summary refs log tree commit diff
path: root/pkgs/tools
diff options
context:
space:
mode:
authorAndreas Rammhold <andreas@rammhold.de>2018-10-15 23:27:45 +0200
committerAndreas Rammhold <andreas@rammhold.de>2018-10-26 12:17:58 +0200
commit5f75f72497113001bbd464018db233fee13b0ed9 (patch)
tree7e4aff02aa63e731c66bc3eef044020444fc31dc /pkgs/tools
parentc994f40de8e5e632fc71948001a73aaf9d3319cb (diff)
downloadnixlib-5f75f72497113001bbd464018db233fee13b0ed9.tar
nixlib-5f75f72497113001bbd464018db233fee13b0ed9.tar.gz
nixlib-5f75f72497113001bbd464018db233fee13b0ed9.tar.bz2
nixlib-5f75f72497113001bbd464018db233fee13b0ed9.tar.lz
nixlib-5f75f72497113001bbd464018db233fee13b0ed9.tar.xz
nixlib-5f75f72497113001bbd464018db233fee13b0ed9.tar.zst
nixlib-5f75f72497113001bbd464018db233fee13b0ed9.zip
yara: 3.7.1 -> 3.8.1
This fixes issues CVE-2018-12034 & CVE-2018-12035. They are OOB read &
write issues of the internal VM. Details can be retrieved at [1] & [2].

[1] https://github.com/VirusTotal/yara/issues/891
[2] https://bnbdr.github.io/posts/swisscheese/
Diffstat (limited to 'pkgs/tools')
-rw-r--r--pkgs/tools/security/yara/default.nix22
1 files changed, 2 insertions, 20 deletions
diff --git a/pkgs/tools/security/yara/default.nix b/pkgs/tools/security/yara/default.nix
index e273b2c19091..460474a7bb3b 100644
--- a/pkgs/tools/security/yara/default.nix
+++ b/pkgs/tools/security/yara/default.nix
@@ -5,34 +5,16 @@
 }:
 
 stdenv.mkDerivation rec {
-  version = "3.7.1";
+  version = "3.8.1";
   name = "yara-${version}";
 
   src = fetchFromGitHub {
     owner = "VirusTotal";
     repo = "yara";
     rev = "v${version}";
-    sha256 = "05smkn4ii8irx6ccnzrhwa39pkmrjyxjmfrwh6mhdd8iz51v5cgz";
+    sha256 = "1ys2y5f2cif3g42daq646jcrn2na19zkx7fds2gnavj5c1rk7463";
   };
 
-  # FIXME: this is probably not the right way to make it work
-  # make[2]: *** No rule to make target 'libyara/.libs/libyara.a', needed by 'yara'.  Stop.
-  prePatch = ''
-    cat >staticlibrary.patch <<EOF
-    --- a/Makefile.am 2015-11-01 11:39:12.000000000 +0100
-    +++ b/Makefile.am 2015-11-01 11:45:32.000000000 +0100
-    @@ -12 +12 @@
-    -yara_LDADD = libyara/.libs/libyara.a
-    +yara_LDADD = libyara/.libs/libyara${stdenv.hostPlatform.extensions.sharedLibrary}
-    @@ -15 +15 @@
-    -yarac_LDADD = libyara/.libs/libyara.a
-    +yarac_LDADD = libyara/.libs/libyara${stdenv.hostPlatform.extensions.sharedLibrary}
-    EOF
-  '';
-  patches = [
-    "staticlibrary.patch"
-  ];
-
   buildInputs = [ autoconf automake libtool pcre]
     ++ stdenv.lib.optionals withCrypto [ openssl ]
     ++ stdenv.lib.optionals enableMagic [ file ]