treewide: add CVE identifiers to patches
This allows tools like broken.sh to correctly identify the patched status.
This commit is contained in:
@@ -12,8 +12,8 @@ stdenv.mkDerivation rec {
|
||||
buildInputs = [ perl cups dbus enscript ];
|
||||
|
||||
patches = [
|
||||
# for CVE-2015-8327 & CVE-2015-8560
|
||||
(fetchpatch {
|
||||
name = "CVE-2015-8327+CVE-2015-8560.patch";
|
||||
url = "https://salsa.debian.org/debian/foomatic-filters/raw/a3abbef2d2f8c7e62d2fe64f64afe294563fdf8f/debian/patches/0500-r7406_also_consider_the_back_tick_as_an_illegal_shell_escape_character.patch";
|
||||
sha256 = "055nwi3sjf578nk40bqsch3wx8m2h65hdih0wmxflb6l0hwkq4p4";
|
||||
})
|
||||
|
||||
Reference in New Issue
Block a user