summary refs log tree commit diff
path: root/pkgs/development/libraries/libtomcrypt
diff options
context:
space:
mode:
authorMarkus S. Wamser <github-dev@mail2013.wamser.eu>2020-06-26 00:01:00 +0200
committerMarkus S. Wamser <github-dev@mail2013.wamser.eu>2020-06-26 00:01:00 +0200
commit5f16eca72b89d85a30d8ae5d5b919ed1cb206da4 (patch)
tree3eabf15e8af34dc15ad27ff8f721b22bbea3b326 /pkgs/development/libraries/libtomcrypt
parent860ab67458a4403dc2faa169da51d5dc3911d83e (diff)
downloadnixpkgs-5f16eca72b89d85a30d8ae5d5b919ed1cb206da4.tar
nixpkgs-5f16eca72b89d85a30d8ae5d5b919ed1cb206da4.tar.gz
nixpkgs-5f16eca72b89d85a30d8ae5d5b919ed1cb206da4.tar.bz2
nixpkgs-5f16eca72b89d85a30d8ae5d5b919ed1cb206da4.tar.lz
nixpkgs-5f16eca72b89d85a30d8ae5d5b919ed1cb206da4.tar.xz
nixpkgs-5f16eca72b89d85a30d8ae5d5b919ed1cb206da4.tar.zst
nixpkgs-5f16eca72b89d85a30d8ae5d5b919ed1cb206da4.zip
libtomcrypt: fix CVE-2019-17362 (security)
Diffstat (limited to 'pkgs/development/libraries/libtomcrypt')
-rw-r--r--pkgs/development/libraries/libtomcrypt/default.nix10
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/development/libraries/libtomcrypt/default.nix b/pkgs/development/libraries/libtomcrypt/default.nix
index d9e9df59324..4587701011d 100644
--- a/pkgs/development/libraries/libtomcrypt/default.nix
+++ b/pkgs/development/libraries/libtomcrypt/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl, libtool }:
+{ stdenv, fetchurl, fetchpatch, libtool }:
 
 stdenv.mkDerivation rec {
   pname = "libtomcrypt";
@@ -9,6 +9,14 @@ stdenv.mkDerivation rec {
     sha256 = "113vfrgapyv72lalhd3nkw7jnks8az0gcb5wqn9hj19nhcxlrbcn";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2019-17362.patch";
+      url = "https://github.com/libtom/libtomcrypt/pull/508/commits/25c26a3b7a9ad8192ccc923e15cf62bf0108ef94.patch";
+      sha256 = "1bwsj0pwffxw648wd713z3xcyrbxc2z646psrzp38ys564fjh5zf";
+    })
+  ];
+
   nativeBuildInputs = [ libtool ];
 
   postPatch = ''