From a65e693ed74bbfe9dcf75bcab2ee4fdb7383611f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B8rn=20Forsman?= Date: Tue, 10 Sep 2024 22:29:54 +0200 Subject: [PATCH] lighttpd: 1.4.75 -> 1.4.76 The release tarball no longer comes with a ./configure script (related to avoiding CVE-2024-3094 xz supply chain attack), so add autoreconfHook to keep the build working. https://www.lighttpd.net/2024/4/12/1.4.76/ --- pkgs/servers/http/lighttpd/default.nix | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/pkgs/servers/http/lighttpd/default.nix b/pkgs/servers/http/lighttpd/default.nix index 28e5af7a44d6..b169e5a83dab 100644 --- a/pkgs/servers/http/lighttpd/default.nix +++ b/pkgs/servers/http/lighttpd/default.nix @@ -1,4 +1,5 @@ { lib, stdenv, buildPackages, fetchurl, pkg-config, pcre2, libxml2, zlib, bzip2, which, file +, autoreconfHook , openssl , enableDbi ? false, libdbi , enableMagnet ? false, lua5_1 @@ -14,11 +15,11 @@ stdenv.mkDerivation rec { pname = "lighttpd"; - version = "1.4.75"; + version = "1.4.76"; src = fetchurl { url = "https://download.lighttpd.net/lighttpd/releases-${lib.versions.majorMinor version}.x/${pname}-${version}.tar.xz"; - sha256 = "sha256-i3IcqTnTEq+qbvMdy9avtRYe04Wsgo5vzNTFt2vhidY="; + sha256 = "sha256-jL9CluNzz9DO3+nZeHYLWwXFj9xASLTivK8KYayPUBE="; }; separateDebugInfo = true; @@ -29,7 +30,7 @@ stdenv.mkDerivation rec { depsBuildBuild = [ buildPackages.stdenv.cc ]; - nativeBuildInputs = [ pkg-config ]; + nativeBuildInputs = [ autoreconfHook pkg-config ]; buildInputs = [ pcre2 pcre2.dev libxml2 zlib bzip2 which file openssl ] ++ lib.optional enableDbi libdbi ++ lib.optional enableMagnet lua5_1