Merge pull request #271646 from LeSuisse/libnbd-1.18.1-CVE-2023-5871

libnbd: 1.18.0 -> 1.18.1 and apply patch for CVE-2023-5871
This commit is contained in:
Robert Scott 2023-12-03 22:14:38 +00:00 committed by GitHub
commit 694dce5e3c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1,6 +1,7 @@
{ lib { lib
, stdenv , stdenv
, fetchurl , fetchurl
, fetchpatch
, bash-completion , bash-completion
, pkg-config , pkg-config
, perl , perl
@ -12,13 +13,21 @@
stdenv.mkDerivation rec { stdenv.mkDerivation rec {
pname = "libnbd"; pname = "libnbd";
version = "1.18.0"; version = "1.18.1";
src = fetchurl { src = fetchurl {
url = "https://download.libguestfs.org/libnbd/${lib.versions.majorMinor version}-stable/${pname}-${version}.tar.gz"; url = "https://download.libguestfs.org/libnbd/${lib.versions.majorMinor version}-stable/${pname}-${version}.tar.gz";
hash = "sha256-srJyd32eCIthoncvM9JQEKCWEOZxxc3YntaV4Ay8kZ8="; hash = "sha256-UNHRphDw1ycRnp0KClzHlSuLIxs5Mc4gcjB+EF/smbY=";
}; };
patches = [
(fetchpatch {
name = "CVE-2023-5871.patch";
url = "https://gitlab.com/nbdkit/libnbd/-/commit/4451e5b61ca07771ceef3e012223779e7a0c7701.patch";
hash = "sha256-zmg/kxSJtjp2w9917Sp33ezt7Ccj/inngzCUVesF1Tc=";
})
];
nativeBuildInputs = [ nativeBuildInputs = [
bash-completion bash-completion
pkg-config pkg-config