nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-07-25 10:00:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

unbound: patch CVE-2019-16866 (DoS, minor one IMHO)

Browse Source 
https://www.nlnetlabs.nl/projects/unbound/security-advisories/#vulnerability-in-parsing-notify-queries
The patch should be available here but web is down ATM:
https://nlnetlabs.nl/downloads/unbound/patch_cve_2019-16866.diff
This commit is contained in:
Vladimír Čunát
2019-10-04 10:03:15 +02:00
parent ec1070d4d4
commit bcc3c118bf
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
pkgs/tools/networking/unbound/default.nix
View File

@@ -1,4 +1,4 @@
{ stdenv, fetchurl, openssl, nettle, expat, libevent, dns-root-data }:
{ stdenv, fetchurl, fetchpatch, openssl, nettle, expat, libevent, dns-root-data }:
stdenv.mkDerivation rec {
name = "unbound-${version}";
@@ -9,6 +9,15 @@ stdenv.mkDerivation rec {
sha256 = "05xrb8havr2vgjsdy7n85kgnvk1mg7qwhjp4a8n6pg4jhd5zjnj1";
};
patches = [
(fetchpatch {
name = "cve-2019-16866.diff";
url = "https://github.com/NLnetLabs/unbound/commit/b60c4a472c8.diff";
includes = [ "util/data/msgparse.c" ];
sha256 = "0id0mac9413pbc3z6yjha1sg7syxnari1qinxv5dp5jl98n1752p";
})
];
outputs = [ "out" "lib" "man" ]; # "dev" would only split ~20 kB
buildInputs = [ openssl nettle expat libevent ];