about summary refs log tree commit diff
path: root/pkgs/servers/mail/exim
diff options
context:
space:
mode:
authorFranz Pletz <fpletz@fnordicwalking.de>2017-06-21 21:18:19 +0200
committerFranz Pletz <fpletz@fnordicwalking.de>2017-06-22 00:44:05 +0200
commit16aa92305bf8141c71cd44bc9af688e246df84df (patch)
tree977fc548e3c77caefce51f9a86c0afd3ca2305b5 /pkgs/servers/mail/exim
parent6a850d2b11f22a22729b49f012fc26ff3c602f3f (diff)
downloadnixlib-16aa92305bf8141c71cd44bc9af688e246df84df.tar
nixlib-16aa92305bf8141c71cd44bc9af688e246df84df.tar.gz
nixlib-16aa92305bf8141c71cd44bc9af688e246df84df.tar.bz2
nixlib-16aa92305bf8141c71cd44bc9af688e246df84df.tar.lz
nixlib-16aa92305bf8141c71cd44bc9af688e246df84df.tar.xz
nixlib-16aa92305bf8141c71cd44bc9af688e246df84df.tar.zst
nixlib-16aa92305bf8141c71cd44bc9af688e246df84df.zip
exim: patch CVE-2017-1000369 (stack clash)
Diffstat (limited to 'pkgs/servers/mail/exim')
-rw-r--r--pkgs/servers/mail/exim/default.nix10
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/servers/mail/exim/default.nix b/pkgs/servers/mail/exim/default.nix
index bf7b5d8d6ed1..d503a4d7b571 100644
--- a/pkgs/servers/mail/exim/default.nix
+++ b/pkgs/servers/mail/exim/default.nix
@@ -1,4 +1,4 @@
-{ coreutils, fetchurl, db, openssl, pcre, perl, pkgconfig, stdenv }:
+{ coreutils, fetchurl, db, openssl, pcre, perl, pkgconfig, stdenv, fetchpatch }:
 
 stdenv.mkDerivation rec {
   name = "exim-4.89";
@@ -8,6 +8,14 @@ stdenv.mkDerivation rec {
     sha256 = "09lndv34jsxwglq5zsh9y4xaqj5g37g9ca4x0zb25fvvm4f0lj8c";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2017-1000369.patch";
+      url = "https://anonscm.debian.org/git/pkg-exim4/exim4.git/plain/debian/patches/79_CVE-2017-1000369.patch?h=4.89-2%2bdeb9u1";
+      sha256 = "0v46zywgkv1rdqhybqqrd0rwkdaj6q1f4x0a3vm9p0wz8vad3023";
+    })
+  ];
+
   buildInputs = [ coreutils db openssl pcre perl pkgconfig ];
 
   preBuild = ''