mirror of
https://github.com/SebastianWendel/nixpkgs.git
synced 2024-09-20 04:19:00 +02:00
Revert "xz: 5.4.6 -> 5.6.0"
This reverts commit 5c7c19cc7e
.
The upstream tarball has been tampered with and includes a backport for
which we cannot completely rule out, whether we are affected.
https://www.openwall.com/lists/oss-security/2024/03/29/4
This commit is contained in:
parent
699ac3316c
commit
f721231589
|
@ -11,11 +11,11 @@
|
|||
|
||||
stdenv.mkDerivation (finalAttrs: {
|
||||
pname = "xz";
|
||||
version = "5.6.0";
|
||||
version = "5.4.6";
|
||||
|
||||
src = fetchurl {
|
||||
url = with finalAttrs; "https://github.com/tukaani-project/xz/releases/download/v${version}/xz-${version}.tar.bz2";
|
||||
hash = "sha256-iMhjHO+6kWZP3EexS7dT4YdvSWSgfbZQgh0gOZKx4eo=";
|
||||
sha256 = "sha256-kThRsnTo4dMXgeyUnxwj6NvPDs9uc6JDbcIXad0+b0k=";
|
||||
};
|
||||
|
||||
strictDeps = true;
|
||||
|
|
Loading…
Reference in a new issue