From 0f4845f3978434c63d1aa91cddc3443bfc20973f Mon Sep 17 00:00:00 2001 From: Jiajie Chen Date: Tue, 21 Nov 2023 15:19:58 +0800 Subject: [PATCH] hdf5_1_10: 1.10.9 -> 1.10.11 According to https://www.hdfgroup.org/2023/09/release-of-hdf5-1-10-11-library-and-tools-newsletter-198/, HDF5 v1.10.11 fixes the CVEs. Closes #268883. --- pkgs/tools/misc/hdf5/1.10.nix | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/pkgs/tools/misc/hdf5/1.10.nix b/pkgs/tools/misc/hdf5/1.10.nix index dcfcf4a6a544..dda8fd3a8fa4 100644 --- a/pkgs/tools/misc/hdf5/1.10.nix +++ b/pkgs/tools/misc/hdf5/1.10.nix @@ -12,11 +12,11 @@ let inherit (lib) optional; in stdenv.mkDerivation rec { - version = "1.10.9"; + version = "1.10.11"; pname = "hdf5"; src = fetchurl { url = "https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-${lib.versions.majorMinor version}/${pname}-${version}/src/${pname}-${version}.tar.bz2"; - sha256 = "sha256-AMS+cJbzb9yvpPl04SbGwUEkKOOOvHsYHZB0WeeB8ZE="; + sha256 = "sha256-Cvx32lxGIXcJR1u++8qRwMtvHqYozNjDYZbPbFpN4wQ="; }; outputs = [ "out" "dev" ]; @@ -51,11 +51,5 @@ stdenv.mkDerivation rec { license = lib.licenses.bsd3; # Lawrence Berkeley National Labs BSD 3-Clause variant homepage = "https://www.hdfgroup.org/HDF5/"; platforms = lib.platforms.unix; - knownVulnerabilities = [ - "CVE-2020-10809" - "CVE-2020-10810" - "CVE-2020-10811" - "CVE-2020-10812" - ]; }; }