JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

dnsmasq: Patch CVE-2017-15107

Browse Source
This commit is contained in:
adisbladis 2018-02-24 01:34:32 +08:00
parent fa06cab3fd
commit b492e2a164
No known key found for this signature in database
GPG Key ID: ED58F95069B004F5
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
pkgs/tools/networking/dnsmasq/default.nix
View File

@ -1,4 +1,4 @@
{ stdenv, fetchurl, pkgconfig, dbus_libs, nettle, libidn, libnetfilter_conntrack }:
{ stdenv, fetchurl, pkgconfig, dbus_libs, nettle, libidn, libnetfilter_conntrack, fetchpatch }:
with stdenv.lib;
let
@ -18,6 +18,16 @@ stdenv.mkDerivation rec {
sha256 = "0ar5h5v3kas2qx2wgy5iqin15gc4jhqrqs067xacgc3lii1rz549";
};
patches = [
(fetchpatch {
name = "CVE-2017-15107.patch";
url = "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=patch;h=4fe6744a220eddd3f1749b40cac3dfc510787de6";
sha256 = "0r8grhh1q46z8v6manx1vvfpf2vmchfzsg7l1djh63b1fy1mbjkk";
# changelog does not apply cleanly but its safe to skip
excludes = [ "CHANGELOG" ];
})
];
preBuild = ''
makeFlagsArray=("COPTS=${copts}")
'';