tjh.dev / nixpkgs
Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)
fork atom

glibc: 2.38-23 -> 2.38-27

Fixes CVE-2023-4911.

Change-Id: I154c79a7c6822051903ef15c547c3567691b1457

authored by edef and committed by Maximilian Bosch caa3d9d7 5c5cb215

+2 -2
unified split
pkgs/development/libraries/glibc/2.38-master.patch.gz

This is a binary file and will not be displayed.

+2 -2
pkgs/development/libraries/glibc/common.nix
··· 44 45 let 46 version = "2.38"; 47 - patchSuffix = "-23"; 48 sha256 = "sha256-+4KZiZiyspllRnvBtp0VLpwwfSzzAcnq+0VVt3DvP9I="; 49 in 50 ··· 60 [ 61 /* No tarballs for stable upstream branch, only https://sourceware.org/git/glibc.git and using git would complicate bootstrapping. 62 $ git fetch --all -p && git checkout origin/release/2.38/master && git describe 63 - glibc-2.38-23-g0e1ef6779a 64 $ git show --minimal --reverse glibc-2.38.. | gzip -9n --rsyncable - > 2.38-master.patch.gz 65 66 To compare the archive contents zdiff can be used.
··· 44 45 let 46 version = "2.38"; 47 + patchSuffix = "-27"; 48 sha256 = "sha256-+4KZiZiyspllRnvBtp0VLpwwfSzzAcnq+0VVt3DvP9I="; 49 in 50 ··· 60 [ 61 /* No tarballs for stable upstream branch, only https://sourceware.org/git/glibc.git and using git would complicate bootstrapping. 62 $ git fetch --all -p && git checkout origin/release/2.38/master && git describe 63 + glibc-2.38-27-g750a45a783 64 $ git show --minimal --reverse glibc-2.38.. | gzip -9n --rsyncable - > 2.38-master.patch.gz 65 66 To compare the archive contents zdiff can be used.