pyrox.dev
couchdb2: 2.0.0 -> 2.1.1 for multiple CVEs
Fixes CVE-2017-12635, CVE-2017-12636.
https://blog.couchdb.org/2017/11/14/apache-couchdb-cve-2017-12635-and-cve-2017-12636/
+4
-3
pkgs/servers/http/couchdb/2.0.0.nix
+4
-3
pkgs/servers/http/couchdb/2.0.0.nix
···
3
4
stdenv.mkDerivation rec {
5
name = "couchdb-${version}";
6
-
version = "2.0.0";
7
8
src = fetchurl {
9
url = "mirror://apache/couchdb/source/${version}/apache-${name}.tar.gz";
10
-
sha256 = "1jkfx6g9anrgmkhrkcn50axcamragranwsciw1rhmi86rglkrbyc";
11
};
12
13
-
buildInputs = [ erlang icu openssl spidermonkey makeWrapper ];
14
15
patches = [ ./jsapi.patch ];
16
postPatch = ''
···
3
4
stdenv.mkDerivation rec {
5
name = "couchdb-${version}";
6
+
version = "2.1.1";
7
8
src = fetchurl {
9
url = "mirror://apache/couchdb/source/${version}/apache-${name}.tar.gz";
10
+
sha256 = "1k3v9v05417087b6fcj5yv03wl6i61xqrrhp0prl9b3ir2mmbwnm";
11
};
12
13
+
nativeBuildInputs = [ makeWrapper ];
14
+
buildInputs = [ erlang icu openssl spidermonkey ];
15
16
patches = [ ./jsapi.patch ];
17
postPatch = ''