diff options
| author | Vladimír Čunát <vcunat@gmail.com> | 2014-03-29 20:24:13 +0100 |
|---|---|---|
| committer | Vladimír Čunát <vcunat@gmail.com> | 2014-03-29 20:24:13 +0100 |
| commit | e50a76a4693a9f64c028e47c336b68cf36a50e7b (patch) | |
| tree | f105921e83b7ce6b6c49e279cc9da4f9a38126e2 /pkgs | |
| parent | 22c04a2fe121edfdc7950fea293c0ed2eea769e7 (diff) | |
| download | nixpkgs-e50a76a4693a9f64c028e47c336b68cf36a50e7b.tar nixpkgs-e50a76a4693a9f64c028e47c336b68cf36a50e7b.tar.gz nixpkgs-e50a76a4693a9f64c028e47c336b68cf36a50e7b.tar.bz2 nixpkgs-e50a76a4693a9f64c028e47c336b68cf36a50e7b.tar.lz nixpkgs-e50a76a4693a9f64c028e47c336b68cf36a50e7b.tar.xz nixpkgs-e50a76a4693a9f64c028e47c336b68cf36a50e7b.tar.zst nixpkgs-e50a76a4693a9f64c028e47c336b68cf36a50e7b.zip | |
openssh: fix CVE-2014-2653 by a Debian patch
Diffstat (limited to 'pkgs')
| -rw-r--r-- | pkgs/tools/networking/openssh/default.nix | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/pkgs/tools/networking/openssh/default.nix b/pkgs/tools/networking/openssh/default.nix index b0d1dba891b..6926b9aa82a 100644 --- a/pkgs/tools/networking/openssh/default.nix +++ b/pkgs/tools/networking/openssh/default.nix @@ -31,7 +31,17 @@ stdenv.mkDerivation rec { export NIX_LDFLAGS="$NIX_LDFLAGS -lgcc_s" ''; - patches = [ ./locale_archive.patch ]; + patches = [ + ./locale_archive.patch + (fetchurl { + name = "CVE-2014-2653.patch"; + url = "http://anonscm.debian.org/gitweb/?p=pkg-ssh/openssh.git;a=blobdiff_plain;" + + "f=sshconnect.c;h=324f5e0a396a4da9885d121bbbef87f6ccf2b149;" + + "hp=87c3770c0fd5c7ff41227c45b4528985eaea54a6;hb=63d5fa28e16d96db6bac2dbe3fcecb65328f8966;" + + "hpb=9cbb60f5e4932634db04c330c88abc49cc5567bd"; + sha256 = "160c434igl2r8q4cavhdlwvnbqizx444sjrhg98f997pyhz524h9"; + }) + ]; buildInputs = [ zlib openssl libedit pkgconfig pam ] ++ stdenv.lib.optional withKerberos [ kerberos ]; |