tjh.dev
systemd: fix CVE-2019-15718
More details at: https://www.openwall.com/lists/oss-security/2019/09/03/1
+8
pkgs/os-specific/linux/systemd/default.nix
+8
pkgs/os-specific/linux/systemd/default.nix
···
30
30
sha256 = "0aczg25ih2gfjq810x8rw6rnpr6sw1lz6z0lvlyw2qphyih68b4x";
31
31
};
32
32
33
+
patches = [
34
+
(fetchpatch {
35
+
name = "CVE-2019-15718.patch";
36
+
url = https://github.com/systemd/systemd/pull/13457/commits/35e528018f315798d3bffcb592b32a0d8f5162bd.patch;
37
+
sha256 = "0m0ypnnllx4r6a2qy1586as15i2qrzxwi1sqdp14rzdwajz1rvnv";
38
+
})
39
+
];
40
+
33
41
prePatch = let
34
42
# Upstream's maintenance branches are still too intrusive:
35
43
# https://github.com/systemd/systemd-stable/tree/v239-stable