diff options
| author | Vladimír Čunát <vcunat@gmail.com> | 2014-12-10 19:20:28 +0100 |
|---|---|---|
| committer | Vladimír Čunát <vcunat@gmail.com> | 2014-12-10 19:20:28 +0100 |
| commit | 225ddcda9a4b6097f3c10ddac3b52aa7ca9a3f97 (patch) | |
| tree | 6820e8a20ffa2b023cb1cb0d440bc4667864ca66 /pkgs/tools/archivers/cpio | |
| parent | be2060f1e73e8162c6d442500329980518200c71 (diff) | |
| download | nixpkgs-225ddcda9a4b6097f3c10ddac3b52aa7ca9a3f97.tar nixpkgs-225ddcda9a4b6097f3c10ddac3b52aa7ca9a3f97.tar.gz nixpkgs-225ddcda9a4b6097f3c10ddac3b52aa7ca9a3f97.tar.bz2 nixpkgs-225ddcda9a4b6097f3c10ddac3b52aa7ca9a3f97.tar.lz nixpkgs-225ddcda9a4b6097f3c10ddac3b52aa7ca9a3f97.tar.xz nixpkgs-225ddcda9a4b6097f3c10ddac3b52aa7ca9a3f97.tar.zst nixpkgs-225ddcda9a4b6097f3c10ddac3b52aa7ca9a3f97.zip | |
cpio: fix CVE-2014-9112 by Fedora patch
Diffstat (limited to 'pkgs/tools/archivers/cpio')
| -rw-r--r-- | pkgs/tools/archivers/cpio/default.nix | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/pkgs/tools/archivers/cpio/default.nix b/pkgs/tools/archivers/cpio/default.nix index 2f3a1b97487..0bfa81cb947 100644 --- a/pkgs/tools/archivers/cpio/default.nix +++ b/pkgs/tools/archivers/cpio/default.nix @@ -1,4 +1,4 @@ -{stdenv, fetchurl}: +{ stdenv, fetchurl, fetchpatch }: stdenv.mkDerivation { name = "cpio-2.11"; @@ -8,7 +8,15 @@ stdenv.mkDerivation { sha256 = "bb820bfd96e74fc6ce43104f06fe733178517e7f5d1cdee553773e8eff7d5bbd"; }; - patches = [ ./no-gets.patch ] ++ stdenv.lib.optional stdenv.isDarwin ./darwin-fix.patch; + patches = [ + ./no-gets.patch + (fetchpatch { + name = "CVE-2014-9112.diff"; + url = "http://pkgs.fedoraproject.org/cgit/cpio.git/plain/cpio-2.11" + + "-CVE-2014-9112.patch?h=f21&id=b475b4d6f31c95e073edc95c742a33a39ef4ec95"; + sha256 = "0c9yrysvpwbmiq7ph84dk6mv46hddiyvkgya1zsmj76n9ypb1b4i"; + }) + ] ++ stdenv.lib.optional stdenv.isDarwin ./darwin-fix.patch; meta = { homepage = http://www.gnu.org/software/cpio/; |