diff --git a/pkgs/os-specific/linux/util-linux/default.nix b/pkgs/os-specific/linux/util-linux/default.nix
index 0c7ebef7eb3..8aed357d54c 100644
--- a/pkgs/os-specific/linux/util-linux/default.nix
+++ b/pkgs/os-specific/linux/util-linux/default.nix
@@ -1,4 +1,4 @@
-args: with args;
+{stdenv, fetchurl, ncurses ? null}:
 
 stdenv.mkDerivation {
   name = "util-linux-2.13-pre7";
@@ -7,16 +7,23 @@ stdenv.mkDerivation {
     url = mirror://kernel/linux/utils/util-linux/testing/util-linux-2.13-pre7.tar.bz2;
     md5 = "13cdf4b76533e8421dc49de188f85291";
   };
-  
+
+  patches = [
+    # Fix for a local root exploit via mount/umount
+    # (http://www.gentoo.org/security/en/glsa/glsa-200710-18.xml).
+    (fetchurl {
+      url = "http://sources.gentoo.org/viewcvs.py/*checkout*/gentoo-x86/sys-apps/util-linux/files/util-linux-2.13-setuid-checks.patch?rev=1.1";
+      sha256 = "02ky7ljzqpx8ii3dfmjydw8nnhshpw2inwh6w1vqllz8mhn81jdf";
+    })
+  ];
+
   configureFlags = "--disable-use-tty-group";
 
-  buildInputs = [] 
-  	++ (if args ? ncurses then [args.ncurses] else [])
-  ;
+  buildInputs = stdenv.lib.optional (ncurses != null) ncurses;
 
-  preBuild = "
+  preBuild = ''
     makeFlagsArray=(usrbinexecdir=$out/bin usrsbinexecdir=$out/sbin datadir=$out/share exampledir=$out/share/getopt)
-  ";
+  '';
 
   # Hack to get static builds to work.
   NIX_CFLAGS_COMPILE = "-DHAVE___PROGNAME=1";