diff options
| author | Maximilian Bosch <maximilian@mbosch.me> | 2021-01-05 19:39:28 +0100 |
|---|---|---|
| committer | Maximilian Bosch <maximilian@mbosch.me> | 2021-01-05 19:39:28 +0100 |
| commit | 08d77caac01d567acf1816c36cd16f38fecf41b2 (patch) | |
| tree | a3949bb88f41d96c05ebbbbc77b1bb3d8897f2ef /pkgs/tools/networking/tcpdump | |
| parent | b8da2979c562f546f42a5286698720ac153fb2b5 (diff) | |
tcpdump: fix CVE-2020-8037
https://nvd.nist.gov/vuln/detail/CVE-2020-8037
Diffstat (limited to 'pkgs/tools/networking/tcpdump')
| -rw-r--r-- | pkgs/tools/networking/tcpdump/default.nix | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/tools/networking/tcpdump/default.nix b/pkgs/tools/networking/tcpdump/default.nix index fd7b203fbbf43..fa555ad4f99ce 100644 --- a/pkgs/tools/networking/tcpdump/default.nix +++ b/pkgs/tools/networking/tcpdump/default.nix @@ -1,4 +1,4 @@ -{ stdenv, fetchurl, libpcap, perl }: +{ stdenv, fetchurl, libpcap, perl, fetchpatch }: stdenv.mkDerivation rec { pname = "tcpdump"; @@ -9,6 +9,14 @@ stdenv.mkDerivation rec { sha256 = "0434vdcnbqaia672rggjzdn4bb8p8dchz559yiszzdk0sjrprm1c"; }; + patches = [ + # Patch for CVE-2020-8037 + (fetchpatch { + url = "https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231.patch"; + sha256 = "sha256-bO3aV032ru9+M/9isBRjmH8jTZLKj9Zf9ha2rmOaZwc="; + }) + ]; + postPatch = '' patchShebangs tests ''; |