libarchive: add patch to fix CVE-2017-5601

2017-01-31 17:00:13 +01:00 · 2017-01-31 17:00:13 +01:00 · ca593a7293
commit ca593a7293
parent 53bfe0cafe
1 changed files with 7 additions and 0 deletions
--- a/pkgs/development/libraries/libarchive/default.nix
+++ b/pkgs/development/libraries/libarchive/default.nix
@ -17,6 +17,13 @@ stdenv.mkDerivation rec {
    sha256 = "03q6y428rg723c9fj1vidzjw46w1vf8z0h95lkvz1l9jw571j739";
  };

+  patches = [
+    (fetchurl {
+      url = "https://github.com/libarchive/libarchive/commit/98dcbbf0bf4854bf987557e55e55fff7abbf3ea9.patch";
+      sha256 = "1934krf5imc9rq1av6immpsfn77pglanhz1csq8j22h9ab87n5z6";
+    })
+  ];
+
  outputs = [ "out" "lib" "dev" ];

  nativeBuildInputs = [ pkgconfig ];