nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-02 04:50:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

busybox: Uniformly use vda-linux mirror (#555535)

Browse Source
This commit is contained in:
Sandro
2026-10-01 19:33:37 +00:00
committed by GitHub
parent c95ff9fbca e9a67e0580
commit a5276846bd
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pkgs/os-specific/linux/busybox/default.nix
View File

@@ -89,13 +89,13 @@ stdenv.mkDerivation (finalAttrs: {
# archival: disallow path traversals (CVE-2023-39810)
(fetchpatch {
name = "CVE-2023-39810.patch";
url = "https://git.busybox.net/busybox/patch/?id=9a8796436b9b0641e13480811902ea2ac57881d3";
url = "https://github.com/vda-linux/busybox_mirror/commit/9a8796436b9b0641e13480811902ea2ac57881d3.patch";
hash = "sha256-pOARbCwiucrkNITBoOMpLF3GniYvJiyBeBi2/Aw2JY8=";
})
# tar: strip unsafe hardlink components - GNU tar does the same
(fetchpatch {
name = "CVE-2026-26157_CVE-2026-26158.patch";
url = "https://git.busybox.net/busybox/patch/?id=3fb6b31c716669e12f75a2accd31bb7685b1a1cb";
url = "https://github.com/vda-linux/busybox_mirror/commit/3fb6b31c716669e12f75a2accd31bb7685b1a1cb.patch";
excludes = [ "networking/httpd_ratelimit_cgi.c" ]; # New since release.
hash = "sha256-Msm9sDZrVx7ofunnvnTS73SPKUUpR3Tv5xZ/wBd+rts=";
})