summary refs log tree commit diff
path: root/pkgs/tools/security/clamav
diff options
context:
space:
mode:
authorAndreas Rammhold <andreas@rammhold.de>2017-11-21 21:36:00 +0100
committerAndreas Rammhold <andreas@rammhold.de>2017-11-21 21:39:29 +0100
commitf01acd4cd57e1c9fc30323edf193b72db391eb0b (patch)
tree220a831fe6c511062379858bb45acb8448cbd102 /pkgs/tools/security/clamav
parent28f9262092d9a475c6c048f9d1aa460e97be2268 (diff)
downloadnixpkgs-f01acd4cd57e1c9fc30323edf193b72db391eb0b.tar
nixpkgs-f01acd4cd57e1c9fc30323edf193b72db391eb0b.tar.gz
nixpkgs-f01acd4cd57e1c9fc30323edf193b72db391eb0b.tar.bz2
nixpkgs-f01acd4cd57e1c9fc30323edf193b72db391eb0b.tar.lz
nixpkgs-f01acd4cd57e1c9fc30323edf193b72db391eb0b.tar.xz
nixpkgs-f01acd4cd57e1c9fc30323edf193b72db391eb0b.tar.zst
nixpkgs-f01acd4cd57e1c9fc30323edf193b72db391eb0b.zip
clamav: apply patch for CVE-2017-6420
Details at [1].

[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6420
Diffstat (limited to 'pkgs/tools/security/clamav')
-rw-r--r--pkgs/tools/security/clamav/default.nix10
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/tools/security/clamav/default.nix b/pkgs/tools/security/clamav/default.nix
index 83a2a1fd85e..506d6fc3fce 100644
--- a/pkgs/tools/security/clamav/default.nix
+++ b/pkgs/tools/security/clamav/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl, zlib, bzip2, libiconv, libxml2, openssl, ncurses, curl
+{ stdenv, fetchurl, fetchpatch, zlib, bzip2, libiconv, libxml2, openssl, ncurses, curl
 , libmilter, pcre }:
 
 stdenv.mkDerivation rec {
@@ -10,6 +10,14 @@ stdenv.mkDerivation rec {
     sha256 = "0yh2q318bnmf2152g2h1yvzgqbswn0wvbzb8p4kf7v057shxcyqn";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2017-6420.patch";
+      url = "https://github.com/vrtadmin/clamav-devel/commit/dfc00cd3301a42b571454b51a6102eecf58407bc.patch";
+      sha256 = "08w3p3a4pmi0cmcmyxkagsbn3g0jgx1jqlc34pn141x0qzrlqr60";
+    })
+  ];
+
   # don't install sample config files into the absolute sysconfdir folder
   postPatch = ''
     substituteInPlace Makefile.in --replace ' etc ' ' '