nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-02 04:50:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #194836 from risicle/ris-strongswan-CVE-2022-40617-r22.05

Browse Source
This commit is contained in:
Martin Weinelt
2022-10-13 00:18:39 +02:00
committed by GitHub
parent f313706e0c 2f516fbf27
commit e06bd4b64b
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
pkgs/tools/networking/strongswan/default.nix
View File

@@ -8,6 +8,7 @@
, enableNetworkManager ? false, networkmanager
, darwin
, nixosTests
, fetchpatch
}:
# Note on curl support: If curl is built with gnutls as its backend, the
@@ -41,6 +42,11 @@ stdenv.mkDerivation rec {
./ext_auth-path.patch
./firewall_defaults.patch
./updown-path.patch
(fetchpatch {
name = "CVE-2022-40617.patch";
url = "https://download.strongswan.org/security/CVE-2022-40617/strongswan-5.1.0-5.9.7_cert_online_validate.patch";
sha256 = "sha256-xjKK1vsHmBLAnyXF5FTdb0LE6wPzSovLWcaApuox92s=";
})
];
postPatch = optionalString stdenv.isLinux ''