Merge pull request #95280 from risicle/ris-pure-ftpd-CVE-2020-9274

pure-ftpd: add patches for CVE-2020-9274, CVE-2020-9365
gstqt5
Martin Weinelt 2020-08-14 21:49:16 +02:00 committed by GitHub
commit cee1971dfd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 1 deletions

View File

@ -1,4 +1,4 @@
{ stdenv, fetchurl, openssl }:
{ stdenv, fetchurl, openssl, fetchpatch }:
stdenv.mkDerivation rec {
name = "pure-ftpd-1.0.49";
@ -8,6 +8,19 @@ stdenv.mkDerivation rec {
sha256 = "19cjr262n6h560fi9nm7l1srwf93k34bp8dp1c6gh90bqxcg8yvn";
};
patches = [
(fetchpatch {
name = "CVE-2020-9274.patch";
url = "https://github.com/jedisct1/pure-ftpd/commit/8d0d42542e2cb7a56d645fbe4d0ef436e38bcefa.patch";
sha256 = "1yd84p6bd4rf21hg3kqpi2a02cac6dz5ag4xx3c2dl5vbzhr5a8k";
})
(fetchpatch {
name = "CVE-2020-9365.patch";
url = "https://github.com/jedisct1/pure-ftpd/commit/bf6fcd4935e95128cf22af5924cdc8fe5c0579da.patch";
sha256 = "003klx7j82qf92qr1dxg32v5r2bhhywplynd3xil1lbcd3s3mqhi";
})
];
buildInputs = [ openssl ];
configureFlags = [ "--with-tls" ];