@@ -2,6 +2,7 @@
22, fetchurl, pkg-config, ncurses, gzip
33, sslSupport ? true, openssl ? null
44, nukeReferences
5+, fetchpatch
56}:
67
78assert sslSupport -> openssl != null;
@@ -22,6 +23,14 @@ stdenv.mkDerivation rec {
2223
2324 hardeningEnable = [ "pie" ];
2425
26+ patches = [
27+ (fetchpatch {
28+ name = "CVE-2021-38165.patch";
29+ url = "https://git.alpinelinux.org/aports/plain/main/lynx/CVE-2021-38165.patch?id=3400945dbbb8a87065360963e4caa0e17d3dcc61";
30+ sha256 = "1aykb9y2g2vdpbbpvjlm4r40x7py2yv6jbywwcqcxrlciqcw4x57";
31+ })
32+ ];
33+
2534 configureFlags = [
2635 "--enable-default-colors"
2736 "--enable-widec"