diff options
| author | Thomas Gerbet <thomas@gerbet.me> | 2024-04-30 22:31:10 +0200 |
|---|---|---|
| committer | github-actions[bot] <github-actions[bot]@users.noreply.github.com> | 2024-05-01 02:08:28 +0000 |
| commit | 68b7b43d31c8e44a2ca82a7c40e0db6a767b23e5 (patch) | |
| tree | 7cce9ba5524d5335a720dc64451ec7f2f0572840 /pkgs/development | |
| parent | 95d1b593aab60766964d22d8ec0b0847678bdee2 (diff) | |
libvirt: apply patches for CVE-2024-2494 and CVE-2024-1441
(cherry picked from commit 3593d46b31c0002775fc9369523b39b6ae820930)
Diffstat (limited to 'pkgs/development')
| -rw-r--r-- | pkgs/development/libraries/libvirt/default.nix | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/pkgs/development/libraries/libvirt/default.nix b/pkgs/development/libraries/libvirt/default.nix index 4c3740e4ba7c2..8c287870e6a88 100644 --- a/pkgs/development/libraries/libvirt/default.nix +++ b/pkgs/development/libraries/libvirt/default.nix @@ -9,6 +9,7 @@ , dnsmasq , docutils , fetchFromGitLab +, fetchpatch , gettext , glib , gnutls @@ -126,6 +127,16 @@ stdenv.mkDerivation rec { patches = [ ./0001-meson-patch-in-an-install-prefix-for-building-on-nix.patch + (fetchpatch { + name = "CVE-2024-2494.patch"; + url = "https://gitlab.com/libvirt/libvirt/-/commit/8a3f8d957507c1f8223fdcf25a3ff885b15557f2.patch"; + hash = "sha256-kxSIZ4bPOhN6PpJepoSF+EDTgdmazRWh3a3KSVfm1GU="; + }) + (fetchpatch { + name = "CVE-2024-1441.patch"; + url = "https://gitlab.com/libvirt/libvirt/-/commit/c664015fe3a7bf59db26686e9ed69af011c6ebb8.patch"; + hash = "sha256-Qi/gk7+NPz9s9OpWOnF8XW6A75C9BbVxBTE4KVwalo4="; + }) ] ++ lib.optionals enableZfs [ (substituteAll { src = ./0002-substitute-zfs-and-zpool-commands.patch; |