From 3ebabc95f11995512e283e6a3023499845e8014c Mon Sep 17 00:00:00 2001
From: Robert Scott <code@humanleg.org.uk>
Date: Sat, 25 May 2019 12:34:06 +0100
Subject: [PATCH] cups: add patch for CVE-2018-4700

---
 pkgs/misc/cups/default.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pkgs/misc/cups/default.nix b/pkgs/misc/cups/default.nix
index 38ad73d01600..9e4ed8b991ef 100644
--- a/pkgs/misc/cups/default.nix
+++ b/pkgs/misc/cups/default.nix
@@ -29,6 +29,13 @@ stdenv.mkDerivation rec {
       sha256 = "1ddgdlg9s0l2ph6l8lx1m1lx6k50gyxqi3qiwr44ppq1rxs80ny5";
     })
     ./cups-clean-dirty.patch
+    (fetchpatch {
+      name = "CVE-2018-4700.patch";
+      url = "https://github.com/apple/cups/commit/"
+          + "feb4c62b211bfbd78dc10d737d873439ccdfa58c.patch";
+      sha256 = "1g1626sl4vdwbj9jdzpxmxl8gwyykmxr6i4vr2ba3vn140wnv088";
+      includes = [ "cgi-bin/var.c" ];
+    })
   ];
 
   postPatch = ''