couchdb2: 2.0.0 -> 2.1.1 for multiple CVEs

Fixes CVE-2017-12635, CVE-2017-12636.

https://blog.couchdb.org/2017/11/14/apache-couchdb-cve-2017-12635-and-cve-2017-12636/

+4 -3
+4 -3
pkgs/servers/http/couchdb/2.0.0.nix
··· 3 3 4 4 stdenv.mkDerivation rec { 5 5 name = "couchdb-${version}"; 6 - version = "2.0.0"; 6 + version = "2.1.1"; 7 7 8 8 src = fetchurl { 9 9 url = "mirror://apache/couchdb/source/${version}/apache-${name}.tar.gz"; 10 - sha256 = "1jkfx6g9anrgmkhrkcn50axcamragranwsciw1rhmi86rglkrbyc"; 10 + sha256 = "1k3v9v05417087b6fcj5yv03wl6i61xqrrhp0prl9b3ir2mmbwnm"; 11 11 }; 12 12 13 - buildInputs = [ erlang icu openssl spidermonkey makeWrapper ]; 13 + nativeBuildInputs = [ makeWrapper ]; 14 + buildInputs = [ erlang icu openssl spidermonkey ]; 14 15 15 16 patches = [ ./jsapi.patch ]; 16 17 postPatch = ''