summary refs log tree commit diff
diff options
context:
space:
mode:
authorMartin Weinelt <hexa@darmstadt.ccc.de>2022-05-05 18:08:11 +0200
committerMartin Weinelt <hexa@darmstadt.ccc.de>2022-05-05 18:08:11 +0200
commit974603c931d773dcfb8acf2e355ed8dceeb28e94 (patch)
tree4b3c073e4fb3ef9608460b2b967e4e4769640123
parent9345322f7917e533435727ba1dd614db5fd59aa9 (diff)
downloadnixpkgs-974603c931d773dcfb8acf2e355ed8dceeb28e94.tar
nixpkgs-974603c931d773dcfb8acf2e355ed8dceeb28e94.tar.gz
nixpkgs-974603c931d773dcfb8acf2e355ed8dceeb28e94.tar.bz2
nixpkgs-974603c931d773dcfb8acf2e355ed8dceeb28e94.tar.lz
nixpkgs-974603c931d773dcfb8acf2e355ed8dceeb28e94.tar.xz
nixpkgs-974603c931d773dcfb8acf2e355ed8dceeb28e94.tar.zst
nixpkgs-974603c931d773dcfb8acf2e355ed8dceeb28e94.zip
ecdsautils: 0.4.0 -> 0.4.1
Fixes psychic papers vulnerability in signature verification.

https://github.com/freifunk-gluon/ecdsautils/security/advisories/GHSA-qhcg-9ffp-78pw

Fixes: CVE-2022-24884
-rw-r--r--pkgs/tools/security/ecdsautils/default.nix15
1 files changed, 9 insertions, 6 deletions
diff --git a/pkgs/tools/security/ecdsautils/default.nix b/pkgs/tools/security/ecdsautils/default.nix
index 6bdac96811a..0a43260eb83 100644
--- a/pkgs/tools/security/ecdsautils/default.nix
+++ b/pkgs/tools/security/ecdsautils/default.nix
@@ -1,14 +1,17 @@
 { lib, stdenv, pkgs }:
 
-stdenv.mkDerivation {
-  version = "0.4.0";
+let
   pname = "ecdsautils";
+  version = "0.4.1";
+in
+stdenv.mkDerivation {
+  inherit pname version;
 
   src = pkgs.fetchFromGitHub {
     owner = "freifunk-gluon";
-    repo = "ecdsautils";
-    rev = "07538893fb6c2a9539678c45f9dbbf1e4f222b46";
-    sha256 = "18sr8x3qiw8s9l5pfi7r9i3ayplz4jqdml75ga9y933vj7vs0k4d";
+    repo = pname;
+    rev = "v${version}";
+    sha256 = "sha256-dv0guQTmot5UO1GkMgzvD6uJFyum5kV89LI3xWS1DZA=";
   };
 
   nativeBuildInputs = with pkgs; [ cmake pkg-config doxygen ];
@@ -16,7 +19,7 @@ stdenv.mkDerivation {
 
   meta = with lib; {
     description = "Tiny collection of programs used for ECDSA (keygen, sign, verify)";
-    homepage = "https://github.com/tcatm/ecdsautils/";
+    homepage = "https://github.com/freifunk-gluon/ecdsautils/";
     license = with licenses; [ mit bsd2 ];
     maintainers = with maintainers; [ ];
     platforms = platforms.unix;