summary refs log tree commit diff
path: root/pkgs/development/libraries/pcre/default.nix
diff options
context:
space:
mode:
authorMicxjo Funkcio <micxjo@fastmail.com>2016-04-08 13:29:28 -0700
committerNikolay Amiantov <ab@fmap.me>2016-04-09 02:43:41 +0300
commit1e2fe7e07dda9b354a1aacb7b9b2ce05045c7b45 (patch)
tree70e31278e06947abaff05decd1d7e3d88056c1d5 /pkgs/development/libraries/pcre/default.nix
parentc55cfe0cb3425fb926219cf7dde8714f3d143744 (diff)
downloadnixlib-1e2fe7e07dda9b354a1aacb7b9b2ce05045c7b45.tar
nixlib-1e2fe7e07dda9b354a1aacb7b9b2ce05045c7b45.tar.gz
nixlib-1e2fe7e07dda9b354a1aacb7b9b2ce05045c7b45.tar.bz2
nixlib-1e2fe7e07dda9b354a1aacb7b9b2ce05045c7b45.tar.lz
nixlib-1e2fe7e07dda9b354a1aacb7b9b2ce05045c7b45.tar.xz
nixlib-1e2fe7e07dda9b354a1aacb7b9b2ce05045c7b45.tar.zst
nixlib-1e2fe7e07dda9b354a1aacb7b9b2ce05045c7b45.zip
pcre: patch CVE-2016-1283
This fixes CVE-2016-1283, which allows remote attackers to cause
a denial of service (heap-based buffer overflow) or possibly
have unspecified other impact via a crafted regular expression.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1283
Diffstat (limited to 'pkgs/development/libraries/pcre/default.nix')
-rw-r--r--pkgs/development/libraries/pcre/default.nix5
1 files changed, 3 insertions, 2 deletions
diff --git a/pkgs/development/libraries/pcre/default.nix b/pkgs/development/libraries/pcre/default.nix
index afeffae3e5fa..5ae79e91b922 100644
--- a/pkgs/development/libraries/pcre/default.nix
+++ b/pkgs/development/libraries/pcre/default.nix
@@ -22,8 +22,9 @@ in stdenv.mkDerivation rec {
     sha256 = "1pvra19ljkr5ky35y2iywjnsckrs9ch2anrf5b0dc91hw8v2vq5r";
   };
 
-  patches =
-    [ ];
+  patches = [
+    ./CVE-2016-1283.patch
+  ];
 
   outputs = [ "out" "doc" "man" ];