glibc: security fix CVE-2014-8121, fixes #7207

2015-04-09 20:41:58 +02:00 · 2015-04-09 20:41:58 +02:00 · 596bf235b6
parent 91221f5941
commit 596bf235b6
1 changed files with 6 additions and 0 deletions
--- a/pkgs/development/libraries/glibc/common.nix
+++ b/pkgs/development/libraries/glibc/common.nix
@ -77,6 +77,12 @@ stdenv.mkDerivation ({
    + ''
      cat ${./glibc-remove-datetime-from-nscd.patch} \
        | sed "s,@out@,$out," | patch -p1
+    ''
+    # CVE-2014-8121, see https://bugzilla.redhat.com/show_bug.cgi?id=1165192
+    + ''
+      substituteInPlace ./nss/nss_files/files-XXX.c \
+        --replace 'status = internal_setent (stayopen);' \
+                  'status = internal_setent (1);'
    '';

  configureFlags =