rpcbind: patch for CVE-2015-7236

This commit is contained in:
Graham Christensen 2016-11-30 19:18:08 -05:00
parent c97fda0bcf
commit 7e40e89273
No known key found for this signature in database
GPG key ID: ACA1C1D120C83D5C

View file

@ -1,10 +1,10 @@
{ fetchurl, stdenv, pkgconfig, libtirpc
{ fetchurl, fetchpatch, stdenv, pkgconfig, libtirpc
, useSystemd ? true, systemd }:
let version = "0.2.3";
in stdenv.mkDerivation rec {
name = "rpcbind-${version}";
src = fetchurl {
url = "mirror://sourceforge/rpcbind/${version}/${name}.tar.bz2";
sha256 = "0yyjzv4161rqxrgjcijkrawnk55rb96ha0pav48s03l2klx855wq";
@ -13,6 +13,10 @@ in stdenv.mkDerivation rec {
patches = [
./sunrpc.patch
./0001-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
(fetchpatch {
url = "https://sources.debian.net/data/main/r/rpcbind/0.2.3-0.5/debian/patches/CVE-2015-7236.patch";
sha256 = "1wsv5j8f5djzxr11n4027x107cam1avmx9w34g6l5d9s61j763wq";
})
];
buildInputs = [ libtirpc ]