From 3d9103c362d47b7730fb7ff3ef7d0e7f9c5356fc Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Sat, 15 Apr 2023 11:16:42 +0200 Subject: [PATCH 1/2] tcpdump: 4.99.3 -> 4.99.4 Fixes CVE-2023-1801 (the vulnerable feature is not enabled by default). https://git.tcpdump.org/tcpdump/blob/tcpdump-4.99.4:/CHANGES --- pkgs/tools/networking/tcpdump/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/tools/networking/tcpdump/default.nix b/pkgs/tools/networking/tcpdump/default.nix index 9ccf68aa5437..7fdea769b1c8 100644 --- a/pkgs/tools/networking/tcpdump/default.nix +++ b/pkgs/tools/networking/tcpdump/default.nix @@ -2,11 +2,11 @@ stdenv.mkDerivation rec { pname = "tcpdump"; - version = "4.99.3"; + version = "4.99.4"; src = fetchurl { url = "http://www.tcpdump.org/release/tcpdump-${version}.tar.gz"; - sha256 = "sha256-rXWm7T3A2XMpRbLlSDy0Hci0tSihaTFeSZxoYZUuc7M="; + hash = "sha256-AjIjG7LynWvyQm5woIp+DGOg1ZqbRIY7f14jV6bkn+o="; }; postPatch = '' From 97ae1aaa88203a41a12e256b27d4b11c3addf134 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Sat, 15 Apr 2023 11:22:01 +0200 Subject: [PATCH 2/2] libpcap: 1.10.3 -> 1.10.4 https://git.tcpdump.org/libpcap/blob/libpcap-1.10.4:/CHANGES --- pkgs/development/libraries/libpcap/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/libpcap/default.nix b/pkgs/development/libraries/libpcap/default.nix index 04c8a0f16ad8..37043e3e4bde 100644 --- a/pkgs/development/libraries/libpcap/default.nix +++ b/pkgs/development/libraries/libpcap/default.nix @@ -13,11 +13,11 @@ stdenv.mkDerivation rec { pname = "libpcap"; - version = "1.10.3"; + version = "1.10.4"; src = fetchurl { url = "https://www.tcpdump.org/release/${pname}-${version}.tar.gz"; - sha256 = "sha256-KoiFxANRbPewkz7UsU1sqjDgIFJInr1BTcdaxS51WeY="; + hash = "sha256-7RmgOD+tcuOtQ1/SOdfNgNZJFrhyaVUBWdIORxYOvl8="; }; buildInputs = lib.optionals stdenv.isLinux [ libnl ]