diff options
| author | Michael Weiss <dev.primeos@gmail.com> | 2019-05-01 16:28:07 +0200 |
|---|---|---|
| committer | Michael Weiss <dev.primeos@gmail.com> | 2019-05-01 16:45:33 +0200 |
| commit | 3b3a6367c86aa8c8d472c5d83acead14419d2330 (patch) | |
| tree | 54af0591c9199f10ee4dfd24a1cc84a6eb6f65d6 | |
| parent | 83e8638fe9ad273d017cf5c23922958654232051 (diff) | |
| download | nixpkgs-3b3a6367c86aa8c8d472c5d83acead14419d2330.tar nixpkgs-3b3a6367c86aa8c8d472c5d83acead14419d2330.tar.gz nixpkgs-3b3a6367c86aa8c8d472c5d83acead14419d2330.tar.bz2 nixpkgs-3b3a6367c86aa8c8d472c5d83acead14419d2330.tar.lz nixpkgs-3b3a6367c86aa8c8d472c5d83acead14419d2330.tar.xz nixpkgs-3b3a6367c86aa8c8d472c5d83acead14419d2330.tar.zst nixpkgs-3b3a6367c86aa8c8d472c5d83acead14419d2330.zip | |
signing-party: 2.9 -> 2.10 (security, CVE-2019-11627)
I switched to fetchFromGitLab for more transparency and because 2.10 is not yet available on any Debian mirrors. A drawback is that any dates in the man pages will now always be set to 1970-01-01, because fetchFromGitLab removes the timestamps from $src (not manually but by unpacking the archive).
| -rw-r--r-- | pkgs/tools/security/signing-party/default.nix | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/pkgs/tools/security/signing-party/default.nix b/pkgs/tools/security/signing-party/default.nix index b3ec973368c..29af5a5cc0a 100644 --- a/pkgs/tools/security/signing-party/default.nix +++ b/pkgs/tools/security/signing-party/default.nix @@ -1,4 +1,4 @@ -{ stdenv, fetchurl, autoconf, automake, makeWrapper +{ stdenv, fetchFromGitLab, autoconf, automake, makeWrapper , python3, perl, perlPackages , libmd, gnupg1, which, getopt, libpaper, nettools, qprint , sendmailPath ? "/run/wrappers/bin/sendmail" }: @@ -13,12 +13,15 @@ let ]; in stdenv.mkDerivation rec { pname = "signing-party"; - version = "2.9"; + version = "2.10"; name = "${pname}-${version}"; - src = fetchurl { - url = "mirror://debian/pool/main/s/${pname}/${pname}_${version}.orig.tar.gz"; - sha256 = "14pgi45zqa0zd1ldfj9mnf9jgv5kfrhl78lr8iy7k88p9h6b9n7n"; + src = fetchFromGitLab { + domain = "salsa.debian.org"; + owner = "signing-party-team"; + repo = "signing-party"; + rev = "v${version}"; + sha256 = "0lq8nmwjmysry0n4jg6vb7bh0lagbyb9pa11ii3s41p1mhzchf2r"; }; # TODO: Get this patch upstream... |