summary refs log tree commit diff
path: root/pkgs/servers/rpcbind
diff options
context:
space:
mode:
authorGraham Christensen <graham@grahamc.com>2016-11-30 19:18:08 -0500
committerGraham Christensen <graham@grahamc.com>2016-11-30 19:18:08 -0500
commit7e40e89273df9ed15dc563401cd7c1343bcd0188 (patch)
tree5a7988231b1a88dcb848d5042d02ffbc320955a9 /pkgs/servers/rpcbind
parentc97fda0bcf925426a6d57d300deca4da2feedaa2 (diff)
downloadnixpkgs-7e40e89273df9ed15dc563401cd7c1343bcd0188.tar
nixpkgs-7e40e89273df9ed15dc563401cd7c1343bcd0188.tar.gz
nixpkgs-7e40e89273df9ed15dc563401cd7c1343bcd0188.tar.bz2
nixpkgs-7e40e89273df9ed15dc563401cd7c1343bcd0188.tar.lz
nixpkgs-7e40e89273df9ed15dc563401cd7c1343bcd0188.tar.xz
nixpkgs-7e40e89273df9ed15dc563401cd7c1343bcd0188.tar.zst
nixpkgs-7e40e89273df9ed15dc563401cd7c1343bcd0188.zip
rpcbind: patch for CVE-2015-7236
Diffstat (limited to 'pkgs/servers/rpcbind')
-rw-r--r--pkgs/servers/rpcbind/default.nix8
1 files changed, 6 insertions, 2 deletions
diff --git a/pkgs/servers/rpcbind/default.nix b/pkgs/servers/rpcbind/default.nix
index ba2e1447ffe..744763c43f1 100644
--- a/pkgs/servers/rpcbind/default.nix
+++ b/pkgs/servers/rpcbind/default.nix
@@ -1,10 +1,10 @@
-{ fetchurl, stdenv, pkgconfig, libtirpc
+{ fetchurl, fetchpatch, stdenv, pkgconfig, libtirpc
 , useSystemd ? true, systemd }:
 
 let version = "0.2.3";
 in stdenv.mkDerivation rec {
   name = "rpcbind-${version}";
-  
+
   src = fetchurl {
     url = "mirror://sourceforge/rpcbind/${version}/${name}.tar.bz2";
     sha256 = "0yyjzv4161rqxrgjcijkrawnk55rb96ha0pav48s03l2klx855wq";
@@ -13,6 +13,10 @@ in stdenv.mkDerivation rec {
   patches = [
     ./sunrpc.patch
     ./0001-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
+    (fetchpatch {
+      url = "https://sources.debian.net/data/main/r/rpcbind/0.2.3-0.5/debian/patches/CVE-2015-7236.patch";
+      sha256 = "1wsv5j8f5djzxr11n4027x107cam1avmx9w34g6l5d9s61j763wq";
+    })
   ];
 
   buildInputs = [ libtirpc ]