From ab917a22f511610345e3112af59e8cba7b4db297 Mon Sep 17 00:00:00 2001 From: Michael Raskin <7c6f434c@mail.ru> Date: Fri, 8 Dec 2017 22:47:11 +0100 Subject: [PATCH] busybox: apply upstream patch for CVE-2017-16544 --- pkgs/os-specific/linux/busybox/default.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkgs/os-specific/linux/busybox/default.nix b/pkgs/os-specific/linux/busybox/default.nix index 03b30af6c3e..bcb24d127cc 100644 --- a/pkgs/os-specific/linux/busybox/default.nix +++ b/pkgs/os-specific/linux/busybox/default.nix @@ -51,6 +51,11 @@ stdenv.mkDerivation rec { url = "https://git.busybox.net/busybox/patch/?id=9ac42c500586fa5f10a1f6d22c3f797df11b1f6b"; sha256 = "0169p4ylz9zd14ghhb39yfjvbdca2kb21pphylfh9ny7i484ahql"; }) + (fetchpatch { + name = "CVE-2017-16544.patch"; + url = "https://git.busybox.net/busybox/patch/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8"; + sha256 = "1q3lkc4xczxrzhz73x2r0w7kmd6y33zhcnz3478nk5xi0qr66mcy"; + }) ]; configurePhase = ''