tcpdump: 4.9.1 -> 4.9.2
This is a security release theoretically under emgargo, but leaked by Mageia and Fedora. We have permission to deliver this prior to public release.
This commit is contained in:
parent
41d9884067
commit
993a83d395
|
@ -1,36 +1,22 @@
|
||||||
{ stdenv, fetchFromGitHub, fetchpatch, libpcap, enableStatic ? false
|
{ stdenv, fetchurl, fetchpatch, libpcap, enableStatic ? false
|
||||||
, hostPlatform
|
, hostPlatform
|
||||||
}:
|
}:
|
||||||
|
|
||||||
stdenv.mkDerivation rec {
|
stdenv.mkDerivation rec {
|
||||||
name = "tcpdump-${version}";
|
name = "tcpdump-${version}";
|
||||||
version = "4.9.1";
|
version = "4.9.2";
|
||||||
|
|
||||||
src = fetchFromGitHub rec {
|
# leaked embargoed security update
|
||||||
owner = "the-tcpdump-group";
|
src = fetchurl {
|
||||||
repo = "tcpdump";
|
url = "https://src.fedoraproject.org/lookaside/pkgs/tcpdump/tcpdump-4.9.2.tar.gz/sha512/e1bc19a5867d6e3628f3941bdf3ec831bf13784f1233ca1bccc46aac1702f47ee9357d7ff0ca62cddf211b3c8884488c21144cabddd92c861e32398cd8f7c44b/tcpdump-4.9.2.tar.gz";
|
||||||
rev = "${repo}-${version}";
|
sha256 = "0ygy0layzqaj838r5xd613iraz09wlfgpyh7pc6cwclql8v3b2vr";
|
||||||
sha256 = "1vzrvn1q7x28h18yskqc390y357pzpg5xd3pzzj4xz3llnvsr64p";
|
|
||||||
};
|
};
|
||||||
|
# src = fetchFromGitHub rec {
|
||||||
patches = [
|
# owner = "the-tcpdump-group";
|
||||||
(fetchpatch {
|
# repo = "tcpdump";
|
||||||
url = "http://www.tcpdump.org/pre-4.9.2/PUBLISHED-CVE-2017-11541.patch";
|
# rev = "${repo}-${version}";
|
||||||
sha256 = "1lqg4lbyddnv75wpj0rs2sxz4lb3d1vp8n385i27mrpcxw9qaxia";
|
# sha256 = "1vzrvn1q7x28h18yskqc390y357pzpg5xd3pzzj4xz3llnvsr64p";
|
||||||
})
|
# };
|
||||||
(fetchpatch {
|
|
||||||
url = "http://www.tcpdump.org/pre-4.9.2/PUBLISHED-CVE-2017-11542.patch";
|
|
||||||
sha256 = "0vqgmw9i5vr3d4siyrh8mw60jdmp5r66rbjxfmbnwhlfjf4bwxz4";
|
|
||||||
})
|
|
||||||
(fetchpatch {
|
|
||||||
url = "http://www.tcpdump.org/pre-4.9.2/PUBLISHED-CVE-2017-11543.patch";
|
|
||||||
sha256 = "1vk9ncpx0qjja8l69xw5kkvgy9fkcii2n98diazv1yndln2cs26l";
|
|
||||||
})
|
|
||||||
(fetchpatch {
|
|
||||||
url = "http://www.tcpdump.org/pre-4.9.2/PUBLISHED-OpenSSL-1.1-segfault.patch";
|
|
||||||
sha256 = "0mw0jdj5nyg4sviqj7wxwf2492b2bdqmjrvf1k34ak417xfcvy1d";
|
|
||||||
})
|
|
||||||
];
|
|
||||||
|
|
||||||
buildInputs = [ libpcap ];
|
buildInputs = [ libpcap ];
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue