summary refs log tree commit diff
path: root/pkgs/applications/networking/enhanced-ctorrent
diff options
context:
space:
mode:
authorCorbin Simpson <MostAwesomeDude@gmail.com>2018-04-22 14:42:20 -0700
committerJörg Thalheim <Mic92@users.noreply.github.com>2018-04-22 22:42:20 +0100
commit69f23d9e730afd135a0342394869470453979dc9 (patch)
tree8e230f8f229f03c5aff2419b1b2410080592add1 /pkgs/applications/networking/enhanced-ctorrent
parent3aea9a4c2cd5824dcd02ea96729dc34cb97121ac (diff)
downloadnixlib-69f23d9e730afd135a0342394869470453979dc9.tar
nixlib-69f23d9e730afd135a0342394869470453979dc9.tar.gz
nixlib-69f23d9e730afd135a0342394869470453979dc9.tar.bz2
nixlib-69f23d9e730afd135a0342394869470453979dc9.tar.lz
nixlib-69f23d9e730afd135a0342394869470453979dc9.tar.xz
nixlib-69f23d9e730afd135a0342394869470453979dc9.tar.zst
nixlib-69f23d9e730afd135a0342394869470453979dc9.zip
enhanced-ctorrent: fix CVE-2009-1759 (#39311)
Patches from Debian.
Diffstat (limited to 'pkgs/applications/networking/enhanced-ctorrent')
-rw-r--r--pkgs/applications/networking/enhanced-ctorrent/default.nix15
1 files changed, 14 insertions, 1 deletions
diff --git a/pkgs/applications/networking/enhanced-ctorrent/default.nix b/pkgs/applications/networking/enhanced-ctorrent/default.nix
index fedbfeb957ce..2cfde73a01a6 100644
--- a/pkgs/applications/networking/enhanced-ctorrent/default.nix
+++ b/pkgs/applications/networking/enhanced-ctorrent/default.nix
@@ -1,13 +1,26 @@
-{ stdenv, fetchurl }:
+{ stdenv, fetchurl, fetchpatch }:
 
 stdenv.mkDerivation rec {
   version = "dnh3.3.2";
   name = "enhanced-ctorrent";
+
   src = fetchurl {
     url = "http://www.rahul.net/dholmes/ctorrent/ctorrent-dnh3.3.2.tar.gz";
     sha256 = "0qs8waqwllk56i3yy3zhncy7nsnhmf09a494p5siz4vm2k4ncwy8";
   };
 
+  # These patches come from Debian and fix CVE-2009-1759.
+  patches = [
+    (fetchpatch {
+      url = "https://sources.debian.org/data/main/c/ctorrent/1.3.4.dnh3.3.2-5/debian/patches/cve-security-fix.diff";
+      sha256 = "1qkzzm8sfspbcs10azmmif4qcr7pr8r38dsa2py84lsjm1yi3kls";
+    })
+    (fetchpatch {
+      url = "https://sources.debian.org/data/main/c/ctorrent/1.3.4.dnh3.3.2-5/debian/patches/FTBFS-fix.diff";
+      sha256 = "1m3zh96xwqjjzsbg62f7kx0miams58nys1f484qhdn870b5x9p06";
+    })
+  ];
+
   meta = {
     description = "BitTorrent client written in C++";
     longDescription = ''