From 1ff1c6ac4a4c8bc7f237bc14d5ff2ca336f3f610 Mon Sep 17 00:00:00 2001 From: Franz Pletz Date: Mon, 2 Oct 2017 18:58:53 +0200 Subject: [PATCH] libidn2: 2.0.3 -> 2.0.4 for multiple CVEs Fixes CVE-2017-14061, CVE-2017-14062. --- pkgs/development/libraries/libidn2/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/libidn2/default.nix b/pkgs/development/libraries/libidn2/default.nix index e3e4e0007730..521fe00b56d7 100644 --- a/pkgs/development/libraries/libidn2/default.nix +++ b/pkgs/development/libraries/libidn2/default.nix @@ -4,11 +4,11 @@ with stdenv.lib; stdenv.mkDerivation rec { name = "libidn2-${version}"; - version = "2.0.3"; + version = "2.0.4"; src = fetchurl { url = "mirror://gnu/gnu/libidn/${name}.tar.gz"; - sha256 = "1k88acdf242a6lbznr0h6f02frsqyqw4smw1nznibim5wyf18da3"; + sha256 = "1w6jycr5bbawimhb72wxf9ic92yrhfadahfj0b70myw5n81nnjv4"; }; outputs = [ "bin" "dev" "out" "info" "devdoc" ];