jiebi/CodeConvo huggingface dataset:
Change:
A regular update fails because apparently won't find the module: (edit: line-wrapped for clarity) Please run and paste the result.
now I see that this is fixed by . I did my search before, but I haven't seen that one.
This PR is already on nixos-unstable, but I still cannot compile :
I had the same problem and can still reproduce on master building with the flake:
We need this upstream patch: freedesktop/spice-common
fixed , not . , like , pulls in as a Git submodule.
I just tried bumping spice-gtk to version 0.40 locally (like suggested by ) and it indeed passes that "check for dependencies" phase of the build. It fails later on though for reasons that I'm not familiar enough with the build process to understand. With this patch: I get the following build log:
the issue is still persisting after 4 days :(
Not directly, it's fixed on master (and stable branches I guess, it builds on nixos-21.11 for example), but nixos-unstable can't catch up right now because of another completely unrelated issue, see .

Discussion:
, gst_all_1 , gtk-doc , gtk3 <ins> , hwdata </ins> , json-glib , libcacard <ins> , libcap_ng </ins> , libdrm , libjpeg_turbo , libopus

, python3 , spice-protocol , usbredir <del> , usbutils </del> , vala <ins> , wayland-protocols </ins> , zlib , withPolkit ? true }:

stdenv.mkDerivation rec { pname = "spice-gtk"; <del> version = "0.37"; </del> <ins> version = "0.40"; </ins> outputs = [ "out" "dev" "devdoc" "man" ]; src = fetchurl { <del> url = "https://www.spice-space.org/download/gtk/${pname}-${version}.tar.bz2"; sha256 = "1drvj8y35gnxbnrxsipwi15yh0vs9ixzv4wslz6r3lra8w3bfa0z"; </del> <ins> url = "https://www.spice-space.org/download/gtk/${pname}-${version}.tar.xz"; sha256 = "sha256-I/X/f6gLdWR85zzaXq+LMi80Mtu7f286g5Y0YYrbztM="; </ins> }; postPatch = '' # get rid of absolute path to helper in store so we can use a setuid wrapper substituteInPlace src/usb-acl-helper.c  --replace 'ACL_HELPER_PATH"/' '"' <ins> # don't try to setcap/suid in a nix builder substituteInPlace src/meson.build  --replace "meson.add_install_script('../build-aux/setcap-or-suid',"  "# meson.add_install_script('../build-aux/setcap-or-suid'," </ins> ''; nativeBuildInputs = [

gtk3 json-glib libcacard <ins> libcap_ng </ins> libdrm libjpeg_turbo libopus

pixman spice-protocol usbredir <ins> wayland-protocols </ins> zlib <del> ] ++ lib.optionals withPolkit [ polkit acl usbutils ] ; </del> <ins> ] ++ lib.optionals withPolkit [ polkit acl ] ; </ins> PKG_CONFIG_POLKIT_GOBJECT_1_POLICYDIR = "${placeholder "out"}/share/polkit-1/actions"; mesonFlags = [ <del> "-Dcelt051=disabled" "-Dpulse=disabled" # is deprecated upstream </del> <ins> "-Dusb-acl-helper-dir=${placeholder "out"}/bin" "-Dusb-ids-path=${hwdata}/share/hwdata/usb.ids" </ins> ]; meta = with lib; {
Change:
According to our investigation seems to be invalid syntax. Steps to reproduce the behavior: No error. I'm writing a parser for Nix and this breaks it. It is also the only occurrence of the syntax.
CC
The should probably be removed.

Discussion:
(optionalAttrs has-owner { owner = head splitted; })); }; } { case = isAttrs; <del> out = let { version = arg.version or "dev"; src = (arg.fetcher or fetcher) (location // (arg.location or {})); }; } </del> <ins> out = { version = arg.version or "dev"; src = (arg.fetcher or fetcher) (location // (arg.location or {})); }; } </ins> { case = isPath; out = { version = "dev" ;
Change:
Project description is an audio processing program with an interactive mode. Also has a LADSPA frontend. Metadata homepage URL: source URL: license: isc platforms: linux

Discussion:
<ins> { lib , stdenv , fetchFromGitHub , pkg-config , fftw , zita-convolver , fftwFloat , libsndfile , ffmpeg , alsa-lib , libao , libmad , ladspaH , libtool , libpulseaudio }: stdenv.mkDerivation rec { pname = "dsp"; version = "1.8"; src = fetchFromGitHub { owner = "bmc0"; repo = "dsp"; rev = "v${version}"; sha256 = "sha256-LTgjpzAGi3oL8l5NcJj1ortKFd3vWDfXHr8YyedAxEE="; }; nativeBuildInputs = [ pkg-config ]; buildInputs = [ fftw zita-convolver fftwFloat libsndfile ffmpeg alsa-lib libao libmad ladspaH libtool libpulseaudio ]; meta = with lib; { homepage = "https://github.com/bmc0/dsp"; description = "An audio processing program with an interactive mode"; license = licenses.isc; maintainers = with maintainers; [ aaronjheng ]; platforms = platforms.linux ++ platforms.darwin; }; } </ins>

inherit (python2Packages) mutagen python wrapPython; }; <ins> dsp = callPackage ../tools/audio/dsp { }; </ins> dirdiff = callPackage ../tools/text/dirdiff { tcl = tcl-8_5; tk = tk-8_5;
Change:
<!-- Note that these are hard requirements --<!-- You can use the "Go to file" functionality on GitHub to find the package Then you can go to the history for this package Find the latest "packagename: oldversion -newversion" commit The "newversion" is the current version of the package --- <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- name: steam-fonts <!-- The current version can be found easily with the same process as above for checking the master branch If an open PR is present for the package, take this version as the current one and link to the PR --current version: "1" desired version: <!-- Search your package here: If no maintainer is listed for your package, tag the person that last updated the package --maintainers: Please tag this issue in your PR. is no longer available under the given URL. current URL: File could be here:

Discussion:
steam-runtime = callPackage ./runtime.nix { }; steam-runtime-wrapped = callPackage ./runtime-wrapped.nix { }; steam = callPackage ./steam.nix { }; <del> steam-fonts = callPackage ./fonts.nix { }; </del> steam-fhsenv = callPackage ./fhsenv.nix { glxinfo-i686 = pkgsi686Linux.glxinfo; steam-runtime-wrapped-i686 =

let commonTargetPkgs = pkgs: with pkgs; [ <del> steamPackages.steam-fonts </del> # Needed for operating system detection until # https://github.com/ValveSoftware/steam-for-linux/issues/5909 is resolved lsb-release

<del> { stdenv, fetchurl, unzip }: stdenv.mkDerivation { pname = "steam-fonts"; version = "1"; src = fetchurl { url = "https://support.steampowered.com/downloads/1974-YFKL-4947/SteamFonts.zip"; sha256 = "1cgygmwich5f1jhhbmbkkpnzasjl8gy36xln76n6r2gjh6awqfx0"; }; nativeBuildInputs = [ unzip ]; sourceRoot = "."; installPhase = '' mkdir -p $out/share/fonts/truetype cp -r *.TTF *.ttf $out/share/fonts/truetype ''; } </del>
Change:
Trying to build clang35 with nixpkgs HEAD () fails. The build log:
Is this still a problem?
Never mind, it has been marked as broken. You guys appear to be the clang experts. Do you have time to look into this?
That's a pretty strange compilation failure. Seems like it would be easy to patch if it came down to that. I'm not sure why that would be happening though.
Would it be fine to merge that patch? It's really ugly but if you aren't developing visibility isn't too important.
There is also the option that the old version of clang has been marked broken for a couple of months so it might be worth dropping it? I'm not sure if there is large value to fixing the old release.
I'm generally in favor of ditching the old in favor of the new if we can get away with it. You have my approval, for what it's worth. It seems fair to drop support for it, but if someone wants it enough to submit a working build for it, then that's fine we could accept that.
I'll see if wants to fix it otherwise I will create a PR to drop it this week.
Clang 3.5 is required for running the Terra compiler, so removing Clang 3.5 does have wider ranging repercussions. I'd be happy for my horrible patch to be merged (I can submit a PR if you want). I've not had any problems personally using this version of Clang. I'm not invested enough to implement a proper fix though :)
Would you be prepared to accept that patch? Or what would your preferred course of action be?
I'd be happy to accept it but I'm not an official collaborator of nixpkgs. On Tue, Aug 2, 2016, 2:05 PM Kevin Cox wrote:
Well if you open a PR there will be at least 2 :+1:s so I would go for it. On Tue, Aug 2, 2016, 18:43 Andrew Kelley wrote:
Interesting. I wonder why they're stuck on such an old version. I wonder if there were JIT regressions.
I've opened the PR

Discussion:
homepage    = http://llvm.org/; license     = stdenv.lib.licenses.bsd3; platforms   = stdenv.lib.platforms.all; <del> broken      = true; </del> }; }

<ins> diff --git a/include/llvm/ADT/IntrusiveRefCntPtr.h b/include/llvm/ADT/IntrusiveRefCntPtr.h index f9df378..9d860ec 100644 --- a/include/llvm/ADT/IntrusiveRefCntPtr.h +++ b/include/llvm/ADT/IntrusiveRefCntPtr.h @@ -134,9 +134,9 @@ public: //===----------------------------------------------------------------------===// template <typename T> class IntrusiveRefCntPtr { +  public: T* Obj; -  public: typedef T element_type; explicit IntrusiveRefCntPtr() : Obj(nullptr) {} </ins>

"-DCAN_TARGET_i386=false" ]; <ins> patches = [ ./fix-15974.patch ]; </ins> postBuild = '' rm -fR $out
Change:
MediaElch works correctly, except it cannot load StreamDetails. In About/Developer, it complains about not finding Steps to reproduce the behavior: or add it in MediaElch and scan some files to «Stream details» tab and try to «load from files» (3bis) You can also open About/Developer modal to see the message about the missing module. MediaElch should find libmediainfo and be able to use it to get info from media. ! NixOS 21.11 with Gnome/Wayland Thanks in advance !
As found by in it works perfectly with

Discussion:
{ lib , mkDerivation , fetchFromGitHub , qmake <ins> , qttools </ins> , curl , ffmpeg , libmediainfo

, qtdeclarative , qtmultimedia , qtsvg <del> , qttools </del> , quazip }:

nativeBuildInputs = [ qmake qttools ]; <del> buildInputs = [ curl libmediainfo libzen ffmpeg qtbase qtdeclarative qtmultimedia qtsvg ]; </del> <ins> buildInputs = [ curl ffmpeg libmediainfo libzen qtbase qtdeclarative qtmultimedia qtsvg ]; </ins> qmakeFlags = [ "USE_EXTERN_QUAZIP=${quazip}/include/quazip5"

substituteInPlace MediaElch.pro --replace "/usr" "$out" ''; <ins> qtWrapperArgs = [ # libmediainfo.so.0 is loaded dynamically "--prefix LD_LIBRARY_PATH : ${libmediainfo}/lib" ]; </ins> meta = with lib; { homepage = "https://mediaelch.de/mediaelch/"; description = "Media Manager for Kodi";
Change:
zandronum fails to build on NixOS 16.03 Pinging maintainer System: 16.03.887. (Emu) Nix version: nix-env (Nix) 1.11.2 Nixpkgs version: 16.03.887.
Could be fallout from the gcc5 update.

Discussion:
preConfigure = '' ln -s ${sqlite-amalgamation}/* sqlite/ <ins> sed -ie 's| restrict| _restrict|g' dumb/include/dumb.h  dumb/src/it/*.c </ins> ''; cmakeFlags =
Change:
zandronum fails to build on NixOS 16.03 Pinging maintainer System: 16.03.887. (Emu) Nix version: nix-env (Nix) 1.11.2 Nixpkgs version: 16.03.887.
Could be fallout from the gcc5 update.

Discussion:
# TODO add plugins having various licenses, see http://www.vamp-plugins.org/download.html <del> { stdenv, fetchurl, alsaLib, bzip2, fftw, jackaudio, libX11, liblo, libmad, libogg, librdf, librdf_raptor, librdf_rasqal, libsamplerate, libsndfile, makeWrapper, pulseaudio, qt4, redland, rubberband, vampSDK </del> <ins> { stdenv, fetchurl, alsaLib, bzip2, fftw, jackaudio, libX11, liblo , libmad, libogg, librdf, librdf_raptor, librdf_rasqal, libsamplerate , libsndfile, makeWrapper, pkgconfig, pulseaudio, qt4, redland , rubberband, vampSDK </ins> }: <del> stdenv.mkDerivation { name = "sonic-visualiser-1.8"; </del> <ins> stdenv.mkDerivation rec { name = "sonic-visualiser-${version}"; version = "1.9"; </ins> src = fetchurl { <del> url = http://downloads.sourceforge.net/sv1/sonic-visualiser-1.8.tar.gz; sha256 = "16ik6q9n92wljvnqcv7hyzb9v3yp3ixxp6df9kasf53fii973dh7"; </del> <ins> url = "http://code.soundsoftware.ac.uk/attachments/download/194/${name}.tar.gz"; sha256 = "00igf7j6s8xfyxnlkbqma0yby9pknxqzy8cmh0aw95ix80cw56fq"; </ins> }; buildInputs = [ libsndfile qt4 fftw /* should be fftw3f ??*/ bzip2 librdf rubberband libsamplerate vampSDK alsaLib librdf_raptor librdf_rasqal redland <ins> pkgconfig </ins> # optional jackaudio # portaudio

description = "View and analyse contents of music audio files"; homepage = http://www.sonicvisualiser.org/; license = "GPLv2"; <del> maintainers = [ stdenv.lib.maintainers.marcweber stdenv.lib.maintainers.goibhniu ]; </del> <ins> maintainers = [ stdenv.lib.maintainers.marcweber stdenv.lib.maintainers.goibhniu ]; </ins> platforms = stdenv.lib.platforms.linux; }; }
Change:
On current master, ipython fails on darwin, causing a lot of regressions in reverse dependencies: <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --cc
I also noticed the same problem when tried to deploy my updated home-manager config. The way I fixed it was this: I noticed pandas uses the same "trick".
Might as well disable the tests instead though? I'm not sure where pbcopy and pbpaste would come from. Maybe they need to be impure buildInputs?
I don't think the real pbcopy should EVER be called by a nix build.
Sure it seems unnecessary. But stubbing them out this way doesn't seem very useful. It seems more honest to disable all tests involving pbpaste/pbcopy. Alternatively we could stub them out with an identical interface and have them store the "clipboard" in a temporary file or something.
As an :
This should be fixed in , which is currently in staging (thanks
Pinning this to improve visibility as people keep opening PRs to fix it.
Why did you unpin this?
Was an accident according to IRC, I was meaning to re-pin it, but we both forgot which issue it was…
I'm sorry, I though I was a nag box that only local to my view, and I clicked an X without looking, and then immediately relalized that it probably wasn't, but I couldn't undo or trace which issue it was.
If the issue is so prominent, we probably should just land a darwin-only fix on master.

Discussion:
, testpath }: <del> buildPythonPackage rec { </del> <ins> buildPythonPackage (rec { </ins> pname = "ipython"; version = "8.0.1"; format = "pyproject";

license = licenses.bsd3; maintainers = with maintainers; [ bjornfor fridh ]; }; <del> } </del> <ins> } // lib.optionalAttrs stdenv.isDarwin { disabledTests = [ "test_clipboard_get" # uses pbpaste ]; }) </ins>
Change:
-To see version with the fixes, 98.0.4758.102 <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --
should patch it for and
Thanks. I forgot to push the update yesterday after I got caught up with other stuff... :o (And the source tarball wasn't available for a while - as it sometimes happens)

Discussion:
{ "stable": { <del> "version": "98.0.4758.80", "sha256": "0wa1jhsw7qrym4x8wxmdvdvbilb8jdv0mizzib2342l61zi6cwn8", "sha256bin64": "0p2bh45ffgfhyh18bxw8fz4691g25s44lxxj4igk8b0bn71v1pgi", </del> <ins> "version": "98.0.4758.102", "sha256": "0gpk13k8pfk65vinlmkg3p7mm0qb8z35psajkxzx0v3n2bllfns1", "sha256bin64": "0pfrakkfqw6ni96s2d0z50mpd63maic9rsc64zd85vh2jkmzskw6", </ins> "deps": { "gn": { "version": "2021-12-07",

} }, "chromedriver": { <del> "version": "98.0.4758.48", "sha256_linux": "1nk3vki803b30mc7ww911l68jfxmpp6mddyq02a3f68893qa2mcf", "sha256_darwin": "09m5vsqfn6qyn3faf2p0dldll6fracjg6z81xzpyp2bh9zp8vk82", "sha256_darwin_aarch64": "04lnbm9wiaz8dlc4qigxakcwghhjc3wvahvl5j80k8agkbv7fdvi" </del> <ins> "version": "98.0.4758.102", "sha256_linux": "054qm8agzj6axvasa7b10cz4jz8zfmmblvvifdnyhn4p3zqx74im", "sha256_darwin": "1m6slaw7lqhlhmjjyaam7c21yyahpi34fv9vldqhra07b5r88dny", "sha256_darwin_aarch64": "0n0lsk75dxv94b2zv25yqysyfbvbqhfql3bbp9abl1jcp00m8s3l" </ins> } }, "beta": {
Change:
, CVSSv3=7.5 (nixos-21.11, nixos-unstable) Bingrep v0.8.5 was discovered to contain a memory allocation failure which can cause a Denial of Service (DoS). Scanned versions: nixos-21.11: ; nixos-unstable: . Cc

Discussion:
rustPlatform.buildRustPackage rec { pname = "bingrep"; <del> version = "0.8.5"; </del> <ins> version = "0.9.0"; </ins> src = fetchFromGitHub { owner = "m4b"; repo = pname; rev = "v${version}"; <del> sha256 = "sha256-ayA3aEidZPa5GJgbbm5K3X2Xgd5Eb6TgUU80Gw/p07w="; </del> <ins> hash = "sha256-M3BYj1SKQKjEqP9cxaVlh7UeleDbcx6JN+UI6Ez+QJ8="; </ins> }; <del> cargoSha256 = "sha256-XcXllex7UEufV5URhH7aqln1tNxwaiAETO3fUKmHf7s="; </del> <ins> cargoHash = "sha256-botAoLNg/qTh+cjPXcjo/Ol2Vktj/c5130k5falEuLY="; </ins> meta = with lib; { description = "Greps through binaries from various OSs and architectures, and colors them";
Change:
, CVSSv3=9.8 (nixos-21.11) CVSSv3=9.8 (nixos-21.11) CVSSv3=8.8 (nixos-21.11) CVSSv3=6.5 (nixos-21.11) CVSSv3=6.1 (nixos-21.11) CVSSv3=5.4 (nixos-21.11) calibre-web is vulnerable to Business Logic Errors Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16. calibre-web is vulnerable to Cross-Site Request Forgery (CSRF) Improper Access Control in Pypi calibreweb prior to 0.6.16. Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16. calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Scanned versions: nixos-21.11: . Cc
Fixed in

Discussion:
<ins> { lib , buildPythonPackage , fetchFromGitHub , ndg-httpsclient , netifaces , pyasn1 , pyopenssl , requests , six , urllib3 }: buildPythonPackage rec { pname = "advocate"; version = "1.0.0"; src = fetchFromGitHub { owner = "JordanMilne"; repo = pname; rev = "v${version}"; sha256 = "sha256-opObkjkad+yrLE2b7DULHjGuNeVhu4fEmSavgA39YPw="; }; propagatedBuildInputs = [ ndg-httpsclient netifaces pyasn1 pyopenssl requests six urllib3 ]; # The tests do network requests, so disabled doCheck = false; pythonImportsCheck = [ "advocate" ]; meta = with lib; { homepage = "https://github.com/JordanMilne/Advocate"; description = "An SSRF-preventing wrapper around Python's requests library"; license = licenses.asl20; maintainers = with maintainers; [ pborzenkov ]; }; } </ins>

python3.pkgs.buildPythonApplication rec { pname = "calibre-web"; <del> version = "0.6.17"; </del> <ins> version = "0.6.18"; </ins> src = fetchFromGitHub { owner = "janeczku"; repo = "calibre-web"; rev = version; <del> sha256 = "sha256-K2va9as+z00txpg/0fR89+kpMzpQSiSSIV489NDs8Bs="; </del> <ins> sha256 = "sha256-KjmpFetNhNM5tL34e/Pn1i3hc86JZglubSMsHZWu198="; </ins> }; propagatedBuildInputs = with python3Packages; [ <ins> advocate </ins> backports_abc flask-babel flask_login

tornado unidecode Wand <ins> werkzeug </ins> ]; patches = [

substituteInPlace setup.cfg  --replace "cps = calibreweb:main" "calibre-web = calibreweb:main"  <del> --replace "flask-wtf>=0.14.2,<0.16.0" "flask-wtf>=0.14.2"  --replace "lxml>=3.8.0,<4.7.0" "lxml>=3.8.0"  --replace "PyPDF3>=1.0.0,<1.0.4" "PyPDF3>=1.0.0"  --replace "requests>=2.11.1,<2.25.0" "requests"  --replace "unidecode>=0.04.19,<1.3.0" "unidecode>=0.04.19" </del> <ins> --replace "Flask>=1.0.2,<2.1.0" "Flask>=1.0.2"  --replace "Flask-Login>=0.3.2,<0.5.1" "Flask-Login>=0.3.2"  --replace "flask-wtf>=0.14.2,<1.1.0" "flask-wtf>=0.14.2"  --replace "lxml>=3.8.0,<4.9.0" "lxml>=3.8.0"  --replace "PyPDF3>=1.0.0,<1.0.7" "PyPDF3>=1.0.0"  --replace "requests>=2.11.1,<2.28.0" "requests"  --replace "unidecode>=0.04.19,<1.4.0" "unidecode>=0.04.19"  --replace "werkzeug<2.1.0" "" </ins> ''; # Upstream repo doesn't provide any tests.

advantage-air = callPackage ../development/python-modules/advantage-air { }; <ins> advocate = callPackage ../development/python-modules/advocate { }; </ins> aemet-opendata = callPackage ../development/python-modules/aemet-opendata { }; aenum = callPackage ../development/python-modules/aenum { };
Change:
, CVSSv3=9.1 (nixos-21.11, nixos-unstable) When running Apache Cassandra with the following configuration: enableuserdefinedfunctions: true enablescripteduserdefinedfunctions: true enableuserdefinedfunctions_threads: false it is possible for an attacker to execute arbitrary code on the host. The attacker would need to have enough permissions to create user defined functions in the cluster to be able to exploit this. Note that this configuration is documented as unsafe, and will continue to be considered unsafe after this CVE. Scanned versions: nixos-21.11: ; nixos-unstable: . Cc
This CVE only affects configurations with a specific option enabled that is not enabled by default.
Upon second reading, a fix is available, which is relevant for those with vulnerable configs.

Discussion:
{ callPackage, ... } @ args: callPackage ./generic.nix (args // { <del> version = "3.0.24"; sha256 = "1yxw4jg9n49dbi1mjdfpxczsznl9m6sxlzkmzjancmjzvj5s6bvz"; </del> <ins> version = "3.0.26"; sha256 = "09wim1w2yizcqpja62jk64fhaw3jgnrgrjlrm4kgmcc3g3bsmw6i"; </ins> generation = "3_0"; })

{ callPackage, ... } @ args: callPackage ./generic.nix (args // { <del> version = "3.11.10"; sha256 = "1wcv0drhb765fda6kkpsxsyfdv4cqf7nqfwc4bimh4c4djap5rxv"; </del> <ins> version = "3.11.12"; sha256 = "16j58l7r47qrfh8q7fm92y935ykgvnbj3qn984c42qda15x92hkw"; </ins> generation = "3_11"; })

$out/LICENSE.txt  $out/NEWS.txt  $out/NOTICE.txt  <del> $out/javadoc  </del> $out/share/doc/${pname}-${version} if [[ -d $out/doc ]]; then
Change:
, CVSSv3=4.3 (nixos-unstable) phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF) Scanned versions: nixos-unstable: . Cc

Discussion:
stdenv.mkDerivation rec { pname = "phoronix-test-suite"; <del> version = "10.8.1"; </del> <ins> version = "10.8.2"; </ins> src = fetchurl { url = "https://phoronix-test-suite.com/releases/${pname}-${version}.tar.gz"; <del> sha256 = "sha256-O1jqaUQZymCNcp+mznLtK0xRr0RHKe77zcbmcCkMqn8="; </del> <ins> sha256 = "sha256-hmgTQ9IEFYMasW72w9HDF+I0XncZJeBpiukgoDqeqrY="; </ins> }; buildInputs = [ php ];
Change:
, CVSSv3=5.5 (nixos-21.11, nixos-unstable) A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: via yrsetconfiguration in yara/libyara/libyara.c, which could cause a Denial of Service. Scanned versions: nixos-21.11: ; nixos-unstable: . Cc

Discussion:
}: stdenv.mkDerivation rec { <del> version = "4.1.3"; </del> pname = "yara"; <ins> version = "4.2.0-rc1"; </ins> src = fetchFromGitHub { owner = "VirusTotal"; <del> repo = "yara"; </del> <ins> repo = pname; </ins> rev = "v${version}"; <del> sha256 = "sha256-7t2KksI3l+wFHqUSw2L4FXepMTJfTow/cTFYA47YBqY="; </del> <ins> hash = "sha256-WcN6ClYO2d+/MdG06RHx3kN0o0WVAY876dJiG7CwJ8w="; </ins> }; <del> nativeBuildInputs = [ autoreconfHook pkg-config ]; </del> <ins> nativeBuildInputs = [ autoreconfHook pkg-config ]; </ins> <del> buildInputs = [ pcre protobufc ] ++ lib.optionals withCrypto [ openssl ] ++ lib.optionals enableMagic [ file ] ++ lib.optionals enableCuckoo [ jansson ] ; </del> <ins> buildInputs = [ pcre protobufc ] ++ lib.optionals withCrypto [ openssl ] ++ lib.optionals enableMagic [ file ] ++ lib.optionals enableCuckoo [ jansson ]; </ins> preConfigure = "./bootstrap.sh";