3e29dd00fc
Fixes CVE-2017-13089, CVE-2017-13090.
61 lines
1.8 KiB
Nix
61 lines
1.8 KiB
Nix
{ stdenv, fetchurl, gettext, pkgconfig, perl
|
|
, libidn2, zlib, pcre, libuuid, libiconv
|
|
, IOSocketSSL, LWP, python3, lzip
|
|
, libpsl ? null
|
|
, openssl ? null }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "wget-1.19.2";
|
|
|
|
src = fetchurl {
|
|
url = "mirror://gnu/wget/${name}.tar.lz";
|
|
sha256 = "01yzal7xm85543x02bij3capnigr063d6c5vc039f8n5s9d796nm";
|
|
};
|
|
|
|
patches = [
|
|
./remove-runtime-dep-on-openssl-headers.patch
|
|
];
|
|
|
|
preConfigure = ''
|
|
patchShebangs doc
|
|
|
|
'' + stdenv.lib.optionalString doCheck ''
|
|
# Work around lack of DNS resolution in chroots.
|
|
for i in "tests/"*.pm "tests/"*.px
|
|
do
|
|
sed -i "$i" -e's/localhost/127.0.0.1/g'
|
|
done
|
|
'' + stdenv.lib.optionalString stdenv.isDarwin ''
|
|
export LIBS="-liconv -lintl"
|
|
'';
|
|
|
|
nativeBuildInputs = [ gettext pkgconfig perl lzip ];
|
|
buildInputs = [ libidn2 libiconv zlib pcre libuuid ]
|
|
++ stdenv.lib.optionals doCheck [ IOSocketSSL LWP python3 ]
|
|
++ stdenv.lib.optional (openssl != null) openssl
|
|
++ stdenv.lib.optional (libpsl != null) libpsl
|
|
++ stdenv.lib.optional stdenv.isDarwin perl;
|
|
|
|
configureFlags =
|
|
if openssl != null then "--with-ssl=openssl" else "--without-ssl";
|
|
|
|
doCheck = false;
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "Tool for retrieving files using HTTP, HTTPS, and FTP";
|
|
|
|
longDescription =
|
|
'' GNU Wget is a free software package for retrieving files using HTTP,
|
|
HTTPS and FTP, the most widely-used Internet protocols. It is a
|
|
non-interactive commandline tool, so it may easily be called from
|
|
scripts, cron jobs, terminals without X-Windows support, etc.
|
|
'';
|
|
|
|
license = licenses.gpl3Plus;
|
|
|
|
homepage = http://www.gnu.org/software/wget/;
|
|
|
|
maintainers = with maintainers; [ fpletz ];
|
|
platforms = platforms.all;
|
|
};
|
|
}
|