Unverified Commit 8a59865b authored by Tristan Ross's avatar Tristan Ross Committed by GitHub
Browse files

unzip: apply patch for CVE-2021-4217 (#347338)

parents 5fef96b3 b41deedb

pkgs/tools/archivers/unzip/default.nix

+5 −0
Original line number Diff line number Diff line
@@ -63,6 +63,11 @@ stdenv.mkDerivation rec { 
    # Clang 16 makes implicit declarations an error by default for C99 and newer, causing the

    # configure script to fail to detect errno and the directory libraries on Darwin.

    ./implicit-declarations-fix.patch

    (fetchurl {

      name = "CVE-2021-4217.patch";

      url = "https://git.launchpad.net/ubuntu/+source/unzip/plain/debian/patches/CVE-2021-4217.patch?id=94a790fcbb5d6c53cdf5d786bcaa0b8dc10309b6";

      hash = "sha256-YKE4jVNSlrHLbszXNYYRtAQs0ly4AsodEz6tadMIVqE=";

    })

  ] ++ lib.optional enableNLS

    (fetchurl {

      url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/app-arch/unzip/files/unzip-6.0-natspec.patch?id=56bd759df1d0c750a065b8c845e93d5dfa6b549d";