ilyakooo0/nixpkgs
1
0
Fork 0
mirror of https://github.com/ilyakooo0/nixpkgs.git synced 2024-09-23 21:57:52 +03:00
Code Issues Projects Releases Wiki Activity

Merge pull request #209481 from risicle/ris-libconfuse-CVE-2022-40320

Browse Source 
libconfuse: add patch for CVE-2022-40320
This commit is contained in:
Thomas Gerbet 2023-01-08 17:05:40 +01:00 committed by GitHub
commit 4abd1a9ecd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
pkgs/development/libraries/libconfuse/default.nix
View File

@ -1,4 +1,10 @@
{ lib, stdenv, fetchFromGitHub, autoreconfHook, flex }:
{ lib
, stdenv
, fetchFromGitHub
, fetchpatch
, autoreconfHook
, flex
}:
stdenv.mkDerivation rec {
pname = "libconfuse";
@ -11,6 +17,18 @@ stdenv.mkDerivation rec {
owner = "martinh";
};
patches = [
(fetchpatch {
name = "CVE-2022-40320.patch";
urls = [
"https://sources.debian.org/data/main/libc/libconfuse/3.3-3/debian/patches/CVE-2022-40320.patch"
# files on sources.debian.org can disappear
"https://web.archive.org/web/20230107133212/https://sources.debian.org/data/main/libc/libconfuse/3.3-3/debian/patches/CVE-2022-40320.patch"
];
sha256 = "sha256-ftfE9JFz4nyRSOb2xHb9BAtgWn5Yv2WLm4RegDLtiBw=";
})
];
postPatch = ''
substituteInPlace tests/Makefile.am \
--replace 'TESTS += empty_string' "" \