nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-09-28 19:00:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

[Backport staging-26.05] sudo: fix CVE-2026-96512 (#566504)

Browse Source
This commit is contained in:
Martin Weinelt
2026-09-24 13:59:22 +00:00
committed by GitHub
parent e926f31f4c a905e4a4c1
commit 2a121edd01
1 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
pkgs/by-name/su/sudo/package.nix
View File

@@ -1,6 +1,7 @@
{
lib,
stdenv,
fetchpatch2,
fetchurl,
buildPackages,
coreutils,
@@ -31,9 +32,22 @@ stdenv.mkDerivation (finalAttrs: {
prePatch = ''
# do not set sticky bit in nix store
substituteInPlace src/Makefile.in --replace 04755 0755
substituteInPlace src/Makefile.in --replace-fail 04755 0755
'';
patches = [
(fetchpatch2 {
name = "CVE-2026-96512_1.patch";
url = "https://github.com/sudo-project/sudo/commit/db669167ca599f2a94cd8a4c5fae9e473c81a2fd.patch?full_index=1";
hash = "sha256-VqfWo/z7CQCtgefzE8xAehjgKn2h1It6GkEt5BUn/OQ=";
})
(fetchpatch2 {
name = "CVE-2026-96512_2.patch";
url = "https://github.com/sudo-project/sudo/commit/1820a349687522f51023d1ae5925125f59679a8c.patch?full_index=1";
hash = "sha256-guOdOaIqmXAftpj9gpsRFaAS5g2cS4j7o5DQFqyLZv8=";
})
];
configureFlags = [
"--with-env-editor"
"--with-editor=/run/current-system/sw/bin/nano"