JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #137041 from risicle/ris-botan-CVE-2021-40529

Browse Source 
botan2: 2.18.0 -> 2.18.1, add patch for CVE-2021-40529
This commit is contained in:
Michael Raskin 2021-09-08 05:03:27 +00:00 committed by GitHub
commit 75ba363f87
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
pkgs/development/libraries/botan/2.0.nix
View File

@ -1,10 +1,19 @@
{ callPackage, ... } @ args:
{ callPackage, fetchpatch, ... } @ args:
callPackage ./generic.nix (args // {
baseVersion = "2.18";
revision = "0";
sha256 = "09z3fy31q1pvnvpy4fswrsl2aq8ksl94lbh5rl7b6nqc3qp8ar6c";
revision = "1";
sha256 = "0adf53drhk1hlpfih0175c9081bqpclw6p2afn51cmx849ib9izq";
postPatch = ''
sed -e 's@lang_flags "@&--std=c++11 @' -i src/build-data/cc/{gcc,clang}.txt
'';
extraPatches = [
(fetchpatch {
name = "CVE-2021-40529.patch";
url = "https://github.com/randombit/botan/commit/9a23e4e3bc3966340531f2ff608fa9d33b5185a2.patch";
sha256 = "1ax1n2l9zh0hk35vkkywgkhzpdk76xb9apz2wm3h9kjvjs9acr3y";
# our source tarball doesn't include the tests
excludes = [ "src/tests/*" ];
})
];
})

1
pkgs/development/libraries/botan/default.nix
View File

@ -10,6 +10,7 @@ callPackage ./generic.nix (args // {
sed -e 's@lang_flags "@&--std=c++11 @' -i src/build-data/cc/{gcc,clang}.txt
'';
knownVulnerabilities = [
"CVE-2021-40529"
# https://botan.randombit.net/security.html#id1
"2020-03-24: Side channel during CBC padding"
];

2
pkgs/development/libraries/botan/generic.nix
View File

@ -3,6 +3,7 @@
, baseVersion, revision, sha256
, sourceExtension ? "tar.xz"
, extraConfigureFlags ? ""
, extraPatches ? [ ]
, postPatch ? null
, knownVulnerabilities ? [ ]
, CoreServices
@ -22,6 +23,7 @@ stdenv.mkDerivation rec {
];
inherit sha256;
};
patches = extraPatches;
inherit postPatch;
buildInputs = [ python3 bzip2 zlib gmp openssl boost ]