colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revert "xz: 5.4.6 -> 5.6.0"

Browse Source 
This reverts commit 5c7c19cc7e.

The upstream tarball has been tampered with and includes a backport for
which we cannot completely rule out, whether we are affected.

https://www.openwall.com/lists/oss-security/2024/03/29/4
This commit is contained in:
Martin Weinelt 2024-03-29 03:45:03 +01:00
parent 699ac3316c
commit f721231589
No known key found for this signature in database
GPG Key ID: 87C1E9888F856759
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkgs/tools/compression/xz/default.nix
View File

@ -11,11 +11,11 @@
stdenv.mkDerivation (finalAttrs: {
pname = "xz";
version = "5.6.0";
version = "5.4.6";
src = fetchurl {
url = with finalAttrs; "https://github.com/tukaani-project/xz/releases/download/v${version}/xz-${version}.tar.bz2";
hash = "sha256-iMhjHO+6kWZP3EexS7dT4YdvSWSgfbZQgh0gOZKx4eo=";
sha256 = "sha256-kThRsnTo4dMXgeyUnxwj6NvPDs9uc6JDbcIXad0+b0k=";
};
strictDeps = true;