tjh.dev
mpg123: 1.25.4 -> 1.25.7 for multiple CVEs
Fixes at least CVE-2017-10683, CVE-2017-11126, CVE-2017-9545,
CVE-2017-12797.
(cherry picked from commit 6c283ae8f3847a86d8aecbd85e325237c7029970)
+2
-2
pkgs/applications/audio/mpg123/default.nix
+2
-2
pkgs/applications/audio/mpg123/default.nix
···
4
4
}:
5
5
6
6
stdenv.mkDerivation rec {
7
-
name = "mpg123-1.25.4";
7
+
name = "mpg123-1.25.7";
8
8
9
9
src = fetchurl {
10
10
url = "mirror://sourceforge/mpg123/${name}.tar.bz2";
11
-
sha256 = "1rxknrnl3ji5hi5rbckpzhbl1k5r8i53kcys4xdgg0xbi8765dfd";
11
+
sha256 = "1ws40fglyyk51jvmz8gfapjkw1g51pkch1rffdsbh4b1yay5xc9i";
12
12
};
13
13
14
14
buildInputs = stdenv.lib.optional (!stdenv.isDarwin) alsaLib;