Merge pull request #30227 from pbogdan/newsbeuter-cve-2017-12904

newsbeuter: fix CVE-2017-12904

authored by Joachim F and committed by GitHub c4053024 5e8bd5da

+5
+5
pkgs/applications/networking/feedreaders/newsbeuter/default.nix
··· 36 url = "https://github.com/akrennmair/newsbeuter/commit/26f5a4350f3ab5507bb8727051c87bb04660f333.patch"; 37 sha256 = "1jjxj4z3s4f1n8rfpwyd42a40gjnziykqas6a26s1lsdkklnbp6q"; 38 }) 39 ]; 40 41 installFlags = [ "DESTDIR=$(out)" "prefix=" ];
··· 36 url = "https://github.com/akrennmair/newsbeuter/commit/26f5a4350f3ab5507bb8727051c87bb04660f333.patch"; 37 sha256 = "1jjxj4z3s4f1n8rfpwyd42a40gjnziykqas6a26s1lsdkklnbp6q"; 38 }) 39 + # https://github.com/akrennmair/newsbeuter/issues/591 / CVE-2017-12904 40 + (fetchpatch { 41 + url = "https://github.com/akrennmair/newsbeuter/commit/d1460189f6f810ca9a3687af7bc43feb7f2af2d9.patch"; 42 + sha256 = "1a8k73ckziszsbdwdhcmkfvlmgy955gssg9v4sqvg20v91l5rmai"; 43 + }) 44 ]; 45 46 installFlags = [ "DESTDIR=$(out)" "prefix=" ];