summary refs log tree commit diff
path: root/pkgs/servers/rpcbind
diff options
context:
space:
mode:
authoradisbladis <adis@blad.is>2017-11-28 02:12:21 +0800
committeradisbladis <adis@blad.is>2017-11-28 02:12:21 +0800
commitac7ec054f1694f3890e776195dc5c7c9501ae59f (patch)
treea54f419342c8358991d627ed80e21230143b3eef /pkgs/servers/rpcbind
parentc0c503ca685f5a70390c8f2bb850e8b9690fab17 (diff)
downloadnixpkgs-ac7ec054f1694f3890e776195dc5c7c9501ae59f.tar
nixpkgs-ac7ec054f1694f3890e776195dc5c7c9501ae59f.tar.gz
nixpkgs-ac7ec054f1694f3890e776195dc5c7c9501ae59f.tar.bz2
nixpkgs-ac7ec054f1694f3890e776195dc5c7c9501ae59f.tar.lz
nixpkgs-ac7ec054f1694f3890e776195dc5c7c9501ae59f.tar.xz
nixpkgs-ac7ec054f1694f3890e776195dc5c7c9501ae59f.tar.zst
nixpkgs-ac7ec054f1694f3890e776195dc5c7c9501ae59f.zip
rpcbind: Patch for CVE-2017-8779
Diffstat (limited to 'pkgs/servers/rpcbind')
-rw-r--r--pkgs/servers/rpcbind/default.nix7
1 files changed, 6 insertions, 1 deletions
diff --git a/pkgs/servers/rpcbind/default.nix b/pkgs/servers/rpcbind/default.nix
index 9e211b8df74..6b3d60bcaea 100644
--- a/pkgs/servers/rpcbind/default.nix
+++ b/pkgs/servers/rpcbind/default.nix
@@ -1,4 +1,4 @@
-{ fetchurl, stdenv, pkgconfig, libnsl, libtirpc
+{ fetchurl, stdenv, pkgconfig, libnsl, libtirpc, fetchpatch
 , useSystemd ? true, systemd }:
 
 stdenv.mkDerivation rec {
@@ -12,6 +12,11 @@ stdenv.mkDerivation rec {
 
   patches = [
     ./sunrpc.patch
+    (fetchpatch {
+      name = "CVE-2017-8779.patch";
+      url = "https://raw.githubusercontent.com/guidovranken/rpcbomb/e6da9e489aa8ad000b0ad5ac9abc5b4eefc3a769/rpcbind_patch.txt";
+      sha256 = "0w231w8fxihgrn526np078j3vbj3ylvjvxjmfpjvqhga5zg821ab";
+    })
   ];
 
   buildInputs = [ libnsl libtirpc ]