shadow: Update to 4.1.5.1

Fixes CVE-2005-4890 and CVE-2011-0721.
This commit is contained in:
Eelco Dolstra
2012-07-25 23:18:40 -04:00
parent d3fb3157d1
commit 732ea6382a
4 changed files with 19 additions and 54 deletions
+10 -6
View File
@@ -1,21 +1,25 @@
{ stdenv, fetchurl, pam ? null, glibcCross ? null }:
let
glibc = if stdenv ? cross
then glibcCross
else assert stdenv ? glibc; stdenv.glibc;
glibc =
if stdenv ? cross
then glibcCross
else assert stdenv ? glibc; stdenv.glibc;
in
stdenv.mkDerivation rec {
name = "shadow-4.1.4.2";
name = "shadow-4.1.5.1";
src = fetchurl {
url = "http://pkg-shadow.alioth.debian.org/releases/${name}.tar.bz2";
sha256 = "1449ny7pdnwkavg92wvibapnkgdq5pas38nvl1m5xa37g5m7z64p";
sha256 = "1yvqx57vzih0jdy3grir8vfbkxp0cl0myql37bnmi2yn90vk6cma";
};
buildInputs = stdenv.lib.optional (pam != null && stdenv.isLinux) pam;
patches = [ ./no-sanitize-env.patch ./su-name.patch ./keep-path.patch ];
patches = [ ./keep-path.patch ];
# Assume System V `setpgrp (void)', which is the default on GNU variants
# (`AC_FUNC_SETPGRP' is not cross-compilation capable.)