Merge pull request #108501 from Ma27/tcpdump-cve-2020-8037

tcpdump: fix CVE-2020-8037

pkgs/tools/networking/tcpdump/default.nix

···
-{ stdenv, fetchurl, libpcap, perl }:
+{ stdenv, fetchurl, libpcap, perl, fetchpatch }:
 
 stdenv.mkDerivation rec {
   pname = "tcpdump";
···
     url = "http://www.tcpdump.org/release/${pname}-${version}.tar.gz";
     sha256 = "0434vdcnbqaia672rggjzdn4bb8p8dchz559yiszzdk0sjrprm1c";
   };
+
+  patches = [
+    # Patch for CVE-2020-8037
+    (fetchpatch {
+      url = "https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231.patch";
+      sha256 = "sha256-bO3aV032ru9+M/9isBRjmH8jTZLKj9Zf9ha2rmOaZwc=";
+    })
+  ];
 
   postPatch = ''
     patchShebangs tests