nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

zip: fix buffer overflow

Browse Source 
Fixes: CVE-2018-13410
(cherry picked from commit d06149fb16)
This commit is contained in:
Julian Stecklina
2026-08-17 13:47:15 +02:00
committed by github-actions[bot]
parent 0304419df8
commit 6f65e77cdb
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
pkgs/by-name/zi/zip/package.nix
View File

@@ -80,6 +80,14 @@ stdenv.mkDerivation (finalAttrs: {
url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/app-arch/zip/files/zip-3.0-zipnote-freeze.patch?id=d37d095fc7a2a9e4a8e904a7bf0f597fe99df85a";
hash = "sha256-EVr7YS3IytnCRjAYUlkg05GA/kaAY9NRFG7uDt0QLAY=";
})
# Fix buffer overflow (CVE-2018-13410).
# See: https://seclists.org/fulldisclosure/2018/Jul/24
(fetchDebianPatch {
inherit (finalAttrs) pname version;
debianRevision = "16";
patch = "buffer-overflow-cve-2018-13410.patch";
hash = "sha256-Hgy0yrBuSX2XWN1PNASQbjiXfyzSScwHQ+o0fv6Sgs4=";
})
]
++ lib.optionals (enableNLS && !stdenv.hostPlatform.isCygwin) [ ./natspec-gentoo.patch.bz2 ];