rpcbind: Patch for CVE-2017-8779

This commit is contained in:
adisbladis 2017-11-28 02:12:21 +08:00
parent c0c503ca68
commit ac7ec054f1
No known key found for this signature in database
GPG key ID: ED58F95069B004F5

View file

@ -1,4 +1,4 @@
{ fetchurl, stdenv, pkgconfig, libnsl, libtirpc
{ fetchurl, stdenv, pkgconfig, libnsl, libtirpc, fetchpatch
, useSystemd ? true, systemd }:
stdenv.mkDerivation rec {
@ -12,6 +12,11 @@ stdenv.mkDerivation rec {
patches = [
./sunrpc.patch
(fetchpatch {
name = "CVE-2017-8779.patch";
url = "https://raw.githubusercontent.com/guidovranken/rpcbomb/e6da9e489aa8ad000b0ad5ac9abc5b4eefc3a769/rpcbind_patch.txt";
sha256 = "0w231w8fxihgrn526np078j3vbj3ylvjvxjmfpjvqhga5zg821ab";
})
];
buildInputs = [ libnsl libtirpc ]