nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #173268 from DeterminateSystems/podman

Browse Source 
[21.11] podman: add patch for CVE-2022-27649
This commit is contained in:
adisbladis
2022-05-16 22:21:35 +08:00
committed by GitHub
parent d3fd775b83 1d2c4ceb88
commit fbbe8ed7e0
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
pkgs/applications/virtualization/podman/default.nix
View File

@@ -13,6 +13,7 @@
, systemd
, go-md2man
, nixosTests
, fetchpatch
}:
buildGoModule rec {
@@ -26,6 +27,15 @@ buildGoModule rec {
sha256 = "sha256-SZHonZdUTJisFMjvUBst1HErvKWEcYZYhK++G+S4sEg=";
};
patches = [
# Fix for capabilities bug: https://github.com/advisories/GHSA-qvf8-p83w-v58j
(fetchpatch {
name = "CVE-2022-27649.patch";
url = "https://github.com/containers/podman/commit/aafa80918a245edcbdaceb1191d749570f1872d0.patch";
sha256 = "sha256-d/5PGQ8yjLaE+6Sqo8p0yHe+mbrENFsbsaDXOF7cMsU=";
})
];
vendorSha256 = null;
doCheck = false;