pyrox.dev
shadow: 4.4 -> 4.5
Fixes CVE-2017-12424
+2
-6
pkgs/os-specific/linux/shadow/default.nix
+2
-6
pkgs/os-specific/linux/shadow/default.nix
···
20
21
stdenv.mkDerivation rec {
22
name = "shadow-${version}";
23
-
version = "4.4";
24
25
src = fetchFromGitHub {
26
owner = "shadow-maint";
27
repo = "shadow";
28
rev = "${version}";
29
-
sha256 = "005qk3n86chc8mlg86qhrns2kpl52n5f3las3m5s6266xij3qwka";
30
};
31
32
buildInputs = stdenv.lib.optional (pam != null && stdenv.isLinux) pam;
···
37
patches =
38
[ ./keep-path.patch
39
dots_in_usernames
40
-
(fetchpatch {
41
-
url = https://github.com/shadow-maint/shadow/commit/507f96cdeb54079fb636c7ce21e371f7a16a520e.patch;
42
-
sha256 = "10k70fx3z051f83p1k7ljjaawbykhn7cy6fg1zy04jp3xkvdwxc7";
43
-
})
44
];
45
46
# The nix daemon often forbids even creating set[ug]id files.
···
20
21
stdenv.mkDerivation rec {
22
name = "shadow-${version}";
23
+
version = "4.5";
24
25
src = fetchFromGitHub {
26
owner = "shadow-maint";
27
repo = "shadow";
28
rev = "${version}";
29
+
sha256 = "1aj7s2arnsfqf34ak40is2zmwm666l28pay6rv1ffx46j0wj4hws";
30
};
31
32
buildInputs = stdenv.lib.optional (pam != null && stdenv.isLinux) pam;
···
37
patches =
38
[ ./keep-path.patch
39
dots_in_usernames
40
];
41
42
# The nix daemon often forbids even creating set[ug]id files.