cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

Merge pull request #224804 from 06kellyjac/deno-patch

Browse source 
deno: fix CVE-2023-28446
This commit is contained in:
Mario Rodas 2023-04-06 11:51:29 -05:00 committed by GitHub
commit 3cde9b5e4d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
pkgs/development/web/deno/default.nix
View file

@ -2,6 +2,7 @@
, lib
, callPackage
, fetchFromGitHub
, fetchpatch
, rustPlatform
, installShellFiles
, tinycc
@ -23,9 +24,18 @@ rustPlatform.buildRustPackage rec {
owner = "denoland";
repo = pname;
rev = "v${version}";
sha256 = "sha256-0S5BSXWnv4DMcc8cijRQx6NyDReg5aJJT65TeNFlkkw=";
hash = "sha256-0S5BSXWnv4DMcc8cijRQx6NyDReg5aJJT65TeNFlkkw=";
};
cargoSha256 = "sha256-DZICb85B9pWT8bV06FYjS604RdomB5nqtR55R00CT8c=";
cargoHash = "sha256-7Xfnc91yQiAwAF5fvtiwnELUDb7LJeye3GtXNzYkUo8=";
cargoPatches = [
# resolved in 1.31.2
(fetchpatch {
name = "CVE-2023-28446.patch";
url = "https://github.com/denoland/deno/commit/78d430103a8f6931154ddbbe19d36f3b8630286d.patch";
hash = "sha256-kXwr9wWxk1OaaubCr8pfmSp3TrJMQkbAg72nIHp/seA=";
})
];
postPatch = ''
# upstream uses lld on aarch64-darwin for faster builds