about summary refs log tree commit diff
path: root/pkgs/development/libraries/nettle
diff options
context:
space:
mode:
authorVladimír Čunát <v@cunat.cz>2021-03-22 09:46:28 +0100
committerVladimír Čunát <v@cunat.cz>2021-03-22 09:47:02 +0100
commitf688168abb7724c9cff22aa764786e444c8f5573 (patch)
treee5352d4ba48edc82383c32a84809e7ff6ba6f0ce /pkgs/development/libraries/nettle
parent8739248897d0d918d4ca1b860811769f421a7db0 (diff)
nettle: 3.6 -> 3.7.2 (security)
https://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009458.html
It's meant to be fully compatible with 3.6, so we can fast-track it.
Diffstat (limited to 'pkgs/development/libraries/nettle')
-rw-r--r--pkgs/development/libraries/nettle/default.nix4
-rw-r--r--pkgs/development/libraries/nettle/generic.nix2
2 files changed, 3 insertions, 3 deletions
diff --git a/pkgs/development/libraries/nettle/default.nix b/pkgs/development/libraries/nettle/default.nix
index 7c0c6476bd056..343118fb5875f 100644
--- a/pkgs/development/libraries/nettle/default.nix
+++ b/pkgs/development/libraries/nettle/default.nix
@@ -1,10 +1,10 @@
 { callPackage, fetchurl, ... } @ args:
 
 callPackage ./generic.nix (args // rec {
-  version = "3.6";
+  version = "3.7.2";
 
   src = fetchurl {
     url = "mirror://gnu/nettle/nettle-${version}.tar.gz";
-    sha256 = "1wg3sprl0bzy49cmbwwm91vw67hk1x5i3ksdygsciyxz587hsk6j";
+    sha256 = "0qpi1qp3bcvqdsaxy2pzg530db95x8qjahkynxgwvr6dy5760ald";
   };
 })
diff --git a/pkgs/development/libraries/nettle/generic.nix b/pkgs/development/libraries/nettle/generic.nix
index 735fe373533da..edaebc213524e 100644
--- a/pkgs/development/libraries/nettle/generic.nix
+++ b/pkgs/development/libraries/nettle/generic.nix
@@ -16,7 +16,7 @@ stdenv.mkDerivation ({
   nativeBuildInputs = [ gnum4 ];
   propagatedBuildInputs = [ gmp ];
 
-  configureFlags = [ "--enable-fat" ]; # runtime selection of HW-accelerated code
+  configureFlags = [ "--enable-fat" ]; # runtime selection of HW-accelerated code; it's default since 3.7
 
   doCheck = (stdenv.hostPlatform.system != "i686-cygwin" && !stdenv.isDarwin);