From a04e670019a8f2a229b85d9ba7f8590d0fd559b8 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Tue, 20 Aug 2024 23:26:17 +0200 Subject: [PATCH] squid: 6.8 -> 6.10 Fixes CVE-2024-37894 / GHSA-wgvf-q977-9xjg Changes: https://github.com/squid-cache/squid/compare/SQUID_6_8...SQUID_6_10 Package is still tagged with `knownVulnerabilities`, a bunch of the issues appears to not be resolved (yet?). --- pkgs/servers/squid/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/squid/default.nix b/pkgs/servers/squid/default.nix index bdfdc2f562d6..9229359d9159 100644 --- a/pkgs/servers/squid/default.nix +++ b/pkgs/servers/squid/default.nix @@ -5,11 +5,11 @@ stdenv.mkDerivation (finalAttrs: { pname = "squid"; - version = "6.8"; + version = "6.10"; src = fetchurl { url = "http://www.squid-cache.org/Versions/v6/squid-${finalAttrs.version}.tar.xz"; - hash = "sha256-EcxWULUYCdmUg8z64kdEouUc0WGZ9f8MkX6E/OaVhw8="; + hash = "sha256-Cwexh+cj8Edw3SW+uJrsEgMKFYaWqoiS2HyLJoU0CKc="; }; nativeBuildInputs = [ pkg-config ];