From f37f3c87f372efade5dbbfddc6c6635b15bd8c9d Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Sat, 7 Sep 2024 12:56:11 +0100 Subject: [PATCH] frr: add patch for CVE-2024-44070 (cherry picked from commit 1d2c529431c87bdb8b86bbe0a73d15b1150ca9d2) --- pkgs/servers/frr/default.nix | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/pkgs/servers/frr/default.nix b/pkgs/servers/frr/default.nix index ce2e349afdb2..d1f8272bd2f8 100644 --- a/pkgs/servers/frr/default.nix +++ b/pkgs/servers/frr/default.nix @@ -95,6 +95,14 @@ stdenv.mkDerivation rec { hash = "sha256-bY5SSF/fmKQc8ECPik0v/ZlUiFsbZhwG2C5pbmoMzwQ="; }; + patches = [ + (fetchpatch { + name = "CVE-2024-44070.patch"; + url = "https://github.com/FRRouting/frr/commit/fea4ed5043b4a523921f970a39a565d2c1ca381f.patch"; + hash = "sha256-X9FjQeOvo92+mL1z3u5W0LBhhePDAyhFAqh8sAtNNm8="; + }) + ]; + nativeBuildInputs = [ autoreconfHook bison