summary refs log tree commit diff
path: root/pkgs/tools/filesystems
diff options
context:
space:
mode:
authorMartin Weinelt <hexa@darmstadt.ccc.de>2020-06-26 14:46:16 +0200
committerMartin Weinelt <hexa@darmstadt.ccc.de>2020-06-26 15:07:26 +0200
commitf76a83c2c6c679722721567ec62cf56d0fc05331 (patch)
tree6ebcc1766fd36a4597cfab809672d4f8545ecf6d /pkgs/tools/filesystems
parent8828a1d8bc6824ed30f63aa9b7b441b2b0e100b8 (diff)
downloadnixpkgs-f76a83c2c6c679722721567ec62cf56d0fc05331.tar
nixpkgs-f76a83c2c6c679722721567ec62cf56d0fc05331.tar.gz
nixpkgs-f76a83c2c6c679722721567ec62cf56d0fc05331.tar.bz2
nixpkgs-f76a83c2c6c679722721567ec62cf56d0fc05331.tar.lz
nixpkgs-f76a83c2c6c679722721567ec62cf56d0fc05331.tar.xz
nixpkgs-f76a83c2c6c679722721567ec62cf56d0fc05331.tar.zst
nixpkgs-f76a83c2c6c679722721567ec62cf56d0fc05331.zip
ceph: apply patch for CVE-2020-10753
Fixes: CVE-2020-10753
Diffstat (limited to 'pkgs/tools/filesystems')
-rw-r--r--pkgs/tools/filesystems/ceph/default.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/pkgs/tools/filesystems/ceph/default.nix b/pkgs/tools/filesystems/ceph/default.nix
index c2234404d34..65cd19df0fa 100644
--- a/pkgs/tools/filesystems/ceph/default.nix
+++ b/pkgs/tools/filesystems/ceph/default.nix
@@ -106,6 +106,12 @@ in rec {
 
     patches = [
       ./0000-fix-SPDK-build-env.patch
+      (fetchurl {
+        # Remove for Ceph > v15.2.3; https://www.openwall.com/lists/oss-security/2020/06/25/5
+        name = "CVE-2020-10753.patch";
+        url = "https://github.com/ceph/ceph/pull/35773/commits/1524d3c0c5cb11775313ea1e2bb36a93257947f2.patch";
+        sha256 = "1c04kirijp4c8a5pgwqx17dzdnzvd29nl2nr3qdvf4fkqwnlf48s";
+      })
     ];
 
     nativeBuildInputs = [