summary refs log tree commit diff
path: root/pkgs/tools/security/opensc
diff options
context:
space:
mode:
authorJustin Humm <justin.humm@posteo.de>2019-05-24 15:58:12 +0200
committerFrederik Rietdijk <freddyrietdijk@fridh.nl>2019-05-25 08:29:04 +0200
commitad6a5824ee9d2ad6d4c7ba8d3c6d25b4852410b8 (patch)
tree15fdc289ce9c00a4168669bdfe6102fb2ad9ced4 /pkgs/tools/security/opensc
parent99ece30213d384d024227248c19b2976ca57b0a4 (diff)
downloadnixpkgs-ad6a5824ee9d2ad6d4c7ba8d3c6d25b4852410b8.tar
nixpkgs-ad6a5824ee9d2ad6d4c7ba8d3c6d25b4852410b8.tar.gz
nixpkgs-ad6a5824ee9d2ad6d4c7ba8d3c6d25b4852410b8.tar.bz2
nixpkgs-ad6a5824ee9d2ad6d4c7ba8d3c6d25b4852410b8.tar.lz
nixpkgs-ad6a5824ee9d2ad6d4c7ba8d3c6d25b4852410b8.tar.xz
nixpkgs-ad6a5824ee9d2ad6d4c7ba8d3c6d25b4852410b8.tar.zst
nixpkgs-ad6a5824ee9d2ad6d4c7ba8d3c6d25b4852410b8.zip
opensc: add patch for CVE-2019-6502
Closes #61957
Diffstat (limited to 'pkgs/tools/security/opensc')
-rw-r--r--pkgs/tools/security/opensc/default.nix10
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/tools/security/opensc/default.nix b/pkgs/tools/security/opensc/default.nix
index f14a08c8174..769b87fa8d3 100644
--- a/pkgs/tools/security/opensc/default.nix
+++ b/pkgs/tools/security/opensc/default.nix
@@ -1,5 +1,5 @@
 { stdenv, fetchFromGitHub, autoreconfHook, pkgconfig, zlib, readline, openssl
-, libiconv, pcsclite, libassuan, libXt
+, libiconv, pcsclite, libassuan, libXt, fetchpatch
 , docbook_xsl, libxslt, docbook_xml_dtd_412
 , Carbon, PCSC, buildPackages
 , withApplePCSC ? stdenv.isDarwin
@@ -16,6 +16,14 @@ stdenv.mkDerivation rec {
     sha256 = "10575gb9l38cskq7swyjp0907wlziyxg4ppq33ndz319dsx69d87";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2019-6502.patch";
+      url = "https://github.com/OpenSC/OpenSC/commit/0d7967549751b7032f22b437106b41444aff0ba9.patch";
+      sha256 = "1y42lmz8i9w99hgpakdncnv8f94cqjfabz0v4xg6wfz9akl3ff7d";
+    })
+  ];
+
   nativeBuildInputs = [ pkgconfig autoreconfHook ];
   buildInputs = [
     zlib readline openssl libassuan