This contribution pulls in the patch fixing CVE-2020-35476. The fix is also included in the 2.4.1 version but the upgrade requires more work: a tarball with all the third party tools is no more provided. The build process attempts to get them during the build which fail. https://github.com/advisories/GHSA-hv53-q76c-7f8c |
||
---|---|---|
.. | ||
default.nix |