Merge pull request #11615 from rycee/fix/screen-CVE-2015-6806
screen: patch CVE-2015-6806
This commit is contained in:
commit
c20dbdfc84
|
@ -1,4 +1,4 @@
|
||||||
{ stdenv, fetchurl, ncurses, pam ? null }:
|
{ stdenv, fetchurl, fetchpatch, ncurses, pam ? null }:
|
||||||
|
|
||||||
stdenv.mkDerivation rec {
|
stdenv.mkDerivation rec {
|
||||||
name = "screen-4.3.1";
|
name = "screen-4.3.1";
|
||||||
|
@ -13,8 +13,15 @@ stdenv.mkDerivation rec {
|
||||||
sed -i -e "s|/usr/local|/non-existent|g" -e "s|/usr|/non-existent|g" configure Makefile.in */Makefile.in
|
sed -i -e "s|/usr/local|/non-existent|g" -e "s|/usr|/non-existent|g" configure Makefile.in */Makefile.in
|
||||||
'';
|
'';
|
||||||
|
|
||||||
# TODO: remove when updating the version of screen. Only a patch for 4.3.1
|
# TODO: remove when updating the version of screen. Only patches for 4.3.1
|
||||||
patches = stdenv.lib.optional stdenv.isDarwin (fetchurl {
|
patches = [
|
||||||
|
(fetchpatch {
|
||||||
|
name = "CVE-2015-6806.patch";
|
||||||
|
stripLen = 1;
|
||||||
|
url = "http://git.savannah.gnu.org/cgit/screen.git/patch/?id=b7484c224738247b510ed0d268cd577076958f1b";
|
||||||
|
sha256 = "160zhpzi80qkvwib78jdvx4jcm2c2h59q5ap7hgnbz4xbkb3k37l";
|
||||||
|
})
|
||||||
|
] ++ stdenv.lib.optional stdenv.isDarwin (fetchurl {
|
||||||
url = "http://savannah.gnu.org/file/screen-utmp.patch\?file_id=34815";
|
url = "http://savannah.gnu.org/file/screen-utmp.patch\?file_id=34815";
|
||||||
sha256 = "192dsa8hm1zw8m638avzhwhnrddgizhyrwaxgwa96zr9vwai2nvc";
|
sha256 = "192dsa8hm1zw8m638avzhwhnrddgizhyrwaxgwa96zr9vwai2nvc";
|
||||||
});
|
});
|
||||||
|
|
Loading…
Reference in New Issue