jiebi/CodeConvo huggingface dataset:
Change:
is auto-detecting an aarch64 host, and then passing invalid flags when doing an armv7 build on an box Please run and paste the results.
I get the same error building armv7l raspberry pi image on aarch64
I tried:
Can you show precisely how kexec-tools's script is being invoked? It looks like it should do the right thing if both host and target are specified correctly...
is all I have
Doesn't look like that sets target.
All I know is (on aarch64) when I type
It looks like there's a diff between master and release-19.03
Nope that didn't fix it.
Not working on master. Not working on release-18.03
I will try cross-compiling with qemu on X86 today.
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity. Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . on the on .

Discussion:
hardeningDisable = [ "format" "pic" "relro" "pie" ]; <ins> # Prevent kexec-tools from using uname to detect target, which is wrong in # cases like compiling for aarch32 on aarch64 configurePlatforms = [ "build" "host" ]; </ins> configureFlags = [ "BUILD_CC=${buildPackages.stdenv.cc.targetPrefix}cc" ]; depsBuildBuild = [ buildPackages.stdenv.cc ]; buildInputs = [ zlib ];
Change:
I just noticed that my laptop was listening on port 22 on all interfaces even though I configured it to listen only on the loopback interface. When parameter from is set to true, parameter is ignored when configuring systemd socket. Check listening sockets: Instead, the socket should be listening only on .
Thanks you for reporting and fixing this bug.

Discussion:
sockets.sshd = { description = "SSH Socket"; wantedBy = [ "sockets.target" ]; <del> socketConfig.ListenStream = cfg.ports; </del> <ins> socketConfig.ListenStream = if cfg.listenAddresses != [] then map (l: "${l.addr}:${toString (if l.port != null then l.port else 22)}") cfg.listenAddresses else cfg.ports; </ins> socketConfig.Accept = true; };

]; }; <ins> server_localhost_only = { ... }: { services.openssh = { enable = true; listenAddresses = [ { addr = "127.0.0.1"; port = 22; } ]; }; }; server_localhost_only_lazy = { ... }: { services.openssh = { enable = true; startWhenNeeded = true; listenAddresses = [ { addr = "127.0.0.1"; port = 22; } ]; }; }; </ins> client = { ... }: { };

" server_lazy true"); }; <ins> subtest "localhost-only", sub { $server_localhost_only->succeed("ss -nlt | grep '127.0.0.1:22'"); $server_localhost_only_lazy->succeed("ss -nlt | grep '127.0.0.1:22'"); } </ins> ''; })
Change:
, (nixos-unstable) Scanned versions: nixos-unstable: . May contain false positives.

Discussion:
./no-etc-install.patch ./fix-qemu-ga.patch ./9p-ignore-noatime.patch <ins> (fetchpatch { name = "CVE-2019-3812.patch"; url = "https://git.qemu.org/?p=qemu.git;a=patch;h=b05b267840515730dbf6753495d5b7bd8b04ad1c"; sha256 = "03a5vc5wvirbyi5r8kb2r4m2w6f1zmh9bqsr2psh4pblwar0nf55"; }) </ins> ] ++ optional nixosTestRunner ./force-uid0-on-9p.patch ++ optional pulseSupport ./fix-hda-recording.patch ++ optionals stdenv.hostPlatform.isMusl [
Change:
, (nixos-unstable) (nixos-unstable) (nixos-unstable) (nixos-unstable) (nixos-unstable) Scanned versions: nixos-unstable: . May contain false positives.
BTW, I opened
CVE-2014-9638: Fixed upstream at , not released yet. CVE-2014-9639: Fixed upstream at , not released yet. CVE-2014-9640: Fixed upstream at , not released yet. CVE-2015-6749: Fixed upstream at , not released yet. CVE-2017-: Not fixed upstream, though apparently covers this case according to .
I wonder when they manage to release years-old fixes :-/

Discussion:
<del> { lib, stdenv, fetchurl, fetchzip, libogg, libvorbis, libao, pkg-config, curl , speex, flac }: </del> <ins> { lib, stdenv, fetchurl, libogg, libvorbis, libao, pkg-config, curl , speex, flac , autoreconfHook }: stdenv.mkDerivation rec { pname = "vorbis-tools"; version = "1.4.2"; </ins> <del> let debPatch = fetchzip { url = "mirror://debian/pool/main/v/vorbis-tools/vorbis-tools_1.4.0-11.debian.tar.xz"; sha256 = "0kvmd5nslyqplkdb7pnmqj47ir3y5lmaxd12wmrnqh679a8jhcyi"; }; in stdenv.mkDerivation { name = "vorbis-tools-1.4.0"; </del> src = fetchurl { <del> url = "http://downloads.xiph.org/releases/vorbis/vorbis-tools-1.4.0.tar.gz"; sha256 = "1g12bnh5ah08v529y72kfdz5lhvy75iaz7f9jskyby23m9dkk2d3"; </del> <ins> url = "http://downloads.xiph.org/releases/vorbis/vorbis-tools-${version}.tar.gz"; sha256 = "1c7h4ivgfdyygz2hyh6nfibxlkz8kdk868a576qkkjgj5gn78xyv"; </ins> }; <del> postPatch = '' for patch in $(ls "${debPatch}"/patches/*.{diff,patch} | grep -v debian_subdir) do patch -p1 < "$patch" done ''; nativeBuildInputs = [ pkg-config ]; </del> <ins> nativeBuildInputs = [ autoreconfHook pkg-config ]; </ins> buildInputs = [ libogg libvorbis libao curl speex flac ]; meta = with lib; {

volnoti = callPackage ../applications/misc/volnoti { }; <del> vorbis-tools = callPackage ../applications/audio/vorbis-tools { }; </del> <ins> vorbis-tools = callPackage ../applications/audio/vorbis-tools { autoreconfHook = buildPackages.autoreconfHook269; }; </ins> vscode = callPackage ../applications/editors/vscode/vscode.nix { };
Change:
I just realized that the correct ISO 3166-1 country code for the united kingdom, is actualy . before then, I assumed that something in the interaction between nixoskde was broken and it was impossible to update the locale. weirdly enough, requires and not , but it notifies of an error if you select . Similarly, gives you an error if you select instead of instead silently fails and doesn't change the layout if you specify an incorrect code by mistake

Discussion:
type = types.str; default = "us"; description = '' <del> Keyboard layout. </del> <ins> Keyboard layout, or multiple keyboard layouts separated by commas. </ins> ''; };

services.xserver.xkbDir = mkDefault "${pkgs.xkeyboard_config}/etc/X11/xkb"; <ins> system.extraDependencies = [ (pkgs.runCommand "xkb-layouts-exist" { layouts=cfg.layout; } '' missing=() while read -d , layout do [[ -f "${cfg.xkbDir}/symbols/$layout" ]] || missing+=($layout) done <<< "$layouts," if [[ ''${#missing[@]} -eq 0 ]] then touch $out exit 0 fi cat >&2 <<EOF Some of the selected keyboard layouts do not exist: ''${missing[@]} Set services.xserver.layout to the name of an existing keyboard layout (check ${cfg.xkbDir}/symbols for options). EOF exit -1 '') ]; </ins> services.xserver.config = '' Section "ServerFlags"
Change:
Input methods based on do not work as of , at least on my machine as it is now. Upstream, I think the change comes from , which made start using . Other IBus input methods still work (mozc, hangul, Anthy). It feels as if this should have an easy solution amounting to “do what worked for other packages using ”, but I can't work out what it is that they do that makes them work. It's also believable that from is not being run. 1) 2) Switch to an -base input method (example: from ). Then, the input method is not changed, and the rest of the output is: Alternatively: 1) 2) Try to open the preferences for an -based input method. No preferences are shown. The following error message is printed. system: host os: multi-user?: sandbox: version: channels(root): nixpkgs:
So, adding to stops the error message, but preference dialogs still do not show and all of the problems with actually using remain.
How did you install and activate the input method? i18n.inputMethod.enabled = "ibus"; = with ; [ table ]; does not seem to be enough.
Change to (ibus-table acts like a framework within a framework, and provides some actual input methods using it). Then, use -Input Method -Add -More... -Others -IPA-X-SAMPA (and maybe another to see the switching behaviour). Then, switch using the key combination from the preferences (I forget what the default is; maybe Ctrl-space). Expected behaviour from IPA-X-SAMPA includes ↦ and ↦ .
Have you managed to reproduce this problem?
I can confirm your observations in Maybe this could be the culprit:
I've found what appears to be a solution, but it's in some sense weird. Looking at other input methods, they seem to use rather than . Replacing the latter with the former on seems to fix the issue. I have no idea, though, why isn't broken on other platforms. is the new package description.

Discussion:
{ stdenv, fetchFromGitHub , autoreconfHook, docbook2x, pkgconfig , gtk3, dconf, gobject-introspection <del> , ibus, python3 }: </del> <ins> , ibus, python3, wrapGAppsHook }: </ins> stdenv.mkDerivation rec { <del> name = "ibus-table-${version}"; </del> <ins> pname = "ibus-table"; </ins> version = "1.9.21"; src = fetchFromGitHub {

''; buildInputs = [ <del> dconf gtk3 gobject-introspection ibus (python3.withPackages (pypkgs: with pypkgs; [ pygobject3 ])) </del> <ins> dconf gtk3 gobject-introspection ibus (python3.withPackages (pypkgs: with pypkgs; [ pygobject3 (toPythonModule ibus) ])) </ins> ]; <del> nativeBuildInputs = [ autoreconfHook docbook2x pkgconfig python3.pkgs.wrapPython ]; </del> <ins> nativeBuildInputs = [ autoreconfHook docbook2x pkgconfig python3.pkgs.wrapPython wrapGAppsHook ]; </ins> postUnpack = '' substituteInPlace $sourceRoot/engine/Makefile.am  --replace "docbook2man" "docbook2man --sgml" ''; <del> postFixup = "wrapPythonPrograms"; </del> meta = with stdenv.lib; { isIbusEngine = true; description  = "An IBus framework for table-based input methods";
Change:
Regarding the following package: nixpkgs/pkgs/os- The homepage of afuse is now seems to be: The latest version is 0.4.1
says "Development is no longer proceeding on SourceForge and has moved to ."
I updated the build configuration to be afuse 0.4.1 . Can you please test my update?
Hi, sorry for the late reply. Your update seems to work perfectly, thank you.

Discussion:
<del> { stdenv, fetchurl, pkgconfig, fuse }: </del> <ins> { stdenv, fetchurl, pkgconfig, autoreconfHook, fuse }: </ins> stdenv.mkDerivation { <del> name = "afuse-0.2"; </del> <ins> name = "afuse-0.4.1"; </ins> src = fetchurl { <del> url = mirror://sourceforge/afuse/0.2/afuse-0.2.tar.gz; sha256 = "1lj2jdks0bgwxbjqp5a9f7qdry19kar6pg7dh1ml98gapx9siylj"; </del> <ins> url = https://github.com/pcarrier/afuse/archive/v0.4.1.tar.gz; sha256 = "1sfhicmxppkvdd4z9klfn63snb71gr9hff6xij1gzk94xg6m0ycc"; </ins> }; <del> buildInputs = [ pkgconfig fuse ]; </del> <ins> buildInputs = [ autoreconfHook pkgconfig fuse ]; </ins> <del> meta = { </del> <ins> meta = { </ins> description = "Automounter in userspace"; <del> homepage = http://sourceforge.net/projects/afuse; </del> <ins> homepage = https://github.com/pcarrier/afuse; </ins> license = stdenv.lib.licenses.gpl2; maintainers = [ stdenv.lib.maintainers.marcweber ]; platforms = stdenv.lib.platforms.linux;
Change:
Pulseeffects depends on pyqt4 which does not build. Maybe we could build the plugin without pyqt4.
Looks like needs in nativeBuildInputs for qmake. also needs to go in nativeBuildInputs.

Discussion:
<del> { stdenv, fetchurl, pythonPackages, qt4, pkgconfig, lndir, dbus, makeWrapper }: </del> <ins> { stdenv, fetchurl, buildPythonPackage, python, dbus-python, sip, qt4, pkgconfig, lndir, dbus, makeWrapper }: </ins> <del> let </del> <ins> buildPythonPackage rec { </ins> pname = "PyQt-x11-gpl"; version = "4.12"; <del> inherit (pythonPackages) buildPythonPackage python dbus-python sip; in buildPythonPackage { pname = pname; name = pname + "-" + version; version = version; </del> format = "other"; src = fetchurl {

sha256 = "1nw8r88a5g2d550yvklawlvns8gd5slw53yy688kxnsa65aln79w"; }; <del> configurePhase = '' </del> <ins> postPatch = '' </ins> mkdir -p $out lndir ${dbus-python} $out rm -rf "$out/nix-support"

--replace "qt_macx_spec = 'macx-g++'" "qt_macx_spec = 'unsupported/macx-clang-libc++'" # for bootstrapping phase  ''} <del> configureFlagsArray=(  --confirm-license --bindir $out/bin  --destdir $out/${python.sitePackages}  --plugin-destdir $out/lib/qt4/plugins --sipdir $out/share/sip/PyQt4  --dbus=${dbus-python}/include/dbus-1.0 --verbose) ${python.executable} configure.py $configureFlags "''${configureFlagsArray[@]}" </del> <ins> chmod +x configure.py sed -i '1i#!${python.interpreter}' configure.py </ins> ''; <del> nativeBuildInputs = [ pkgconfig ]; buildInputs = [ makeWrapper qt4 lndir dbus ]; </del> <ins> configureScript = "./configure.py"; dontAddPrefix = true; configureFlags = [ "--confirm-license" "--bindir=${placeholder "out"}/bin" "--destdir=${placeholder "out"}/${python.sitePackages}" "--plugin-destdir=${placeholder "out"}/lib/qt4/plugins" "--sipdir=${placeholder "out"}/share/sip/PyQt4" "--dbus=${stdenv.lib.getDev dbus-python}/include/dbus-1.0" "--verbose" ]; nativeBuildInputs = [ pkgconfig lndir makeWrapper qt4 ]; buildInputs = [ qt4 dbus ]; </ins> propagatedBuildInputs = [ sip ];

pyres = callPackage ../development/python-modules/pyres { }; pyqt4 = callPackage ../development/python-modules/pyqt/4.x.nix { <del> pythonPackages = self; </del> inherit (pkgs) pkgconfig; };
Change:
bpython package contains a desktop file which specifies bpython to be installed as . This breaks launching bpython through applications menu. bpython package to launch bpython using the included desktop-file Please run and paste the results. system: host os: multi-user?: sandbox: version: channels(root): nixpkgs:

Discussion:
propagatedBuildInputs = [ curtsies greenlet pygments requests urwid ]; <ins> postInstall = '' substituteInPlace "$out/share/applications/bpython.desktop"  --replace "Exec=/usr/bin/bpython" "Exec=$out/bin/bpython" ''; </ins> checkInputs = [ mock ]; # tests fail: https://github.com/bpython/bpython/issues/712
Change:
When trying to build pytorch the following error occurs. This seems to be related to , seems like is now ignored when building python modules. Try to build pytorch, e.g. nix-build -A python3Packages.pytorch system: host os: multi-user?: sandbox: version: channels(root): channels(user) nixpkgs:
pinging the package maintainers and

Discussion:
# https://github.com/intel/mkl-dnn/commit/8134d346cdb7fe1695a2aa55771071d455fae0bc NIX_CFLAGS_COMPILE = lib.optionals (numpy.blasImplementation == "mkl") [ "-Wno-error=array-bounds" ]; <del> buildInputs = [ </del> <ins> nativeBuildInputs = [ </ins> cmake <del> numpy.blas </del> utillinux which <ins> ]; buildInputs = [ numpy.blas </ins> ] ++ lib.optionals cudaSupport [ cudatoolkit_joined cudnn ] ++ lib.optionals stdenv.isLinux [ numactl ];
Change:
09.
We should patch the call of in using . cc maintainer
it also tries to also call out to at least xclip (on Linux), pbcopy (on Darwin), and less - should we patch these in, too?
I don't think so as bpython shouldn't depend on X.
On Linux it should have in its dependencies. Otherwise is still going to fail. The whole point of being able to run something via is that all dependencies are in, and if you have to know about random run-time dependencies that are not obvious, some advantages are nullified.
However, the whole point of bpython calling which is to make the dependency on xclip optional. It will hence not fail without it.
Fair point, but I prefer to have programs that are fully featured by default. People that run on limited platforms can make a more complicated expression optimized for their use cases.
If you do the PR, I won't reject patching in the path to xclip.
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity. Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . on the on .
I prefered not dragging in and all its dependencies by default and opened On systems with in , this should do the right thing - PTAL.

Discussion:
<ins> From 6f544a5bd43446859754cb80e012af933b843db9 Mon Sep 17 00:00:00 2001 From: Florian Klink <flokli@flokli.de> Date: Wed, 3 Jun 2020 22:05:34 +0200 Subject: [PATCH] clipboard: make which substitutable This is used to detect the presence of xclip and other clipboard handling tools. --- bpython/clipboard.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bpython/clipboard.py b/bpython/clipboard.py index aee429b..f346429 100644 --- a/bpython/clipboard.py +++ b/bpython/clipboard.py @@ -58,7 +58,7 @@ class OSXClipboard(object): def command_exists(command): process = subprocess.Popen( -        ["which", command], stderr=subprocess.STDOUT, stdout=subprocess.PIPE +        ["@which@", command], stderr=subprocess.STDOUT, stdout=subprocess.PIPE ) process.communicate() -- 2.26.2 </ins>

<del> { stdenv, buildPythonPackage, fetchPypi, pygments, greenlet, curtsies, urwid, requests, mock }: </del> <ins> { stdenv , buildPythonPackage , fetchPypi , curtsies , greenlet , mock , pygments , requests , substituteAll , urwid , which }: </ins> buildPythonPackage rec { pname = "bpython";

sha256 = "1764ikgj24jjq46s50apwkydqvy5a13adb2nbszk8kbci6df0v27"; }; <ins> patches = [ (substituteAll { src = ./clipboard-make-which-substitutable.patch; which = "${which}/bin/which"; })]; </ins> propagatedBuildInputs = [ curtsies greenlet pygments requests urwid ]; postInstall = ''
Change:
It looks like that broke the build on aarch64: For example see for a build log. CC
I stumbled onto this when trying to build postgis on master.

Discussion:
CROSS = stdenv.hostPlatform != stdenv.buildPlatform; HOSTCC = "cc"; # Makefile.system only checks defined status <del> NO_BINARY_MODE = toString (stdenv.hostPlatform != stdenv.buildPlatform); </del> <ins> # This seems to be a bug in the openblas Makefile: # on x86_64 it expects NO_BINARY_MODE= # but on aarch64 it expects NO_BINARY_MODE=0 NO_BINARY_MODE = if stdenv.isx86_64 then toString (stdenv.hostPlatform != stdenv.buildPlatform) else stdenv.hostPlatform != stdenv.buildPlatform; </ins> }); doCheck = true;
Change:
I am seeing a new (but similar to ) build problem with crda when using a global libressl override. Things were working fine until maybe a week ago, I think. I am confused, because I can't see anything relevant that has changed lately, but for some reason something about has changed for libressl or m2crypto. Does anyone know what is going on?
- was merged about a week ago; I'm not near a NixOS machine right now, but maybe try reverting that on a fork and see if builds once again?
Oh, interesting. Thanks for the idea! Just to be clear: So, if I'm reading this right, this depends only on , and not . Can your suggestion still be right?
And just tried it. No luck. Doesn't affect any of the derivation paths/hashes.
FWIW: EDIT: See PR below
aaaaaand this is why you make the big bucks. Works great for me! Thanks!

Discussion:
]; patchFlags = "-p0"; <ins> nativeBuildInputs = [ swig2 ]; </ins> buildInputs = [ swig2 openssl ]; propagatedBuildInputs = [ typing ];
Change:
Ever since neovim will no longer build. It seems like the new luarocks is causing collisions between files in different Lua libraries. /cc
hopefully should fix it. sorry for that, I tested the lua updater worked correctly but not neovim.

Discussion:
# to prevent collisions when creating environments # also added -f as it doesn't always exist # don't remove the whole directory as <del> rm -rf $out/lib/luarocks/rocks/manifest </del> <ins> rm -rf $out/lib/luarocks/rocks-${lua.luaversion}/manifest </ins> runHook postInstall '';
Change:
I tried to run using . I noticed two things: was missing. Adding it to fixes that issue. Is supposed to be able to run all appimages? Should we add ? command line arguments aren't passed on to the appimage CC
I haven't decided yet. Common libraries currently not available to appimage-run should be to the list, but I think unreasonable libraries that are only used by a single application shouldn't be . Anything in should be okay to add, which would include . Oh right, I noticed that a while ago, and then forgot to fix it.
That is a useful list. I used a bash monster to look for libraries missing in our :
Of those the following are available in nixpkgs:

Discussion:
krb5 ]; <ins> # list of libraries expected in an appimage environment: # https://github.com/AppImage/pkg2appimage/blob/master/excludelist </ins> multiPkgs = pkgs: with pkgs; [ desktop-file-utils xorg.libXcomposite

xorg.libXft libvdpau alsaLib <ins> harfbuzz e2fsprogs libgpgerror keyutils.lib libjack2 fribidi # libraries not on the upstream include list, but nevertheless expected # by at least one appimage libtool.lib # for Synfigstudio </ins> ]; }; }

runScript = writeScript "appimage-exec" '' #!${runtimeShell} <ins> if [ $# -eq 0 ]; then echo "Usage: $0 FILE [OPTION...]" echo echo 'Options are passed on to the appimage.' echo "If you want to execute a custom command in the appimage's environment, set the APPIMAGE_DEBUG_EXEC environment variable." exit 1 fi </ins> APPIMAGE="$(realpath "$1")" <ins> shift </ins> if [ ! -x "$APPIMAGE" ]; then echo "fatal: $APPIMAGE is not executable"

exec "$APPIMAGE_DEBUG_EXEC" fi <del> exec ./AppRun </del> <ins> exec ./AppRun "$@" </ins> ''; })
Change:
, (nixos-unstable, nixos-19.03, nixos-18.09) Scanned versions: nixos-unstable: ; nixos-19.03: ; nixos-18.09: . May contain false positives.

Discussion:
<del> { fetchurl, stdenv, pkgconfig, libdaemon, dbus, perlPackages </del> <ins> { fetchurl, fetchpatch, stdenv, pkgconfig, libdaemon, dbus, perlPackages </ins> , expat, gettext, intltool, glib, libiconv , gtk3Support ? false, gtk3 ? null , qt4 ? null

sha256 = "0128n7jlshw4bpx0vg8lwj8qwdisjxi7mvniwfafgnkzzrfrpaap"; }; <del> patches = [ ./no-mkdir-localstatedir.patch ]; </del> <ins> patches = [ ./no-mkdir-localstatedir.patch (fetchpatch { name ="CVE-2017-6519-CVE-2018-100084.patch"; url = https://github.com/lathiat/avahi/commit/e111def44a7df4624a4aa3f85fe98054bffb6b4f.patch; sha256 = "06n7b7kz6xcc35c7xjfc1kj3k2llyjgi09nhy0ci32l1bhacjw0q"; }) ]; </ins> buildInputs = [ libdaemon dbus glib expat libiconv ] ++ (with perlPackages; [ perl XMLParser ])
Change:
The VirtualBox ova file runs out of memory pretty quickly. As a backup we should have a swap file to store excess memory, especially for memory hungry programs like Nix.

Discussion:
boot.growPartition = true; boot.loader.grub.device = "/dev/sda"; <ins> swap.swapDevices = { device = "/var/swap"; size = 2048; }; </ins> virtualisation.virtualbox.guest.enable = true; };
Change:
, (nixos-19.03) (nixos-19.03) (nixos-19.03) (nixos-19.03) (nixos-19.03) Scanned versions: nixos-19.03: . May contain false positives.
See also
Can be fixed by bumping the debian patchseries we pull from -6 to -11. Already fixed by the -6 debian patchseries. Fixed, indirectly, by the patches for CVE-2014-9638 and CVE-2014-9639 (above). This CVE was a fulldisclosure publication, so it didn't get triaged and fixed... But it is fixed. Conclusion: we can close this bug by pulling in the new debian patch series from 1.4.0-11 (up from 1.4.0-6). Sending PRs.

Discussion:
let debPatch = fetchzip { <del> url = "mirror://debian/pool/main/v/vorbis-tools/vorbis-tools_1.4.0-6.debian.tar.xz"; sha256 = "1xmmpdvxyr84lazlg23c6ck5ic97ga2rkiqabb1d98ix2zdzyqz5"; </del> <ins> url = "mirror://debian/pool/main/v/vorbis-tools/vorbis-tools_1.4.0-11.debian.tar.xz"; sha256 = "0kvmd5nslyqplkdb7pnmqj47ir3y5lmaxd12wmrnqh679a8jhcyi"; </ins> }; in stdenv.mkDerivation {