about summary refs log tree commit diff
diff options
context:
space:
mode:
authorAneesh Agrawal <aneeshusa@gmail.com>2016-09-23 21:54:52 -0400
committerFranz Pletz <fpletz@fnordicwalking.de>2016-09-24 03:54:52 +0200
commit9f7d9def4c9dfff49f259fc354778208760b3b16 (patch)
treebde7e9d1759404f6a19ee25f6f8c2937b6247abf
parent53c660dbc863d5e9a4a8ad40b2cd4985fc83fc99 (diff)
downloadnixlib-9f7d9def4c9dfff49f259fc354778208760b3b16.tar
nixlib-9f7d9def4c9dfff49f259fc354778208760b3b16.tar.gz
nixlib-9f7d9def4c9dfff49f259fc354778208760b3b16.tar.bz2
nixlib-9f7d9def4c9dfff49f259fc354778208760b3b16.tar.lz
nixlib-9f7d9def4c9dfff49f259fc354778208760b3b16.tar.xz
nixlib-9f7d9def4c9dfff49f259fc354778208760b3b16.tar.zst
nixlib-9f7d9def4c9dfff49f259fc354778208760b3b16.zip
as31: Apply Debian patch for CVE-2012-0808 (#18904)
-rw-r--r--pkgs/development/compilers/as31/default.nix11
1 files changed, 10 insertions, 1 deletions
diff --git a/pkgs/development/compilers/as31/default.nix b/pkgs/development/compilers/as31/default.nix
index 4db3b1b5a8de..fa34b3afe51b 100644
--- a/pkgs/development/compilers/as31/default.nix
+++ b/pkgs/development/compilers/as31/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl, yacc }:
+{ stdenv, fetchpatch, fetchurl, yacc }:
 
 let
 
@@ -14,6 +14,15 @@ in stdenv.mkDerivation {
 
   buildInputs = [ yacc ];
 
+  patches = [
+    # CVE-2012-0808
+    (fetchpatch {
+       name = "as31-mkstemps.patch";
+       url = "https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=655496;filename=as31-mkstemps.patch;msg=5";
+       sha256 = "0iia4wa8m141bwz4588yxb1dp2qwhapcii382sncm6jvwyngwh21";
+     })
+  ];
+
   preConfigure = ''
     chmod +x ./configure
   '';