inetutils: add patch for CVE-2022-39028

This commit is contained in:
Robert Scott 2022-09-03 12:32:49 +01:00
parent 0f64ae72ea
commit 72d2cd3208

View File

@ -1,5 +1,5 @@
{ stdenv, lib, fetchurl, ncurses, perl, help2man
, apparmorRulesFromClosure
, apparmorRulesFromClosure, fetchpatch
}:
stdenv.mkDerivation rec {
@ -16,6 +16,11 @@ stdenv.mkDerivation rec {
patches = [
# https://git.congatec.com/yocto/meta-openembedded/commit/3402bfac6b595c622e4590a8ff5eaaa854e2a2a3
./inetutils-1_9-PATH_PROCNET_DEV.patch
(fetchpatch {
name = "CVE-2022-39028.patch";
url = "https://sources.debian.org/data/main/i/inetutils/2%3A2.3-5/debian/patches/inetutils-telnetd-EC_EL_null_deref.patch";
sha256 = "sha256-NYNDbEk3q3EhQdJaR12JBbnjJIRRpOcKLBF/EJJPiGU=";
})
];
nativeBuildInputs = [ help2man perl /* for `whois' */ ];