Merge pull request #168783 from drupol/php/composer-fix-CVE-2022-24828

php.packages.composer: 2.3.3 -> 2.3.5
This commit is contained in:
Maximilian Bosch 2022-04-15 17:46:36 +02:00 committed by GitHub
commit b7afa03354
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,14 +1,14 @@
{ mkDerivation, fetchurl, makeWrapper, unzip, lib, php }:
let
pname = "composer";
version = "2.3.3";
version = "2.3.5";
in
mkDerivation {
inherit pname version;
src = fetchurl {
url = "https://getcomposer.org/download/${version}/composer.phar";
sha256 = "sha256-1pMewrOLQb0K1i+dFXkI5miLrAkbvwvWphnBBnuSJAI=";
sha256 = "sha256-OztaiZwGpGrsKAcnvfUKrRQzT2vEBDbqdrB7ZQhw2PQ=";
};
dontUnpack = true;