From a37eccb3fe66988aaaf4937ee82f49044733a2ea Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Sun, 22 Oct 2023 12:51:30 +0200 Subject: [PATCH] trafficserver: 9.2.2 -> 9.2.3 Fixes CVE-2023-39456, CVE-2023-41752 and CVE-2023-44487. Changelog: https://raw.githubusercontent.com/apache/trafficserver/9.2.x/CHANGELOG-9.2.3 --- pkgs/servers/http/trafficserver/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/http/trafficserver/default.nix b/pkgs/servers/http/trafficserver/default.nix index fc80a0988f16..a49acfe9fce8 100644 --- a/pkgs/servers/http/trafficserver/default.nix +++ b/pkgs/servers/http/trafficserver/default.nix @@ -49,11 +49,11 @@ stdenv.mkDerivation rec { pname = "trafficserver"; - version = "9.2.2"; + version = "9.2.3"; src = fetchzip { url = "mirror://apache/trafficserver/trafficserver-${version}.tar.bz2"; - hash = "sha256-7iKUlbv9yfqO9Gt/BJcuCuDtWemn/+KDg6izT/BNDxw="; + hash = "sha256-WqRqf10QKYepCoaNzG26O2jv54Do3qFawDupSkrAPKk="; }; # NOTE: The upstream README indicates that flex is needed for some features,