mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-09-28 02:40:50 +00:00
lldpd: add patch for CVE-2020-27827
These are the two patches listed here: https://lldpd.github.io/security.html Fix #120396 Signed-off-by: Vincent Bernat <vincent@bernat.ch>
This commit is contained in:
@@ -1,5 +1,6 @@
|
||||
{ stdenv, lib, fetchurl, pkgconfig, removeReferencesTo
|
||||
, libevent, readline, net-snmp, openssl
|
||||
, fetchpatch
|
||||
}:
|
||||
|
||||
stdenv.mkDerivation rec {
|
||||
@@ -11,6 +12,20 @@ stdenv.mkDerivation rec {
|
||||
sha256 = "16fbqrs3l976gdslx647nds8x7sz4h5h3h4l4yxzrayvyh9b5lrd";
|
||||
};
|
||||
|
||||
patches = [
|
||||
(fetchpatch {
|
||||
name = "CVE-2020-27827-1.patch";
|
||||
url = "https://github.com/lldpd/lldpd/commit/a8d3c90feca548fc0656d95b5d278713db86ff61.patch";
|
||||
sha256 = "135hnq3wzga3zpmpy65jyyqyn67id9di1y3kv2qczp5jdgxfx9cy";
|
||||
})
|
||||
(fetchpatch {
|
||||
name = "CVE-2020-27827-2.patch";
|
||||
url = "https://github.com/lldpd/lldpd/commit/7d60bf30effc4c88f17f3d58ecaa72479f16d4be.patch";
|
||||
sha256 = "0b2j8sn2z7p9250iki7rx88f9cdrxv5by7cbmmmwa0h4c5cb6b61";
|
||||
excludes = [ "NEWS" ];
|
||||
})
|
||||
];
|
||||
|
||||
configureFlags = [
|
||||
"--localstatedir=/var"
|
||||
"--enable-pie"
|
||||
|
||||
Reference in New Issue
Block a user