tjh.dev / nixpkgs
Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)
fork atom

avahi: apply patches for CVE-2017-6519 & CVE-2018-1000845

(cherry picked from commit 87a762269fc52d459a9326d56272100bfd149597)

Andreas Rammhold 36314bdf 46f7d784

+9 -2
unified split
+9 -2
pkgs/development/libraries/avahi/default.nix
··· 1 - { fetchurl, stdenv, pkgconfig, libdaemon, dbus, perlPackages 1 + { fetchurl, fetchpatch, stdenv, pkgconfig, libdaemon, dbus, perlPackages 2 2 , expat, gettext, intltool, glib, libiconv 3 3 , gtk3Support ? false, gtk3 ? null 4 4 , qt4 ? null ··· 16 16 sha256 = "0128n7jlshw4bpx0vg8lwj8qwdisjxi7mvniwfafgnkzzrfrpaap"; 17 17 }; 18 18 19 - patches = [ ./no-mkdir-localstatedir.patch ]; 19 + patches = [ 20 + ./no-mkdir-localstatedir.patch 21 + (fetchpatch { 22 + name ="CVE-2017-6519-CVE-2018-100084.patch"; 23 + url = https://github.com/lathiat/avahi/commit/e111def44a7df4624a4aa3f85fe98054bffb6b4f.patch; 24 + sha256 = "06n7b7kz6xcc35c7xjfc1kj3k2llyjgi09nhy0ci32l1bhacjw0q"; 25 + }) 26 + ]; 20 27 21 28 buildInputs = [ libdaemon dbus glib expat libiconv ] 22 29 ++ (with perlPackages; [ perl XMLParser ])