From 6124f9a57458a37382915f36b9bfdf0bca0fcf6c Mon Sep 17 00:00:00 2001 From: Frank Doepper Date: Fri, 19 Sep 2025 16:59:10 +0200 Subject: [PATCH] nncp: 8.11.0 -> 8.12.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Upstream release: * Combine all executables in single 'nncp'. You should symlink all 'nncp-*' commands to it. * Prevent path traversal during freqing and file saving. Previously malicious paths in packets may request or overwrite file outside freq or incoming directories. Thanks to Eugene Medvedev for finding and fixing that serious issue! * Update 'hjson' and 'compress' dependant libraries. * Set 'hjson-cli' utility's version during the build process. Thanks to Klaus Alexander Seistrup for finding that problem! --- pkgs/by-name/nn/nncp/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/nn/nncp/package.nix b/pkgs/by-name/nn/nncp/package.nix index 8860b501afe3..28a7609bc8da 100644 --- a/pkgs/by-name/nn/nncp/package.nix +++ b/pkgs/by-name/nn/nncp/package.nix @@ -12,7 +12,7 @@ stdenv.mkDerivation (finalAttrs: { pname = "nncp"; - version = "8.11.0"; + version = "8.12.1"; outputs = [ "out" "doc" @@ -21,7 +21,7 @@ stdenv.mkDerivation (finalAttrs: { src = fetchurl { url = "http://www.nncpgo.org/download/nncp-${finalAttrs.version}.tar.xz"; - hash = "sha256-7EEUvNkYSqh4HzjbqjqgQlXfu6nDU2v3WWnma8M0r/I="; + hash = "sha256-yTwndQ43aBCned7iKPZm70zCC3zMapf2GXtornjiZos="; }; nativeBuildInputs = [ @@ -36,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: { buildPhase = '' runHook preBuild - ./bin/build + ./build runHook postBuild '';