From 92ffd641c8d905bde2ce3fc0c9b69a1efd42093c Mon Sep 17 00:00:00 2001 From: David Anderson Date: Wed, 11 Mar 2020 19:37:01 -0700 Subject: [PATCH] libsass: 3.6.1 -> 3.6.3 Contains fix for CVE-2019-18798 and CVE-2019-18799. Fixes #54804, #53571, #57155, #58266, #73660. --- pkgs/development/libraries/libsass/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/libsass/default.nix b/pkgs/development/libraries/libsass/default.nix index 2092d72c9f8..2cb6f245a8a 100644 --- a/pkgs/development/libraries/libsass/default.nix +++ b/pkgs/development/libraries/libsass/default.nix @@ -2,13 +2,13 @@ stdenv.mkDerivation rec { pname = "libsass"; - version = "3.6.1"; + version = "3.6.3"; src = fetchFromGitHub { owner = "sass"; repo = pname; rev = version; - sha256 = "1599j2lbsygy3883x9si7rbad1pkjhl6y72aimaapcv90ga5kxkm"; + sha256 = "1q6lvd8sj5k5an32qir918pa5khhcb8h08dzrg1bcxmw7a23j514"; # Remove unicode file names which leads to different checksums on HFS+ # vs. other filesystems because of unicode normalisation. extraPostFetch = ''