From 44757a1a48bcb22b76409d4f9397661b515d991e Mon Sep 17 00:00:00 2001 From: Aaron Jheng Date: Sat, 5 Nov 2022 07:00:41 +0000 Subject: [PATCH] sudo: 1.9.12 -> 1.9.12p1 --- pkgs/tools/security/sudo/default.nix | 13 ++----------- 1 file changed, 2 insertions(+), 11 deletions(-) diff --git a/pkgs/tools/security/sudo/default.nix b/pkgs/tools/security/sudo/default.nix index aa032467f482..eb55297f643b 100644 --- a/pkgs/tools/security/sudo/default.nix +++ b/pkgs/tools/security/sudo/default.nix @@ -1,7 +1,6 @@ { lib , stdenv , fetchurl -, fetchpatch , buildPackages , coreutils , pam @@ -15,21 +14,13 @@ stdenv.mkDerivation rec { pname = "sudo"; - version = "1.9.12"; + version = "1.9.12p1"; src = fetchurl { url = "https://www.sudo.ws/dist/${pname}-${version}.tar.gz"; - hash = "sha256-3hVzOIgXDFaDTar9NL+YPbEPshA5dC/Pw5a9MhaNY2I="; + hash = "sha256-R1oYqOs9qLKRfOqwY6a69R6gkSjDxH4+DjOrdJe6t9g="; }; - patches = [ - (fetchpatch { - name = "CVE-2022-43995.patch"; - url = "https://github.com/sudo-project/sudo/commit/bd209b9f16fcd1270c13db27ae3329c677d48050.patch"; - sha256 = "sha256-JUdoStoSyv6KBPsyzxuMIxqwZMZsjUPj8zUqOSvmZ1A="; - }) - ]; - prePatch = '' # do not set sticky bit in nix store substituteInPlace src/Makefile.in --replace 04755 0755