···6464with fileinput.FileInput(default_nix, inplace=True) as f:
6565 for line in f:
6666 result = re.sub(r'^ release_version = ".+";', f' release_version = "{release_version}";', line)
6767- result = re.sub(r'^ version = ".+";', f' version = "{version}";', line)
6767+ result = re.sub(r'^ version = ".+";', f' version = "{version}";', result)
6868 result = re.sub(r'^ rev = ".*";', f' rev = "{commit["sha"]}";', result)
6969 result = re.sub(r'^ sha256 = ".+";', f' sha256 = "{hash}";', result)
7070 print(result, end='')
···11-{ stdenv, lib, buildPackages, fetchurl, fetchFromGitLab, fetchpatch
11+{ stdenv, lib, buildPackages, fetchurl, fetchFromGitLab
22, enableStatic ? stdenv.hostPlatform.isStatic
33, enableMinimal ? false
44# Allow forcing musl without switching stdenv itself, e.g. for our bootstrapping:
···3232 CONFIG_FEATURE_WTMP n
3333 '';
34343535- # The debian version lacks behind the upstream version and also contains
3535+ # The debian version lags behind the upstream version and also contains
3636 # a debian-specific suffix. We only fetch the debian repository to get the
3737 # default.script
3838 debianVersion = "1.30.1-6";
···49495050stdenv.mkDerivation rec {
5151 pname = "busybox";
5252- # TODO: When bumping to next version, remove the patch
5353- # for CVE-2021-28831 (assuming the patch was included in
5454- # the next upstream release)
5555- version = "1.32.1";
5252+ version = "1.33.1";
56535754 # Note to whoever is updating busybox: please verify that:
5855 # nix-build pkgs/stdenv/linux/make-bootstrap-tools.nix -A test
5956 # still builds after the update.
6057 src = fetchurl {
6158 url = "https://busybox.net/downloads/${pname}-${version}.tar.bz2";
6262- sha256 = "1vhd59qmrdyrr1q7rvxmyl96z192mxl089hi87yl0hcp6fyw8mwx";
5959+ sha256 = "0a0dcvsh7nxnhxc5y73fky0z30i9p7r30qfidm2akn0n5fywdkhj";
6360 };
64616562 hardeningDisable = [ "format" "pie" ]
···67646865 patches = [
6966 ./busybox-in-store.patch
7070- (fetchpatch {
7171- name = "CVE-2021-28831.patch";
7272- url = "https://git.busybox.net/busybox/patch/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd";
7373- sha256 = "0y79flfbk45krwn963nnbqc21a88bsz4k4asqwvcnfk2lkciadxm";
7474- }) # TODO: Removing when bumping the version
7567 ] ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) ./clang-cross.patch;
76687769 postPatch = "patchShebangs .";
···142134 meta = with lib; {
143135 description = "Tiny versions of common UNIX utilities in a single small executable";
144136 homepage = "https://busybox.net/";
145145- license = licenses.gpl2;
137137+ license = licenses.gpl2Only;
146138 maintainers = with maintainers; [ TethysSvensson ];
147139 platforms = platforms.linux;
148140 priority = 10;