diff options
Diffstat (limited to 'pkgs/tools/compression/upx/default.nix')
| -rw-r--r-- | pkgs/tools/compression/upx/default.nix | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/tools/compression/upx/default.nix b/pkgs/tools/compression/upx/default.nix index aff00402ed97c..c556f31e6918a 100644 --- a/pkgs/tools/compression/upx/default.nix +++ b/pkgs/tools/compression/upx/default.nix @@ -1,4 +1,4 @@ -{ lib, stdenv, fetchurl, ucl, zlib, perl }: +{ lib, stdenv, fetchurl, ucl, zlib, perl, fetchpatch }: stdenv.mkDerivation rec { pname = "upx"; @@ -10,6 +10,14 @@ stdenv.mkDerivation rec { buildInputs = [ ucl zlib perl ]; + patches = [ + (fetchpatch { + url = "https://github.com/upx/upx/commit/13bc031163863cb3866aa6cdc018dff0697aa5d4.patch"; + sha256 = "sha256-7uazgx1lOgHh2J7yn3yb1q9lTJsv4BbexdGlWRiAG/M="; + name = "CVE-2021-20285.patch"; + }) + ]; + preConfigure = '' export UPX_UCLDIR=${ucl} ''; |