nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-09-28 02:40:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

libarchive: apply patch for CVE-2024-26256 and ZIP OOB

Browse Source 
References:
https://github.com/advisories/GHSA-2jc9-36w4-pmqw
https://github.com/libarchive/libarchive/pull/2145
This commit is contained in:
Thomas Gerbet
2024-04-27 22:51:39 +02:00
parent 5ed92e50ce
commit 81b82a2934
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
pkgs/development/libraries/libarchive/default.nix
View File

@@ -49,6 +49,24 @@ stdenv.mkDerivation (finalAttrs: {
url = "https://github.com/libarchive/libarchive/commit/6110e9c82d8ba830c3440f36b990483ceaaea52c.patch";
hash = "sha256-/j6rJ0xWhtXU0YCu1LOokxxNppy5Of6Q0XyO4U6la7M=";
})
(fetchpatch {
# https://github.com/advisories/GHSA-2jc9-36w4-pmqw
name = "CVE-2024-26256.patch";
url = "https://github.com/libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patch";
hash = "sha256-w/WuOGlx5pSw4LwMgvL6arrL1Huhg45bitoRRVEHcec=";
})
(fetchpatch {
# https://github.com/libarchive/libarchive/pull/2108 (needed to cleanly apply the ZIP OOB patch)
name = "update-appledouble-support-directories.patch";
url = "https://github.com/libarchive/libarchive/commit/91f27004a5c88589658e38d68e46d223da6b75ca.patch";
hash = "sha256-q8x5NPmMh2P4j4fMEdjAWG2srzJCyF37SEW42kRuAZM=";
})
(fetchpatch {
# https://github.com/libarchive/libarchive/pull/2145
name = "zip-out-of-bound-access.patch";
url = "https://github.com/libarchive/libarchive/commit/b6a979481b7d77c12fa17bbed94576b63bbcb0c0.patch";
hash = "sha256-9TRJzV1l13Fk2JKqoejDM/kl0BsaD8EuIa11+aGnShM=";
})
];
outputs = [ "out" "lib" "dev" ];