mirror of
https://github.com/ilyakooo0/nixpkgs.git
synced 2024-12-24 20:02:58 +03:00
rzip: fix CVE-2017-8364
This commit is contained in:
parent
e15d6e1b3c
commit
4b759a0011
@ -1,4 +1,4 @@
|
||||
{stdenv, fetchurl, bzip2}:
|
||||
{stdenv, fetchurl, fetchpatch, bzip2}:
|
||||
|
||||
stdenv.mkDerivation {
|
||||
name = "rzip-2.1";
|
||||
@ -8,6 +8,14 @@ stdenv.mkDerivation {
|
||||
};
|
||||
buildInputs = [ bzip2 ];
|
||||
|
||||
patches = [
|
||||
(fetchpatch {
|
||||
name = "CVE-2017-8364-fill-buffer.patch";
|
||||
url = https://sources.debian.net/data/main/r/rzip/2.1-4.1/debian/patches/80-CVE-2017-8364-fill-buffer.patch;
|
||||
sha256 = "0jcjlx9ksdvxvjyxmyzscx9ar9992iy5icw0sc3n0p09qi4d6x1r";
|
||||
})
|
||||
];
|
||||
|
||||
meta = {
|
||||
homepage = http://rzip.samba.org/;
|
||||
description = "Compression program";
|
||||
|
Loading…
Reference in New Issue
Block a user