public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

signing-party: 2.9 -> 2.10 (security, CVE-2019-11627)

Browse Source 
I switched to fetchFromGitLab for more transparency and because 2.10 is
not yet available on any Debian mirrors.
A drawback is that any dates in the man pages will now always be
set to 1970-01-01, because fetchFromGitLab removes the timestamps from
$src (not manually but by unpacking the archive).
This commit is contained in:
Michael Weiss 2019-05-01 16:28:07 +02:00
parent 83e8638fe9
commit 3b3a6367c8
No known key found for this signature in database
GPG Key ID: 5BE487C4D4771D83
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
pkgs/tools/security/signing-party/default.nix
View File

@ -1,4 +1,4 @@
{ stdenv, fetchurl, autoconf, automake, makeWrapper { stdenv, fetchFromGitLab, autoconf, automake, makeWrapper
, python3, perl, perlPackages , python3, perl, perlPackages
, libmd, gnupg1, which, getopt, libpaper, nettools, qprint , libmd, gnupg1, which, getopt, libpaper, nettools, qprint
, sendmailPath ? "/run/wrappers/bin/sendmail" }: , sendmailPath ? "/run/wrappers/bin/sendmail" }:
@ -13,12 +13,15 @@ let
]; ];
in stdenv.mkDerivation rec { in stdenv.mkDerivation rec {
pname = "signing-party"; pname = "signing-party";
version = "2.9"; version = "2.10";
name = "${pname}-${version}"; name = "${pname}-${version}";
src = fetchurl { src = fetchFromGitLab {
url = "mirror://debian/pool/main/s/${pname}/${pname}_${version}.orig.tar.gz"; domain = "salsa.debian.org";
sha256 = "14pgi45zqa0zd1ldfj9mnf9jgv5kfrhl78lr8iy7k88p9h6b9n7n"; owner = "signing-party-team";
repo = "signing-party";
rev = "v${version}";
sha256 = "0lq8nmwjmysry0n4jg6vb7bh0lagbyb9pa11ii3s41p1mhzchf2r";
}; };
# TODO: Get this patch upstream... # TODO: Get this patch upstream...