From f9fd435ad4e7df2bd7227161a2dffdae4fa6718c Mon Sep 17 00:00:00 2001 From: Christian Kauhaus Date: Tue, 16 Jun 2020 09:15:21 +0200 Subject: [PATCH] qemu: patch CVE-2020-1711 --- pkgs/applications/virtualization/qemu/default.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkgs/applications/virtualization/qemu/default.nix b/pkgs/applications/virtualization/qemu/default.nix index 203ee1c7cc0e..ed12870c9f63 100644 --- a/pkgs/applications/virtualization/qemu/default.nix +++ b/pkgs/applications/virtualization/qemu/default.nix @@ -84,6 +84,11 @@ stdenv.mkDerivation rec { stripLen = 1; extraPrefix = "slirp/"; }) + (fetchpatch { + name = "CVE-2020-1711.patch"; + url = "https://git.qemu.org/?p=qemu.git;a=patch;h=693fd2acdf14dd86c0bf852610f1c2cca80a74dc"; + sha256 = "0dh09h6q26fm6691shvsbr2prrak8vcnpzlg4nlj57a1v7ndka8k"; + }) # patches listed at: https://nvd.nist.gov/vuln/detail/CVE-2020-7039 (fetchpatch { name = "CVE-2020-7039-1.patch";