exim: patch CVE-2017-1000369 (stack clash)

This commit is contained in:
Franz Pletz 2017-06-21 21:18:19 +02:00
parent 6a850d2b11
commit 16aa92305b
No known key found for this signature in database
GPG Key ID: 846FDED7792617B4

View File

@ -1,4 +1,4 @@
{ coreutils, fetchurl, db, openssl, pcre, perl, pkgconfig, stdenv }:
{ coreutils, fetchurl, db, openssl, pcre, perl, pkgconfig, stdenv, fetchpatch }:
stdenv.mkDerivation rec {
name = "exim-4.89";
@ -8,6 +8,14 @@ stdenv.mkDerivation rec {
sha256 = "09lndv34jsxwglq5zsh9y4xaqj5g37g9ca4x0zb25fvvm4f0lj8c";
};
patches = [
(fetchpatch {
name = "CVE-2017-1000369.patch";
url = "https://anonscm.debian.org/git/pkg-exim4/exim4.git/plain/debian/patches/79_CVE-2017-1000369.patch?h=4.89-2%2bdeb9u1";
sha256 = "0v46zywgkv1rdqhybqqrd0rwkdaj6q1f4x0a3vm9p0wz8vad3023";
})
];
buildInputs = [ coreutils db openssl pcre perl pkgconfig ];
preBuild = ''