Merge #62059: cups: patch CVE-2018-4700 (into release-18.09)

2026-09-30 11:50:06 +00:00 · 2019-06-09 13:52:32 +02:00
parent d37ee9933a 3ebabc95f1
commit 7ba52aed86
1 changed files with 7 additions and 0 deletions
--- a/pkgs/misc/cups/default.nix
+++ b/pkgs/misc/cups/default.nix
@@ -29,6 +29,13 @@ stdenv.mkDerivation rec {
      sha256 = "1ddgdlg9s0l2ph6l8lx1m1lx6k50gyxqi3qiwr44ppq1rxs80ny5";
    })
    ./cups-clean-dirty.patch
+    (fetchpatch {
+      name = "CVE-2018-4700.patch";
+      url = "https://github.com/apple/cups/commit/"
+          + "feb4c62b211bfbd78dc10d737d873439ccdfa58c.patch";
+      sha256 = "1g1626sl4vdwbj9jdzpxmxl8gwyykmxr6i4vr2ba3vn140wnv088";
+      includes = [ "cgi-bin/var.c" ];
+    })
  ];

  postPatch = ''