Revert "unzip: CVE-2019-13232"
This reverts commit 0238946872
.
This patch broke a number of legitimate zips in the wild, including but
not limited to most luarocks and a number of gradle-produced JARs.
This commit is contained in:
parent
fd2b2b5cd5
commit
eaafd840bf
@ -26,11 +26,6 @@ stdenv.mkDerivation {
|
|||||||
./CVE-2016-9844.patch
|
./CVE-2016-9844.patch
|
||||||
./CVE-2018-18384.patch
|
./CVE-2018-18384.patch
|
||||||
./dont-hardcode-cc.patch
|
./dont-hardcode-cc.patch
|
||||||
(fetchurl {
|
|
||||||
url = "https://github.com/madler/unzip/commit/47b3ceae397d21bf822bc2ac73052a4b1daf8e1c.patch";
|
|
||||||
name = "CVE-2019-13232.patch";
|
|
||||||
sha256 = "0iy2wcjyvzwrjk02iszwcpg85fkjxs1bvb9isvdiywszav4yjs32";
|
|
||||||
})
|
|
||||||
] ++ stdenv.lib.optional enableNLS
|
] ++ stdenv.lib.optional enableNLS
|
||||||
(fetchurl {
|
(fetchurl {
|
||||||
url = "http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-arch/unzip/files/unzip-6.0-natspec.patch?revision=1.1";
|
url = "http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-arch/unzip/files/unzip-6.0-natspec.patch?revision=1.1";
|
||||||
|
Loading…
Reference in New Issue
Block a user