dnsmasq: Patch CVE-2017-15107
This commit is contained in:
parent
fa06cab3fd
commit
b492e2a164
@ -1,4 +1,4 @@
|
|||||||
{ stdenv, fetchurl, pkgconfig, dbus_libs, nettle, libidn, libnetfilter_conntrack }:
|
{ stdenv, fetchurl, pkgconfig, dbus_libs, nettle, libidn, libnetfilter_conntrack, fetchpatch }:
|
||||||
|
|
||||||
with stdenv.lib;
|
with stdenv.lib;
|
||||||
let
|
let
|
||||||
@ -18,6 +18,16 @@ stdenv.mkDerivation rec {
|
|||||||
sha256 = "0ar5h5v3kas2qx2wgy5iqin15gc4jhqrqs067xacgc3lii1rz549";
|
sha256 = "0ar5h5v3kas2qx2wgy5iqin15gc4jhqrqs067xacgc3lii1rz549";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
patches = [
|
||||||
|
(fetchpatch {
|
||||||
|
name = "CVE-2017-15107.patch";
|
||||||
|
url = "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=patch;h=4fe6744a220eddd3f1749b40cac3dfc510787de6";
|
||||||
|
sha256 = "0r8grhh1q46z8v6manx1vvfpf2vmchfzsg7l1djh63b1fy1mbjkk";
|
||||||
|
# changelog does not apply cleanly but its safe to skip
|
||||||
|
excludes = [ "CHANGELOG" ];
|
||||||
|
})
|
||||||
|
];
|
||||||
|
|
||||||
preBuild = ''
|
preBuild = ''
|
||||||
makeFlagsArray=("COPTS=${copts}")
|
makeFlagsArray=("COPTS=${copts}")
|
||||||
'';
|
'';
|
||||||
|
Loading…
x
Reference in New Issue
Block a user