about summary refs log tree commit diff
path: root/pkgs/tools/misc/mcrypt/default.nix
diff options
context:
space:
mode:
authorJakob Gillich <jakob@gillich.me>2016-01-07 05:19:06 +0100
committerVladimír Čunát <vcunat@gmail.com>2016-01-07 10:10:30 +0100
commit4f4eebbded6b18d3e308c6e03943355a6622b489 (patch)
treec8d3d6a8f5061442f463abd284b3b45145c1e17d /pkgs/tools/misc/mcrypt/default.nix
parent9265d097d51abed8fe9be479f75ec10e5352d0d9 (diff)
downloadnixlib-4f4eebbded6b18d3e308c6e03943355a6622b489.tar
nixlib-4f4eebbded6b18d3e308c6e03943355a6622b489.tar.gz
nixlib-4f4eebbded6b18d3e308c6e03943355a6622b489.tar.bz2
nixlib-4f4eebbded6b18d3e308c6e03943355a6622b489.tar.lz
nixlib-4f4eebbded6b18d3e308c6e03943355a6622b489.tar.xz
nixlib-4f4eebbded6b18d3e308c6e03943355a6622b489.tar.zst
nixlib-4f4eebbded6b18d3e308c6e03943355a6622b489.zip
mcrypt: fix several security issues (close #12194)
CVE-2012-4409, CVE-2012-4426, CVE-2012-4527

Patches taken from https://gitweb.gentoo.org/repo/gentoo.git/tree/app-crypt/mcrypt/files
Diffstat (limited to 'pkgs/tools/misc/mcrypt/default.nix')
-rw-r--r--pkgs/tools/misc/mcrypt/default.nix12
1 files changed, 7 insertions, 5 deletions
diff --git a/pkgs/tools/misc/mcrypt/default.nix b/pkgs/tools/misc/mcrypt/default.nix
index ffd8966a80eb..52c96fda1973 100644
--- a/pkgs/tools/misc/mcrypt/default.nix
+++ b/pkgs/tools/misc/mcrypt/default.nix
@@ -1,16 +1,18 @@
 { stdenv, fetchurl, libmcrypt, libmhash }:
- 
+
 stdenv.mkDerivation rec {
   version = "2.6.8";
   name = "mcrypt-${version}";
-  
+
   src = fetchurl {
     url = "mirror://sourceforge/mcrypt/MCrypt/${version}/${name}.tar.gz";
     sha256 = "5145aa844e54cca89ddab6fb7dd9e5952811d8d787c4f4bf27eb261e6c182098";
   };
- 
-  buildInputs = [libmcrypt libmhash];
- 
+
+  patches = [ ./format-string.patch ./overflow.patch ./segv.patch ./sprintf.patch ];
+
+  buildInputs = [ libmcrypt libmhash ];
+
   meta = {
     description = "Replacement for old UNIX crypt(1)";
     longDescription = ''