nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

perlPackages.CatalystAuthenticationCredentialHTTP: 1.018 -> 1.019

Browse Source 
1.019 contains the upstream fix for CVE-2025-40920, which uses
Crypt::SysRandom instead of Data::UUID.

Assisted-by: Claude Code (Claude Opus 5)
Signed-off-by: Stig Palmquist <git@stig.io>
This commit is contained in:
Stig Palmquist
2026-08-09 00:56:50 +00:00
committed by Marcus Ramberg
parent 61d5a4891a
commit d3a1694c8f
1 changed files with 3 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
pkgs/top-level/perl-packages.nix
View File

@@ -3352,18 +3352,11 @@ with self;
CatalystAuthenticationCredentialHTTP = buildPerlModule {
pname = "Catalyst-Authentication-Credential-HTTP";
version = "1.018";
version = "1.019";
src = fetchurl {
url = "mirror://cpan/authors/id/E/ET/ETHER/Catalyst-Authentication-Credential-HTTP-1.018.tar.gz";
hash = "sha256-b6GBbe5kSw216gzBXF5xHcLO0gg2JavOcJZSHx1lpSk=";
url = "mirror://cpan/authors/id/A/AB/ABRAXXA/Catalyst-Authentication-Credential-HTTP-1.019.tar.gz";
hash = "sha256-7IHpbCo/ZYbqQdCI6o6AGx80ABqxnMmmXe+KOMOaW9o=";
};
patches = [
(fetchpatch {
name = "CVE-2025-40920.patch";
url = "https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/commit/ad2c03aad95406db4ce35dfb670664ebde004c18.patch";
hash = "sha256-WI6JwvY6i3KkQO9HbbSvHPX8mgM8I2cF0UTjF1D14T4=";
})
];
buildInputs = [
ModuleBuildTiny
TestException
@@ -3374,7 +3367,6 @@ with self;
CatalystPluginAuthentication
ClassAccessor
CryptSysRandom
DataUUID
StringEscape
];
meta = {