From d345ddaf65bbada63057752ebf6f2efa58817db3 Mon Sep 17 00:00:00 2001 From: Etienne Bruines Date: Wed, 19 Jul 2023 16:47:11 +0200 Subject: [PATCH] nomad_1_5: 1.5.6 -> 1.5.7 https://github.com/hashicorp/nomad/releases/tag/v1.5.7 CVE notes from upstream: acl: Fixed a bug where a namespace ACL policy without label was applied to an unexpected namespace. CVE-2023-3072 [https://github.com/hashicorp/nomad/issues/17908] search: Fixed a bug where ACL did not filter plugin and variable names in search endpoint. CVE-2023-3300 [https://github.com/hashicorp/nomad/issues/17906] sentinel (Enterprise): Fixed a bug where ACL tokens could be exfiltrated via Sentinel logs CVE-2023-3299 [https://github.com/hashicorp/nomad/issues/17907] --- pkgs/applications/networking/cluster/nomad/default.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/applications/networking/cluster/nomad/default.nix b/pkgs/applications/networking/cluster/nomad/default.nix index 46cbafff2ad97..6342a17ef0213 100644 --- a/pkgs/applications/networking/cluster/nomad/default.nix +++ b/pkgs/applications/networking/cluster/nomad/default.nix @@ -77,9 +77,9 @@ rec { nomad_1_5 = generic { buildGoModule = buildGo120Module; - version = "1.5.6"; - sha256 = "sha256-eFzGaTJ9BcK5F10lkTKB3sNaGZsmZ0BbPZI6kT5ZUpo="; - vendorSha256 = "sha256-tOUQr44wUhhCccvj4dCI7fvLMrKaEX7xY7035Q3wU3M="; + version = "1.5.7"; + sha256 = "sha256-IafIC1YVbJFQjC04S2rqjDgB83uSFpMajgsKxfFc/H8="; + vendorSha256 = "sha256-y3WiQuoQn6SdwTgtPWuB6EBtsJC+YleQPzownZQNkno="; passthru.tests.nomad = nixosTests.nomad; preCheck = '' export PATH="$PATH:/build/go/bin"