JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libslirp: fix CVE-2020-29129, CVE-2020-29130

Browse Source 
Fixes out-of-bounds access while processing ARP/NCSI packets.

Fixes: CVE-2020-29129, CVE-2020-29130
This commit is contained in:
Martin Weinelt 2020-11-27 16:45:35 +01:00
parent f4c44e6314
commit 984271bde3
No known key found for this signature in database
GPG Key ID: 87C1E9888F856759
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
pkgs/development/libraries/libslirp/default.nix
View File

@ -1,5 +1,6 @@
{ stdenv
, fetchFromGitLab
, fetchpatch
, meson
, ninja
, pkg-config
@ -18,6 +19,15 @@ stdenv.mkDerivation rec {
sha256 = "0pzgjj2x2vrjshrzrl2x39xp5lgwg4b4y9vs8xvadh1ycl10v3fv";
};
patches = [
# remove >4.3.1
(fetchpatch {
name = "CVE-2020-29129_CVE-2020-29130.patch";
url = "https://gitlab.freedesktop.org/slirp/libslirp/-/commit/2e1dcbc0c2af64fcb17009eaf2ceedd81be2b27f.patch";
sha256 = "01vbjqgnc0kp881l5p6b31cyyirhwhavm6x36hlgkymswvl3wh9w";
})
];
nativeBuildInputs = [ meson ninja pkg-config ];
buildInputs = [ glib ];