summary refs log tree commit diff
path: root/pkgs/tools/archivers/p7zip
diff options
context:
space:
mode:
authorGraham Christensen <graham@grahamc.com>2016-12-07 19:38:50 -0500
committerGraham Christensen <graham@grahamc.com>2016-12-07 19:38:50 -0500
commit0683c1a35ca9513d53a7df94cabdd91f9f1cd2a1 (patch)
tree8bcbbe0f3a061dd4880a9616735a1c179b4bee27 /pkgs/tools/archivers/p7zip
parente0b850147d10564308d7f49850ecbf7168afa7e7 (diff)
downloadnixlib-0683c1a35ca9513d53a7df94cabdd91f9f1cd2a1.tar
nixlib-0683c1a35ca9513d53a7df94cabdd91f9f1cd2a1.tar.gz
nixlib-0683c1a35ca9513d53a7df94cabdd91f9f1cd2a1.tar.bz2
nixlib-0683c1a35ca9513d53a7df94cabdd91f9f1cd2a1.tar.lz
nixlib-0683c1a35ca9513d53a7df94cabdd91f9f1cd2a1.tar.xz
nixlib-0683c1a35ca9513d53a7df94cabdd91f9f1cd2a1.tar.zst
nixlib-0683c1a35ca9513d53a7df94cabdd91f9f1cd2a1.zip
p7zip: patch for CVE-2016-9296
Diffstat (limited to 'pkgs/tools/archivers/p7zip')
-rw-r--r--pkgs/tools/archivers/p7zip/default.nix9
1 files changed, 8 insertions, 1 deletions
diff --git a/pkgs/tools/archivers/p7zip/default.nix b/pkgs/tools/archivers/p7zip/default.nix
index 7c952a8f7294..c11c437fa37a 100644
--- a/pkgs/tools/archivers/p7zip/default.nix
+++ b/pkgs/tools/archivers/p7zip/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl }:
+{ stdenv, fetchurl, fetchpatch }:
 
 stdenv.mkDerivation rec {
   name = "p7zip-${version}";
@@ -9,6 +9,13 @@ stdenv.mkDerivation rec {
     sha256 = "5eb20ac0e2944f6cb9c2d51dd6c4518941c185347d4089ea89087ffdd6e2341f";
   };
 
+  patches = [
+    (fetchpatch {
+      url = "https://sources.debian.net/data/main/p/p7zip/16.02+dfsg-2/debian/patches/12-CVE-2016-9296.patch";
+      sha256 = "0inblicg24gcbaq84n0mr6w4yc5ak65mh9wxml96wlhdf7ph2i3m";
+    })
+  ];
+
   preConfigure = ''
     makeFlagsArray=(DEST_HOME=$out)
     buildFlags=all3