jiebi/CodeConvo huggingface dataset:
Change:
Project description The app is a client for the indie game store Metadata homepage URL: source URL: license: mit platforms: linux, darwin
Maybe helpful: Also pinging since he worked on that if i remember right.
I think that one just downloads a precompiled release from My first attempt of packaging this was by following and just add to . That did not work however because the app does not exist on npmjs as far as I can see. According to it should just be installed by a and . But I cannot find any documentation about what the nixpkgs approach would be for this.
Correct, it's basically just two games along with that fetches releases, so it's unrelated to this packaging request.
I marked this as stale due to inactivity. &rarr;
Having the itch game launcher on nix would be a huge win, hope this thread gets more attention. As the package is currently marked as broken :(

Discussion:
<ins> { lib, writeShellScriptBin, steam-run, fetchurl }: let pname = "itch-setup"; version = "1.26.0"; src = fetchurl { url = "https://broth.itch.ovh/itch-setup/linux-amd64/${version}/unpacked/default"; hash = "sha256-bcJKqhgZK42Irx12BIvbTDMb/DHEOEXljetlDokF7x8="; executable = true; }; in (writeShellScriptBin pname ''exec ${steam-run}/bin/steam-run ${src} "$@"'') // { passthru = { inherit pname version src; }; meta = with lib; { description = "An installer for the itch.io desktop app"; homepage = "https://github.com/itchio/itch-setup"; license = licenses.mit; platforms = platforms.linux; maintainers = with maintainers; [ pasqui23 ]; }; } </ins>

<ins> { lib , stdenvNoCC , fetchurl , libnotify , nss , gtk3 , fetchFromGitHub , makeDesktopItem , itch-setup , runtimeShell }: stdenvNoCC.mkDerivation rec{ pname = "itch"; version = "25.5.1"; src = fetchFromGitHub { owner = "itchio"; repo = pname; rev = "v${version}"; hash = "sha256-Pi3l3uK4kr+N3p7fGQuqckYIzycRqJHDVX00reoSbp4="; }; desktopItems = [ (makeDesktopItem { name = pname; exec = pname; icon = pname; desktopName = pname; mimeType = "x-scheme-handler/itchio;x-scheme-handler/itch"; comment = "Install and play itch.io games easily"; extraDesktopEntries = { TryExec = "itch %U"; Categories = "Game;"; }; }) ]; itchBin = '' #!${runtimeShell} exec ${itch-setup}/bin/itch-setup --prefer-launch -- "$@" ''; passAsFile = [ "itchBin" ]; # as taken from https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=itch installPhase = '' install -Dm0777 $itchBinPath $out/bin/itch for icon in release/images/itch-icons/icon*.png do iconsize="''${icon#release/images/itch-icons/icon}" iconsize="''${iconsize%.png}" icondir="$out/share/icons/hicolor/''${iconsize}x''${iconsize}/apps/" install -Dm644 "$icon" "$icondir/itch.png" done ''; meta = with lib; { description = "The best way to play itch.io games"; homepage = "https://github.com/itchio/itch"; license = licenses.mit; platforms = platforms.linux; maintainers = with maintainers; [ pasqui23 ]; }; } </ins>

ipgrep = callPackage ../tools/networking/ipgrep { }; <ins> itch = callPackage ../games/itch {}; itch-setup = callPackage ../games/itch-setup {}; </ins> lastpass-cli = callPackage ../tools/security/lastpass-cli { }; lesspass-cli = callPackage ../tools/security/lesspass-cli { };
Change:
Describe the bug Discord 0.10.0 cannot be built on master To Reproduce Steps to reproduce the behavior: ... ... ... Expected behavior A clear and concise description of what you expected to happen. Screenshots If applicable, add screenshots to help explain your problem. Additional context Add any other context about the problem here. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Metadata Please run and paste the result. Maintainer information:
Error log: important line:
Adding to allows the package to build for me. I don't what changed to need this
can you send a pull request with the fix, please?

Discussion:
autoPatchelfHook cups libdrm <ins> libuuid </ins> libX11 libXScrnSaver libXtst
Change:
Describe the bug It assumes the compressor is always gzip. To Reproduce Which results in a kernel panic, unable to mount root fs error. Expected behavior No kernel panic, it boots normally. Additional context I found this when moving to from removal of in . Digging into the files in I noticed that the file suffixed with was gzipped. Decompressing the () file and recompressing it using allowed me to then boot back into my machine. Notify maintainers According to : People who might have some related interest: Metadata Please run and paste the result. system: host os: multi-user?: sandbox: version: channels(root): channels(sna): nixpkgs:
Gzip should be replaced by in this line.
It probably would be a good idea to handle the non-determinism introduced by the host filesystem when using find. Seems to do that with piped to but it also has a lot more arguments to as well.
Do you mind open a pull request for this?
See
have you had a chance to see the pull request mentioned above? It works for me and I have been using it regularly for awhile now.

Discussion:
) config.boot.initrd.secrets) } <del> (cd "$tmp" && find . | cpio -H newc -o) | gzip >>"$1" </del> <ins> (cd "$tmp" && find . -print0 | sort -z | cpio -o -H newc -R +0:+0 --reproducible --null) |  ${config.boot.initrd.compressor} >> "$1" </ins> ''; in
Change:
Project description Open-source Android/Desktop remake of Civ V Metadata homepage URL: source URL: license: Mozilla Public License 2.0 platforms: linux, darwin, windows, android
I marked this as stale due to inactivity. &rarr;

Discussion:
<ins> { stdenv , lib , fetchurl , copyDesktopItems , makeDesktopItem , makeWrapper , jre , libpulseaudio , libXxf86vm }: let desktopItem = makeDesktopItem { name = "unciv"; exec = "unciv"; comment = "An open-source Android/Desktop remake of Civ V"; desktopName = "Unciv"; categories = "Game;"; }; envLibPath = lib.makeLibraryPath [ libpulseaudio libXxf86vm ]; in stdenv.mkDerivation rec { pname = "unciv"; version = "3.12.8"; src = fetchurl { url = "https://github.com/yairm210/Unciv/releases/download/${version}/Unciv.jar"; sha256 = "178lasa6ahwg2s2hamm13yysg42qm13v6a9pgs6nm66np93nskc7"; }; dontUnpack = true; nativeBuildInputs = [ copyDesktopItems makeWrapper ]; installPhase = '' runHook preInstall makeWrapper ${jre}/bin/java $out/bin/unciv  --prefix LD_LIBRARY_PATH : ${envLibPath}  --prefix PATH : ${lib.makeBinPath [ jre ]}  --add-flags "-jar ${src}" runHook postInstall ''; desktopItems = [ desktopItem ]; meta = with lib; { description = "An open-source Android/Desktop remake of Civ V"; homepage = "https://github.com/yairm210/Unciv"; maintainers = with maintainers; [ tex ]; license = licenses.mpl20; platforms = [ "x86_64-linux" ]; }; } </ins>

ffmpeg = ffmpeg_2; }; <ins> unciv = callPackage ../games/unciv { }; </ins> unnethack = callPackage ../games/unnethack { }; uqm = callPackage ../games/uqm { };
Change:
I'm using Nix 1.9 on OS X 10.10.4 (Yosemite) with the package. It installs without issues, but when I try to use the tool I get this error: I'm using the unstable channel:
Hrm, I get (also Nix 1.9 and OS X 10.10.4) It seems to be an issue with the shebang in as seems to work just fine. I don't see anything obviously wrong with though... (PS hi long time no see :)
I just hit this issue too. Weirdly, just running from different shells would give different errors (I use fish normally, so it's always an early suspect around problems like this). I would get an error like got from , and an error like from . When I change my to this: Everything works, and in all shells the same way. Is this a valid fix? (By "works", I mean I get , but maybe that's a separate issue, or due to a lack of familiarity with Elixir/Erlang...)
Nice catch. Doing will generate a new app skeleton if everything is working as it should.
Turns out I just forgot to put the at the end of my fixed version, so no args were getting through :P Is what I mentioned above an acceptable fix? If so, I can submit a PR.

Discussion:
substituteInPlace Makefile  --replace "/usr/local" $out <del> substituteInPlace bin/mix  --replace "/usr/bin/env elixir" "$out/bin/elixir" </del> ''; postFixup = ''

--prefix PATH ":" "${erlang}/bin:${coreutils}/bin:${curl}/bin:${bash}/bin"  --set CURL_CA_BUNDLE /etc/ssl/certs/ca-certificates.crt done <ins> substituteInPlace $out/bin/mix  --replace "/usr/bin/env elixir" "${coreutils}/bin/env $out/bin/elixir" </ins> ''; meta = with stdenv.lib; {
Change:
Describe the bug A clear and concise description of what the bug is. To Reproduce Steps to reproduce the behavior: redis via: at the log and observe: Expected behavior No warnings or errors in log. Additional context I thought line was supposed to prevent such a warning... :thinking: Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --ping Metadata Please run and paste the result. Maintainer information:
If the sysctl doesn't work, we can probably also put the suggested line into the script. :thinking: This should be relatively easy to test, given we have a NixOS vm test :-)
As long as another solution does not fail loudly in containers, i.e. reintroduce bug which we fixed by switching to sysctl. I’m game. But my question is: Is the broken since that "fix"? Can others reproduce this issue? Or is maybe running redis in a container where this line doesn’t take effect?
I'm just running on a regular NixOS install which happens to be running on VMWare.
Strange... when I add to the test I don't see the warning :thinking:
I marked this as stale due to inactivity. &rarr;

Discussion:
- `network-interfaces.target` system target was removed as it has been deprecated for a long time. Use `network.target` instead. <ins> - `services.redis.vmOverCommit` now defaults to `true` and no longer enforces Transparent Hugepages (THP) to be disabled. Redis only works with THP configured to `madvise` which is the kernel's default. </ins> - `azure-cli` now has extension support. For example, to install the `aks-preview` extension, use ```nix

package = mkPackageOption pkgs "redis" { }; vmOverCommit = mkEnableOption '' <del> setting of vm.overcommit_memory to 1 </del> <ins> set `vm.overcommit_memory` sysctl to 1 </ins> (Suggested for Background Saving: <https://redis.io/docs/get-started/faq/>) <del> ''; </del> <ins> '' // { default = true; }; </ins> servers = mkOption { type = with types; attrsOf (submodule ({ config, name, ... }: {

''; }) enabledServers); <del> boot.kernel.sysctl = mkMerge [ { "vm.nr_hugepages" = "0"; } ( mkIf cfg.vmOverCommit { "vm.overcommit_memory" = "1"; } ) ]; </del> <ins> boot.kernel.sysctl = mkIf cfg.vmOverCommit { "vm.overcommit_memory" = "1"; }; </ins> networking.firewall.allowedTCPPorts = concatMap (conf: optional conf.openFirewall conf.port
Change:
Describe the bug and seem to be the same package. They both depend on , which is not supposed to be the case for . Since depends on , which only compiles on Linux, I can't install on my Mac. To Reproduce Steps to reproduce the behavior (on NixOS): store path ends up being store path ends up also being at the end of the definition in with again store path ends up being , which is different from before again store is still the same as before: Expected behavior I expect the non-full version of to not depend on . Notify maintainers I think you introduced this bug in . Metadata Please run and paste the result. Maintainer information:

Discussion:
bids-validator = callPackage ../development/python-modules/bids-validator { }; <del> binwalk = callPackage ../development/python-modules/binwalk { }; </del> <ins> binwalk = callPackage ../development/python-modules/binwalk { pyqtgraph = null; }; </ins> binwalk-full = appendToName "full" (self.binwalk.override { pyqtgraph = self.pyqtgraph;
Change:
This is pulled in unconditionally by and fails during NixOS cross-compilation: I'm also unsure if we still need the / cc cc
I've just opened which fixes the cross compilation. Not sure if it's the most elegant way to fix it though.

Discussion:
sed -e "/INSTALL.*initramfs/hook/d"  -e "/INSTALL.*initcpio/install/d"  -e "/INSTALL.*dracut/module-setup.sh/d"  <ins> -e "s/pkg-config/$PKG_CONFIG/"  </ins> -i Makefile '';

./fix-static.patch ]; <ins> makeFlags = [ "PREFIX=${placeholder "out"}" "UDEVLIBDIR=${placeholder "out"}/lib/udev/" ]; </ins> preBuild = '' <del> export makeFlags="$makeFlags PREFIX="$out" UDEVLIBDIR="$out/lib/udev/""; </del> sed -e "s|/bin/sh|${bash}/bin/sh|" -i *.rules '';
Change:
, CVSSv3=9.8 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives.
needs 1.3.2 for CVE-2016- needs 1.3.1 for CVE-2016-3092

Discussion:
{lib, stdenv, fetchurl}: stdenv.mkDerivation rec { <del> version = "1.3.1"; </del> <ins> version = "1.4"; </ins> pname = "commons-fileupload"; src = fetchurl { url    = "mirror://apache/commons/fileupload/binaries/${pname}-${version}-bin.tar.gz"; <del> sha256 = "1jy7w2j2ay56mpq4ij3331cf9zgpkm832ydr63svb35j0ymnky72"; </del> <ins> sha256 = "1avfv4gljp7flra767yzas54vfb6az9s1nhxfjv48jj2x0llxxkx"; </ins> }; installPhase = '' tar xf ${src} mkdir -p $out/share/java <del> cp lib/*.jar $out/share/java/ </del> <ins> cp commons-fileupload-*-bin/*.jar $out/share/java/ </ins> ''; meta = {
Change:
, CVSSv3=9.8 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives.

Discussion:
<del> { stdenv, lib, fetchurl, gtk2, glib, gdk-pixbuf, alsaLib, nss, nspr, gconf , cups, libgcrypt_1_5, systemd, dbus, libXdamage, expat }: with lib; let bracketsLibs = makeLibraryPath [ gtk2 glib gdk-pixbuf stdenv.cc.cc.lib alsaLib nss nspr gconf cups libgcrypt_1_5 dbus systemd libXdamage expat ]; in stdenv.mkDerivation rec { pname = "brackets"; version = "1.9"; src = fetchurl { url = "https://github.com/adobe/brackets/releases/download/release-${version}/Brackets.Release.${version}.64-bit.deb"; sha256 = "0c4l2rr0853xd21kw8hhxlmrx8mqwb7iqa2k24zvwyjp4nnwkgbp"; name = "${pname}-${version}.deb"; }; phases = [ "installPhase" "fixupPhase" ]; installPhase = '' mkdir -p $out ar p $src data.tar.xz | tar -C $out -xJ mv $out/usr/* $out/ rmdir $out/usr ln -sf $out/opt/brackets/brackets $out/bin/brackets ln -s ${lib.getLib systemd}/lib/libudev.so.1 $out/opt/brackets/lib/libudev.so.0 substituteInPlace $out/opt/brackets/brackets.desktop  --replace "Exec=/opt/brackets/brackets" "Exec=brackets" mkdir -p $out/share/applications ln -s $out/opt/brackets/brackets.desktop $out/share/applications/ ''; postFixup = '' patchelf --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)"  --set-rpath "${bracketsLibs}:$out/opt/brackets/lib"  $out/opt/brackets/Brackets patchelf --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)"  --set-rpath "${bracketsLibs}"  $out/opt/brackets/Brackets-node patchelf --set-rpath "${bracketsLibs}"  $out/opt/brackets/lib/libcef.so ''; meta = { description = "An open source code editor for the web, written in JavaScript, HTML and CSS"; homepage = "http://brackets.io/"; license = licenses.mit; maintainers = [ maintainers.matejc ]; platforms = [ "x86_64-linux" ]; }; } </del>

bazaarTools = throw "bazaar has been deprecated by breezy."; # added 2020-04-19 beegfs = throw "beegfs has been removed."; # added 2019-11-24 bluezFull = bluez; # Added 2019-12-03 <ins> brackets = throw "brackets has been removed, it was unmaintained and had open vulnerabilities"; # added 2021-01-24 </ins> bridge_utils = bridge-utils;  # added 2015-02-20 bro = zeek; # added 2019-09-29 bootchart = throw "bootchart has been removed from nixpkgs, as it is without a maintainer"; # added 2019-12-10

bonzomatic = callPackage ../applications/editors/bonzomatic { }; <del> brackets = callPackage ../applications/editors/brackets { gconf = gnome2.GConf; }; </del> brave = callPackage ../applications/networking/browsers/brave { }; break-time = callPackage ../applications/misc/break-time { };
Change:
, CVSSv3=5.5 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives.
cc

Discussion:
<ins> diff -ru a/app/app_procs.c b/app/app_procs.c --- a/app/app_procs.c	2021-01-30 11:09:52.000000000 -0500 +++ b/app/app_procs.c	2021-01-30 11:11:05.000000000 -0500 @@ -785,6 +785,7 @@ if (!filename) { g_print (_("Filename conversion failed: %sn"), filenames[i]); +	  ++i; continue; } </ins>

sha256 = "1fyxfrzdcs6blxhkw3bcgkksaf3byrsj4cbyrqgb4869k3ynap96"; }; <ins> patches = [ ./CVE-2019-19451.patch ]; </ins> buildInputs = [ gtk2 libxml2 gettext python libxml2Python docbook5 libxslt docbook_xsl libart_lgpl ]
Change:
, CVSSv3=7.8 (nixos-20.03, nixos-unstable) CVSSv3=5.5 (nixos-20.03, nixos-unstable) CVSSv3=5.5 (nixos-20.03, nixos-unstable) CVSSv3=5.5 (nixos-20.03, nixos-unstable) CVSSv3=5.5 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives. Cc
There have been no new releases, but these have been fixed. I'll update it with the latest commit
Fixed in , that should have severity: security

Discussion:
{ stdenv, fetchFromGitHub, cmake, git, glibc }: stdenv.mkDerivation rec { <del> version = "1.2.1"; pname = "lepton"; </del> <ins> version = "2019-08-20"; pname = "lepton-unstable"; </ins> src = fetchFromGitHub { repo = "lepton"; owner = "dropbox"; <del> rev = version; sha256 = "1f2vyp0crj4yw27bs53vykf2fqk4w57gv3lh9dp89dh3y7wwh1ba"; </del> <ins> rev = "3d1bc19da9f13a6e817938afd0f61a81110be4da"; sha256 = "0aqs6nvcbq8cbfv8699fa634bsz7csmk0169n069yvv17d1c07fd"; </ins> }; nativeBuildInputs = [ cmake git ];
Change:
, CVSSv3=9.8 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives.

Discussion:
<del> { lib, stdenv, fetchurl }: </del> <ins> { lib, stdenv, fetchFromGitHub, meson, ninja, pkg-config, openssl }: </ins> <del> stdenv.mkDerivation { </del> <ins> stdenv.mkDerivation rec { </ins> pname = "libESMTP"; <del> version = "1.0.6"; </del> <ins> version = "1.1.0"; </ins> <del> src = fetchurl { url = "http://brianstafford.info/libesmtp/libesmtp-1.0.6.tar.bz2"; sha256 = "02zbniyz7qys1jmx3ghx21kxmns1wc3hmv80gp7ag7yra9f1m9nh"; </del> <ins> nativeBuildInputs = [ meson ninja pkg-config ]; buildInputs = [ openssl ]; src = fetchFromGitHub { owner = "libesmtp"; repo = pname; rev = "v${version}"; sha256 = "1bhh8hlsl9597x0bnfl563k2c09b61qnkb9mfyqcmzlq63m1zw5y"; </ins> }; meta = with lib; { <del> homepage = "http://brianstafford.info/libesmtp/index.html"; </del> description = "A Library for Posting Electronic Mail"; <del> license = licenses.lgpl21; </del> <ins> longDescription = '' libESMTP is an SMTP client library which manages submission of electronic mail via a preconfigured Mail Transport Agent (MTA) such as Exim or Postfix. It implements many SMTP extensions including TLS for security and PIPELINING for high performance. ''; homepage = "https://libesmtp.github.io/"; license = licenses.lgpl21Plus; </ins> }; }
Change:
, CVSSv3=6.5 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives. Cc
I couldn't get the vulnerability to compile and run, so I don't know for sure whether this version bump is actually a fix. Nonetheless, here's a PR.

Discussion:
stdenv.mkDerivation rec { pname = "igraph"; <del> version = "0.7.1"; </del> <ins> version = "0.8.2"; </ins> src = fetchFromGitHub { owner = "igraph"; repo = pname; rev = version; <del> sha256 = "1wsy0r511gk069il6iqjs27q8cjvqz20gf0a7inybx1bw84845z8"; </del> <ins> sha256 = "015yh9s19lmxm7l1ld8adlsqh1lrmzicl801saixdwl9w05hfva4"; </ins> }; nativeBuildInputs = [ pkgconfig autoreconfHook ]; buildInputs = [ flex yacc zlib libxml2 ]; <del> # This file is normally generated by igraph's bootstrap.sh, but we can do it # ourselves. ~ C. </del> <ins> # Normally, igraph wants us to call bootstrap.sh, which will call # tools/getversion.sh. Instead, we're going to put the version directly # where igraph wants, and then let autoreconfHook do the rest of the # bootstrap. ~ C. </ins> postPatch = '' <del> echo "${version}" > VERSION </del> <ins> echo "${version}" > IGRAPH_VERSION </ins> ''; <ins> doCheck = true; </ins> meta = { description = "The network analysis package"; homepage = "https://igraph.org/"; license = lib.licenses.gpl2; <ins> # NB: Known to fail tests on aarch64. platforms = [ "x86_64-linux" ]; </ins> maintainers = [ lib.maintainers.MostAwesomeDude ]; }; }

{ buildPythonPackage, fetchPypi, lib, isPy3k <del> , pkgconfig, igraph }: </del> <ins> , pkgconfig, igraph , texttable }: </ins> buildPythonPackage rec { pname = "python-igraph";

nativeBuildInputs = [ pkgconfig ]; buildInputs = [ igraph ]; <ins> propagatedBuildInputs = [ texttable ]; </ins> src = fetchPypi { inherit pname version; sha256 = "4601638d7d22eae7608cdf793efac75e6c039770ec4bd2cecf76378c84ce7d72"; }; <ins> # NB: We want to use our igraph, not vendored igraph, but even with # pkg-config on the PATH, their custom setup.py still needs to be explicitly # told to do it. ~ C. setupPyGlobalFlags = [ "--use-pkg-config" ]; </ins> doCheck = !isPy3k; meta = {
Change:
, CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=6.8 (nixos-20.03, nixos-unstable) CVSSv3=5.9 (nixos-20.03, nixos-unstable) CVSSv3=5.9 (nixos-20.03, nixos-unstable) CVSSv3=4.7 (nixos-20.03, nixos-unstable) CVSSv3=4.2 (nixos-20.03, nixos-unstable) CVSSv3=2.0 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives.

Discussion:
license = licenses.lgpl2Plus; platforms = platforms.all; repositories.git = "git://git.gnupg.org/libgcrypt.git"; <ins> knownVulnerabilities = [ "CVE-2014-3591" "CVE-2015-0837" "CVE-2015-7511" "CVE-2017-0379" "CVE-2017-7526" "CVE-2017-9526" "CVE-2018-0495" "CVE-2018-6829" "CVE-2018-12437" ]; </ins> }; }
Change:
, CVSSv3=9.1 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives.

Discussion:
<del> { stdenv, fetchurl, libtool }: </del> <ins> { stdenv, fetchurl, fetchpatch, libtool }: </ins> stdenv.mkDerivation rec { pname = "libtomcrypt";

sha256 = "113vfrgapyv72lalhd3nkw7jnks8az0gcb5wqn9hj19nhcxlrbcn"; }; <ins> patches = [ (fetchpatch { name = "CVE-2019-17362.patch"; url = "https://github.com/libtom/libtomcrypt/pull/508/commits/25c26a3b7a9ad8192ccc923e15cf62bf0108ef94.patch"; sha256 = "1bwsj0pwffxw648wd713z3xcyrbxc2z646psrzp38ys564fjh5zf"; }) ]; </ins> nativeBuildInputs = [ libtool ]; postPatch = ''
Change:
, CVSSv3=6.5 (nixos-unstable) Scanned versions: nixos-unstable: . May contain false positives. Cc

Discussion:
maintainers = with maintainers; [ vrthra ]; license = licenses.mit; platforms = with platforms; unix; <ins> knownVulnerabilities = [ "CVE-2020-11721" # https://github.com/saitoha/libsixel/issues/134 "CVE-2020-19668" # https://github.com/saitoha/libsixel/issues/136 ]; </ins> }; }
Change:
, CVSSv3=9.8 (nixos-20.03, nixos-unstable) CVSSv3=8.8 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.5 (nixos-20.03, nixos-unstable) CVSSv3=7.2 (nixos-20.03, nixos-unstable) CVSSv3=7.2 (nixos-20.03, nixos-unstable) CVSSv3=6.1 (nixos-20.03, nixos-unstable) CVSSv3=6.1 (nixos-20.03, nixos-unstable) CVSSv3=6.1 (nixos-20.03, nixos-unstable) CVSSv3=5.4 (nixos-20.03, nixos-unstable) CVSSv3=5.3 (nixos-20.03, nixos-unstable) CVSSv3=5.3 (nixos-20.03, nixos-unstable) CVSSv3=5.3 (nixos-20.03, nixos-unstable) CVSSv3=5.3 (nixos-20.03, nixos-unstable) CVSSv3=4.3 (nixos-20.03, nixos-unstable) CVSSv3=2.7 (nixos-20.03, nixos-unstable) CVSSv3=2.7 (nixos-20.03, nixos-unstable) Scanned versions: nixos-20.03: ; nixos-unstable: . May contain false positives. Cc

Discussion:
<del> { stdenv, fetchFromGitHub, writeText }: </del> <ins> { stdenv, fetchFromGitHub, writeText, nixosTests }: </ins> stdenv.mkDerivation rec { pname = "limesurvey"; <del> version = "3.17.12+190823"; </del> <ins> version = "3.23.0+200813"; </ins> src = fetchFromGitHub { owner = "LimeSurvey"; repo = "LimeSurvey"; rev = version; <del> sha256 = "1i7jpxndrbya5ggl4babscwzmxx4c0jwri5kpl7h2ihqrn90m4b5"; </del> <ins> sha256 = "0r260z40g6b2bsfzxgfwdffbs17bl784xsc67n7q8222rs601hxf"; </ins> }; phpConfig = writeText "config.php" ''

runHook postInstall ''; <ins> passthru.tests = { smoke-test = nixosTests.limesurvey; }; </ins> meta = with stdenv.lib; { description = "Open source survey application"; license = licenses.gpl2;