summary refs log tree commit diff
path: root/pkgs/applications/misc/procmail
diff options
context:
space:
mode:
authorPiotr Bogdan <ppbogdan@gmail.com>2017-12-05 15:42:33 +0000
committerPiotr Bogdan <ppbogdan@gmail.com>2017-12-05 15:42:33 +0000
commit30d80869658f11687dcc4b58d9752a3b7fb15408 (patch)
tree70f1c22cf1ba8eadb402ae99bbd897857b95edd4 /pkgs/applications/misc/procmail
parent5e191223b3e31ebae2c865e525a78f9f207afcb9 (diff)
downloadnixpkgs-30d80869658f11687dcc4b58d9752a3b7fb15408.tar
nixpkgs-30d80869658f11687dcc4b58d9752a3b7fb15408.tar.gz
nixpkgs-30d80869658f11687dcc4b58d9752a3b7fb15408.tar.bz2
nixpkgs-30d80869658f11687dcc4b58d9752a3b7fb15408.tar.lz
nixpkgs-30d80869658f11687dcc4b58d9752a3b7fb15408.tar.xz
nixpkgs-30d80869658f11687dcc4b58d9752a3b7fb15408.tar.zst
nixpkgs-30d80869658f11687dcc4b58d9752a3b7fb15408.zip
procmail: fix CVE-2017-16844
Diffstat (limited to 'pkgs/applications/misc/procmail')
-rw-r--r--pkgs/applications/misc/procmail/default.nix9
1 files changed, 8 insertions, 1 deletions
diff --git a/pkgs/applications/misc/procmail/default.nix b/pkgs/applications/misc/procmail/default.nix
index b62c6b77cac..cd3a46ab09b 100644
--- a/pkgs/applications/misc/procmail/default.nix
+++ b/pkgs/applications/misc/procmail/default.nix
@@ -3,7 +3,14 @@
 stdenv.mkDerivation {
   name = "procmail-3.22";
 
-  patches = [ ./CVE-2014-3618.patch ];
+  patches = [
+    ./CVE-2014-3618.patch
+    (fetchurl {
+      url = https://sources.debian.org/data/main/p/procmail/3.22-26/debian/patches/30;
+      sha256 = "11zmz1bj0v9pay3ldmyyg7473b80h89gycrhndsgg9q50yhcqaaq";
+      name = "CVE-2017-16844";
+    })
+  ];
 
   # getline is defined differently in glibc now. So rename it.
   # Without the .PHONY target "make install" won't install anything on Darwin.