Merge #199742: upx: apply patch for CVE-2021-20285

This commit is contained in:
Vladimír Čunát 2022-11-27 19:34:16 +01:00
commit 1380fec7bf
No known key found for this signature in database
GPG key ID: E747DF1F9575A3AA

View file

@ -1,4 +1,4 @@
{ lib, stdenv, fetchurl, ucl, zlib, perl }:
{ lib, stdenv, fetchurl, ucl, zlib, perl, fetchpatch }:
stdenv.mkDerivation rec {
pname = "upx";
@ -10,6 +10,14 @@ stdenv.mkDerivation rec {
buildInputs = [ ucl zlib perl ];
patches = [
(fetchpatch {
url = "https://github.com/upx/upx/commit/13bc031163863cb3866aa6cdc018dff0697aa5d4.patch";
sha256 = "sha256-7uazgx1lOgHh2J7yn3yb1q9lTJsv4BbexdGlWRiAG/M=";
name = "CVE-2021-20285.patch";
})
];
preConfigure = ''
export UPX_UCLDIR=${ucl}
'';