diff options
author | Ryan Burns <rtburns@protonmail.com> | 2021-10-27 21:34:32 -0700 |
---|---|---|
committer | Ryan Burns <rtburns@protonmail.com> | 2021-10-27 21:51:17 -0700 |
commit | 18451cb59a89470d587d7265c95d4d9b2938d75d (patch) | |
tree | ee92e0085edb242aa22f109fdaa4235857686923 /pkgs/applications | |
parent | 8652402ac5bc4dff28ac2b9cb37de6d621c9a706 (diff) |
qemu: fix CVE-2021-3713
Backport patch from 6.2.0-rc0
Diffstat (limited to 'pkgs/applications')
-rw-r--r-- | pkgs/applications/virtualization/qemu/default.nix | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/pkgs/applications/virtualization/qemu/default.nix b/pkgs/applications/virtualization/qemu/default.nix index 224969cc2649c..4e0f459ac287f 100644 --- a/pkgs/applications/virtualization/qemu/default.nix +++ b/pkgs/applications/virtualization/qemu/default.nix @@ -92,6 +92,11 @@ stdenv.mkDerivation rec { sha256 = "09xz06g57wxbacic617pq9c0qb7nly42gif0raplldn5lw964xl2"; revert = true; }) + (fetchpatch { + name = "CVE-2021-3713.patch"; # remove with next release + url = "https://gitlab.com/qemu-project/qemu/-/commit/13b250b12ad3c59114a6a17d59caf073ce45b33a.patch"; + sha256 = "0lkzfc7gdlvj4rz9wk07fskidaqysmx8911g914ds1jnczgk71mf"; + }) ] ++ lib.optional nixosTestRunner ./force-uid0-on-9p.patch ++ lib.optionals stdenv.hostPlatform.isMusl [ (fetchpatch { |