about summary refs log tree commit diff
diff options
context:
space:
mode:
authorLeona Maroni <dev@leona.is>2023-12-07 13:44:59 +0100
committerLeona Maroni <dev@leona.is>2023-12-07 20:49:52 +0100
commit8fb1486901a3f4e7cbdee5616f7d1a39a5dc7a99 (patch)
treed051c2ea9f2134b6dccf3b7bb92f3bab15ad7aed
parente58d06a139932685f999be9e9ed846e44b3d2c26 (diff)
bluez: apply patch for CVE-2023-45866
(cherry picked from commit 7d7f66dfba9f239f15aaec6512afb3443bbae915)
-rw-r--r--pkgs/os-specific/linux/bluez/default.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/bluez/default.nix b/pkgs/os-specific/linux/bluez/default.nix
index c6c7d9d0f509b..af3e4391f75db 100644
--- a/pkgs/os-specific/linux/bluez/default.nix
+++ b/pkgs/os-specific/linux/bluez/default.nix
@@ -36,6 +36,12 @@ in stdenv.mkDerivation rec {
       url = "https://git.alpinelinux.org/aports/plain/main/bluez/max-input.patch?id=32b31b484cb13009bd8081c4106e4cf064ec2f1f";
       sha256 = "sha256-SczbXtsxBkCO+izH8XOBcrJEO2f7MdtYVT3+2fCV8wU=";
     })
+    # CVE-2023-45866 / https://github.com/skysafe/reblog/tree/main/cve-2023-45866
+    (fetchpatch {
+      name = "CVE-2023-45866.patch";
+      url = "https://git.kernel.org/pub/scm/bluetooth/bluez.git/patch/profiles/input?id=25a471a83e02e1effb15d5a488b3f0085eaeb675";
+      sha256 = "sha256-IuPQ18yN0EO/PkqdT/JETyOxdZCKewBiDjGN4CG2GLo=";
+    })
   ];
 
   buildInputs = [