Merge pull request #119899 from risicle/ris-oauth2-proxy-CVE-2021-21291-r20.09

[20.09] oauth2_proxy: add patch for CVE-2021-21291
This commit is contained in:
Robert Scott
2021-04-20 18:55:34 +01:00
committed by GitHub

View File

@@ -1,4 +1,4 @@
{ lib, buildGoModule, fetchFromGitHub }:
{ lib, buildGoModule, fetchFromGitHub, fetchpatch }:
buildGoModule rec {
pname = "oauth2-proxy";
@@ -11,6 +11,14 @@ buildGoModule rec {
rev = "v${version}";
};
patches = [
(fetchpatch {
name = "CVE-2021-21291.patch";
url = "https://github.com/oauth2-proxy/oauth2-proxy/commit/780ae4f3c99b579cb2ea9845121caebb6192f725.patch";
sha256 = "066cr6ml69pinw3j9rspjy2h3dvqmf4bvmdxvalb1ws3z0xkn4ag";
})
];
vendorSha256 = "1hrk3h729kcc77fq44kiywmyzk5a78v7bm5d2yl76lfxxdcdric7";
# Taken from https://github.com/oauth2-proxy/oauth2-proxy/blob/master/Makefile