nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-07-22 00:20:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

expat: patch CVE-2019-15903 (from Debian, issue #68818)

Browse Source 
I hope this URL will last for a few months, feel free to find better.
This commit is contained in:
Vladimír Čunát
2019-09-15 12:57:36 +02:00
parent e57969147c
commit 531fe80e12
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
pkgs/development/libraries/expat/default.nix
View File

@@ -15,6 +15,13 @@ stdenv.mkDerivation rec {
sha256 = "1i7bq9sp2k5348dvbfv26bprzv6ka1abf0j5ixjaff9alndm4f19";
stripLen = 1;
})
(fetchpatch {
name = "CVE-2019-15903.patch";
url = "https://sources.debian.org/data/main/e/expat/2.2.7-2/debian/patches/CVE-2019-15903_Deny_internal_entities_closing_the_doctype.patch";
sha256 = "0lv4392ihpk71fgaf1fz03gandqkaqisal8xrzvcqnvnq4mnmwxp";
stripLen = 1;
excludes = [ "tests/runtests.c" "Changes" ];
})
];
outputs = [ "out" "dev" ]; # TODO: fix referrers