From 2a3d3107090ef1e54773925ff6f109c820b2a6f0 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Fri, 14 Jul 2023 12:17:43 +0200 Subject: [PATCH] asterisk: apply patch for pjsip CVE-2023-27585 https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr --- pkgs/servers/asterisk/default.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkgs/servers/asterisk/default.nix b/pkgs/servers/asterisk/default.nix index c49e5696a67..6d0b4c5805e 100644 --- a/pkgs/servers/asterisk/default.nix +++ b/pkgs/servers/asterisk/default.nix @@ -48,6 +48,11 @@ let url = "https://github.com/pjsip/pjproject/commit/bc4812d31a67d5e2f973fbfaf950d6118226cf36.patch"; sha256 = "sha256-bpc8e8VAQpfyl5PX96G++6fzkFpw3Or1PJKNPKl7N5k="; }) + (fetchpatch { + name = "CVE-2023-27585.patch"; + url = "https://github.com/pjsip/pjproject/commit/d1c5e4da5bae7f220bc30719888bb389c905c0c5.patch"; + hash = "sha256-+yyKKTKG2FnfyLWnc4S80vYtDzmiu9yRmuqb5eIulPg="; + }) ]; common = { version, sha256, externals, pjsip_patches ? [ ] }: stdenv.mkDerivation {