libssh: security+maintenance to fix CVE-2014-8132
Also switched to openssl instead of libgcrypt (wouldn't compile otherwise), and fixed meta.license.
This commit is contained in:
parent
e9e4388959
commit
7357f0ae24
@ -1,23 +1,22 @@
|
|||||||
{ stdenv, fetchurl, pkgconfig, cmake, zlib, libgcrypt }:
|
{ stdenv, fetchurl, pkgconfig, cmake, zlib, libgcrypt, openssl }:
|
||||||
|
|
||||||
stdenv.mkDerivation rec {
|
stdenv.mkDerivation rec {
|
||||||
name = "libssh-0.6.3";
|
name = "libssh-0.6.4";
|
||||||
|
|
||||||
src = fetchurl {
|
src = fetchurl {
|
||||||
url = "https://red.libssh.org/attachments/download/87/${name}.tar.xz";
|
url = "https://red.libssh.org/attachments/download/107/${name}.tar.gz";
|
||||||
sha256 = "1jyaj9h1iglvn02hrvcchbx8ycjpj8b91h8mi459k7q5jp2xgd9b";
|
sha256 = "0lkb45sc7w0wd67p46yh8rsprglssnkqar1sp0impwsvx7i0acky";
|
||||||
};
|
};
|
||||||
|
|
||||||
buildInputs = [ zlib libgcrypt ];
|
# option we don't provide (yet): use libgcrypt instead of openssl
|
||||||
|
buildInputs = [ zlib /*libgcrypt*/ openssl ];
|
||||||
|
|
||||||
nativeBuildInputs = [ cmake pkgconfig ];
|
nativeBuildInputs = [ cmake pkgconfig ];
|
||||||
|
|
||||||
cmakeFlags = "-DWITH_GCRYPT=ON";
|
meta = with stdenv.lib; {
|
||||||
|
|
||||||
meta = {
|
|
||||||
description = "SSH client library";
|
description = "SSH client library";
|
||||||
license = "LGPL";
|
license = licenses.lgpl2Plus;
|
||||||
maintainers = with stdenv.lib.maintainers; [ sander urkud ];
|
maintainers = with stdenv.lib.maintainers; [ sander urkud ];
|
||||||
platforms = stdenv.lib.platforms.all;
|
platforms = platforms.all;
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user