Merge pull request #32347 from pbogdan/procmail-cve-2017-16844

procmail: fix CVE-2017-16844
This commit is contained in:
Gabriel Ebner 2017-12-06 12:18:49 +09:00 committed by GitHub
commit 51d5277c40
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -3,7 +3,14 @@
stdenv.mkDerivation {
name = "procmail-3.22";
patches = [ ./CVE-2014-3618.patch ];
patches = [
./CVE-2014-3618.patch
(fetchurl {
url = https://sources.debian.org/data/main/p/procmail/3.22-26/debian/patches/30;
sha256 = "11zmz1bj0v9pay3ldmyyg7473b80h89gycrhndsgg9q50yhcqaaq";
name = "CVE-2017-16844";
})
];
# getline is defined differently in glibc now. So rename it.
# Without the .PHONY target "make install" won't install anything on Darwin.