libarchive: comment on a vulnerability fixed before

2015-09-09 10:03:35 +02:00 · 2015-09-09 10:03:35 +02:00 · ac6f1313dc
commit ac6f1313dc
parent 11693943de
1 changed files with 1 additions and 0 deletions
--- a/pkgs/development/libraries/libarchive/default.nix
+++ b/pkgs/development/libraries/libarchive/default.nix
@ -15,6 +15,7 @@ stdenv.mkDerivation rec {
  patches = [
    ./CVE-2013-0211.patch # https://github.com/libarchive/libarchive/commit/22531545
    ./CVE-2015-1197.patch # https://github.com/NixOS/nixpkgs/issues/6799
+      # ^ it's CVE-2015-2304 specific to libarchive
  ];

  buildInputs = [ sharutils libxml2 zlib bzip2 openssl xz ] ++