Merge pull request #131377 from risicle/ris-lrzsz-CVE-2018-10195

lrzsz: add patch for CVE-2018-10195
This commit is contained in:
Luke Granger-Brown 2021-07-25 10:26:49 +01:00 committed by GitHub
commit 588cff8544
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,4 +1,4 @@
{ lib, stdenv, fetchurl }:
{ lib, stdenv, gettext, fetchurl, fetchpatch }:
stdenv.mkDerivation rec {
name = "lrzsz-0.12.20";
@ -8,6 +8,16 @@ stdenv.mkDerivation rec {
sha256 = "1wcgfa9fsigf1gri74gq0pa7pyajk12m4z69x7ci9c6x9fqkd2y2";
};
patches = [
(fetchpatch {
name = "CVE-2018-10195.patch";
url = "https://bugzilla.redhat.com/attachment.cgi?id=79507";
sha256 = "0jlh8w0cjaz6k56f0h3a0h4wgc51axmrdn3mdspk7apjfzqcvx3c";
})
];
nativeBuildInputs = [ gettext ];
hardeningDisable = [ "format" ];
configureFlags = [ "--program-transform-name=s/^l//" ];