pyrox.dev
knot-resolver: 5.5.2 -> 5.5.3
CVE-2022-40188 and also the patches were included in the release.
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.5.3
+2
-16
pkgs/servers/dns/knot-resolver/default.nix
+2
-16
pkgs/servers/dns/knot-resolver/default.nix
···
1
1
{ lib, stdenv, fetchurl
2
-
, fetchpatch
3
2
# native deps.
4
3
, runCommand, pkg-config, meson, ninja, makeWrapper
5
4
# build+runtime deps.
···
18
17
19
18
unwrapped = stdenv.mkDerivation rec {
20
19
pname = "knot-resolver";
21
-
version = "5.5.2";
20
+
version = "5.5.3";
22
21
23
22
src = fetchurl {
24
23
url = "https://secure.nic.cz/files/knot-resolver/${pname}-${version}.tar.xz";
25
-
sha256 = "3f78aa69c3f28edc42b5900b9788fba39498d8bffda7fb9c772bb470865780cb";
24
+
sha256 = "a38f57c68b7d237d662784d8406e6098aad66a148f44dcf498d1e9664c5fed2d";
26
25
};
27
26
28
27
outputs = [ "out" "dev" ];
29
-
30
-
patches = [
31
-
(fetchpatch {
32
-
name = "fix-config-tests-on-darwin.patch";
33
-
url = "https://gitlab.nic.cz/knot/knot-resolver/-/commit/48ad9d436cf80f58c107774c313a561d852148a0.diff";
34
-
sha256 = "CEX1XkeYLUSe31xUhNdMRMl1VUXtKFCs5noNJaqL5x0=";
35
-
})
36
-
(fetchpatch {
37
-
name = "fix-config-tests-on-aarch64-darwin.patch";
38
-
url = "https://gitlab.nic.cz/knot/knot-resolver/-/commit/adaac913c50a5db2f226a081ddc419b0d56d1757.diff";
39
-
sha256 = "1LrL74luzPTyJ7VBi7fskDga4lYAh7cSUmDcd1BNO78=";
40
-
})
41
-
];
42
28
43
29
# Path fixups for the NixOS service.
44
30
postPatch = ''