From c3190ef1d89bafac275153804f5acb39977a3e3e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B8rn=20Forsman?= Date: Mon, 1 Apr 2013 10:14:31 +0200 Subject: [PATCH] lighttpd: bump to version 1.4.32 One important denial of service (in 1.4.31) fix: CVE-2012-5533[1]. NOTE: There are some errors about missing commands during the build, but I'm pretty sure they were there before. And the result seems to be working anyway... * /usr/bin/file: No such file or directory * /bin/sh: line 2: which: command not found * /tmp/nix-build-lighttpd-1.4.32.drv-0/lighttpd-1.4.32/libtool: line 1085: ldconfig: command not found [1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5533 --- pkgs/servers/http/lighttpd/default.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/servers/http/lighttpd/default.nix b/pkgs/servers/http/lighttpd/default.nix index 11df6e74bd6..8a3c26f6330 100644 --- a/pkgs/servers/http/lighttpd/default.nix +++ b/pkgs/servers/http/lighttpd/default.nix @@ -1,11 +1,11 @@ { stdenv, fetchurl, pcre, libxml2, zlib, attr, bzip2 }: stdenv.mkDerivation { - name = "lighttpd-1.4.30"; + name = "lighttpd-1.4.32"; src = fetchurl { - url = http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.30.tar.xz; - sha256 = "c237692366935b19ef8a6a600b2f3c9b259a9c3107271594c081a45902bd9c9b"; + url = http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.32.tar.xz; + sha256 = "1hgd9bi4mrak732h57na89lqg58b1kkchnddij9gawffd40ghs0k"; }; buildInputs = [ pcre libxml2 zlib attr bzip2 ];