From c46889ea4227418fb31a0562626ffcab20d90890 Mon Sep 17 00:00:00 2001 From: Pascal Wittmann Date: Mon, 8 Jun 2015 13:55:20 +0200 Subject: ipsec-tools: apply debians patch to fix CVE-2015-4047 --- pkgs/os-specific/linux/ipsec-tools/default.nix | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'pkgs/os-specific/linux/ipsec-tools/default.nix') diff --git a/pkgs/os-specific/linux/ipsec-tools/default.nix b/pkgs/os-specific/linux/ipsec-tools/default.nix index a6042b1e33b..fc3b0500fed 100644 --- a/pkgs/os-specific/linux/ipsec-tools/default.nix +++ b/pkgs/os-specific/linux/ipsec-tools/default.nix @@ -16,7 +16,8 @@ stdenv.mkDerivation rec { buildInputs = [ readline openssl flex kerberos pam ]; - patches = [ ./dont-create-localstatedir-during-install.patch ]; + patches = [ ./dont-create-localstatedir-during-install.patch + ./CVE-2015-4047.patch ]; # fix build with newer gcc versions preConfigure = ''substituteInPlace configure --replace "-Werror" "" ''; -- cgit 1.4.1