From 0ccfa4af0860089a3c80f6ea08f43fbac657d7fe Mon Sep 17 00:00:00 2001 From: Will Dietz Date: Wed, 13 Mar 2019 17:26:00 -0500 Subject: [PATCH] pacman: 5.1.2 -> 5.1.3 (#57563) Not listed on official website[1], but present in release directory[2]... and seems legit[3][4] Fixes CVE, looks like: https://lwn.net/Articles/782828/ [1] https://www.archlinux.org/pacman/#_releases [2] https://sources.archlinux.org/other/pacman/ [3] https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/pacman&id=f48884ebff6788406fe1911f179a363bd2aeb9b1 [4] https://lists.archlinux.org/pipermail/pacman-dev/2019-March/023208.html --- pkgs/tools/package-management/pacman/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/tools/package-management/pacman/default.nix b/pkgs/tools/package-management/pacman/default.nix index b0b288b276a..d756b679bf3 100644 --- a/pkgs/tools/package-management/pacman/default.nix +++ b/pkgs/tools/package-management/pacman/default.nix @@ -3,11 +3,11 @@ zlib, bzip2, lzma }: stdenv.mkDerivation rec { name = "pacman-${version}"; - version = "5.1.2"; + version = "5.1.3"; src = fetchurl { url = "https://git.archlinux.org/pacman.git/snapshot/pacman-${version}.tar.gz"; - sha256 = "19fr60h0ffxzjxmlmhrfcq8447l0bkxnh64fwjagqn133d3dgd5x"; + sha256 = "108xp6dhvp02jnzskhgzjmp9jvrxhhkffvmpvs3rrif7vj47xd76"; }; configureFlags = [