fetchpatch }: mkDerivation rec { - version = "19.3"; - sha256 = "0pp2hl8jf4iafpnsmf0q7jbm313daqzif6ajqcmjyl87m5pssr86"; + version = "19.3.6.4"; + sha256 = "1w0h3wj2h58m3jrfgw56xab2352na3i9ccrbpfs4420dn7igf071"; patches = [ # macOS 10.13 crypto fix from OTP-20.1.2 From 210729134633fdc5d7bb54f65cf19baa5b4196dd Mon Sep 17 00:00:00 2001 From: Andreas Rammhold Date: Fri, 8 Dec 2017 10:09:37 +0100 Subject: [PATCH 3/4] erlangR18: 18.3.4.4 -> 18.3.4.7 (fixes CVE-2017-1000385) --- pkgs/development/interpreters/erlang/R18.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/erlang/R18.nix b/pkgs/development/interpreters/erlang/R18.nix index 39a1a8a0048e..967940ca184f 100644 --- a/pkgs/development/interpreters/erlang/R18.nix +++ b/pkgs/development/interpreters/erlang/R18.nix @@ -12,8 +12,8 @@ let }; in mkDerivation rec { - version = "18.3.4.4"; - sha256 = "0wilm21yi9m3v6j26vc04hsa58cxca5z4q9yxx71hm81cbm1xbwk"; + version = "18.3.4.7"; + sha256 = "1l66vzbb1vidrmf6gr84l34kgrpb9k7z2170bac4c6aviah9r02l"; patches = [ rmAndPwdPatch From 2b7204307915c729b999dba2716e31d5b3df98cd Mon Sep 17 00:00:00 2001 From: Andreas Rammhold Date: Fri, 8 Dec 2017 12:17:36 +0100 Subject: [PATCH 4/4] erlangR16: removed outdated & unused version erlangR16 doesn't receive any upstream updates anymore and none of our packages depend on it. --- pkgs/top-level/beam-packages.nix | 3 --- 1 file changed, 3 deletions(-) diff --git a/pkgs/top-level/beam-packages.nix b/pkgs/top-level/beam-packages.nix index bffd86da52e7..8a63dcc1a4ff 100644 --- a/pkgs/top-level/beam-packages.nix +++ b/pkgs/top-level/beam-packages.nix @@ -14,8 +14,6 @@ rec { erlang_nox = erlangR19_nox; # These are standard Erlang versions, using the generic builder. - erlangR16 = lib.callErlang ../development/interpreters/erlang/R16.nix {}; - erlangR16_odbc = erlangR16.override { odbcSupport = true; }; erlangR17 = lib.callErlang ../development/interpreters/erlang/R17.nix {}; erlangR17_odbc = erlangR17.override { odbcSupport = true; }; erlangR17_javac = erlangR17.override { javacSupport = true; }; @@ -75,7 +73,6 @@ rec { # Packages built with default Erlang version. erlang = packagesWith interpreters.erlang; - erlangR16 = packagesWith interpreters.erlangR16; erlangR17 = packagesWith interpreters.erlangR17; erlangR18 = packagesWith interpreters.erlangR18; erlangR19 = packagesWith interpreters.erlangR19;