From c046e7c5614ecfd8aba2316100204d11d5d2cd9d Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Thu, 10 Jun 2021 20:37:52 +0200 Subject: [PATCH] fileshare: stop using vulnerable libmicrohttpd 0.9.70 libmicrohttpd 0.9.70 has a known criticial security issue (CVE-2021-3466) and should be avoided. --- pkgs/servers/fileshare/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/fileshare/default.nix b/pkgs/servers/fileshare/default.nix index 88c14a220d9..7141efef305 100644 --- a/pkgs/servers/fileshare/default.nix +++ b/pkgs/servers/fileshare/default.nix @@ -1,4 +1,4 @@ -{ stdenv, lib, fetchgit, pkg-config, git, libmicrohttpd_0_9_70 }: +{ stdenv, lib, fetchgit, pkg-config, git, libmicrohttpd }: stdenv.mkDerivation rec { pname = "fileshare"; @@ -15,7 +15,7 @@ stdenv.mkDerivation rec { ''; nativeBuildInputs = [ pkg-config git ]; - buildInputs = [ libmicrohttpd_0_9_70 ]; + buildInputs = [ libmicrohttpd ]; makeFlags = [ "BUILD=release" ];