nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

cpio: patch CVE-2026-66484, CVE-2026-66485, and CVE-2026-66486

Browse Source 
(cherry picked from commit b2dbab4928)
This commit is contained in:
Robert Schütz
2026-08-11 19:33:42 -07:00
committed by github-actions[bot]
parent 7dd93a1b91
commit e9ee2233ce
1 changed files with 25 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
pkgs/by-name/cp/cpio/package.nix
View File

@@ -2,7 +2,9 @@
lib,
stdenv,
fetchurl,
fetchpatch,
autoreconfHook,
texinfo,
# for passthru.tests
git,
@@ -20,7 +22,29 @@ stdenv.mkDerivation (finalAttrs: {
hash = "sha256-k3YQuXwymh7JJoVT+3gAN7z/8Nz/6XJevE/ZwaqQdds=";
};
nativeBuildInputs = [ autoreconfHook ];
patches = [
(fetchpatch {
name = "CVE-2026-66484.patch";
url = "https://git.savannah.gnu.org/cgit/cpio.git/patch/?id=e2b9cbdd3354d2b1569b7390d1bc15c1930559ad";
hash = "sha256-WjphVpMaI/ePg8MTZx+vvilKzpRAAzhAFwCwrbsPLRE=";
})
(fetchpatch {
name = "CVE-2026-66485.patch";
url = "https://git.savannah.gnu.org/cgit/cpio.git/patch/?id=3cd514031371d8aeeaf2048aa10103e02831aaa9";
hash = "sha256-YDlROEYYlZERNzzlx1cQD29gV5IrU01aVcZ/sKpWrRo=";
})
(fetchpatch {
name = "CVE-2026-66486.patch";
url = "https://git.savannah.gnu.org/cgit/cpio.git/patch/?id=2ff9600c9ef32e88759843cdbde74c8db5ae9b30";
excludes = [ "NEWS" ];
hash = "sha256-qi9/9xhKnIyPpji63RgzbnnHZsJgwRnQVMaMiLxQipk=";
})
];
nativeBuildInputs = [
autoreconfHook
texinfo # for makeinfo
];
separateDebugInfo = true;