From 3e38babbc07f5b9362e34b0dff85d15a9fdf547f Mon Sep 17 00:00:00 2001
From: Robert Scott <code@humanleg.org.uk>
Date: Wed, 24 Mar 2021 23:35:24 +0000
Subject: [PATCH] traefik: add patch for CVE-2021-27375

---
 pkgs/servers/traefik/default.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/pkgs/servers/traefik/default.nix b/pkgs/servers/traefik/default.nix
index 3d5880245e7b..7ba71bdfd348 100644
--- a/pkgs/servers/traefik/default.nix
+++ b/pkgs/servers/traefik/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, buildGoModule, fetchFromGitHub, go-bindata, nixosTests }:
+{ stdenv, buildGoModule, fetchFromGitHub, go-bindata, nixosTests, fetchpatch }:
 
 buildGoModule rec {
   pname = "traefik";
@@ -13,6 +13,14 @@ buildGoModule rec {
 
   vendorSha256 = "0kz7y64k07vlybzfjg6709fdy7krqlv1gkk01nvhs84sk8bnrcvn";
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2021-27375.patch";
+      url = "https://github.com/traefik/traefik/commit/bae28c5f5717ea3a80423f107fefe6948c14b7cd.patch";
+      sha256 = "0gbygblzc6l0rywznbl6in2h5mjk5d0x0aq6pqgag2vrjbyk9kfi";
+    })
+  ];
+
   doCheck = false;
 
   subPackages = [ "cmd/traefik" ];