diff options
| author | Robert Scott <code@humanleg.org.uk> | 2022-04-24 01:39:06 +0100 |
|---|---|---|
| committer | Jonathan Ringer <jonringer@users.noreply.github.com> | 2022-05-09 10:37:16 -0700 |
| commit | 862bdf3a2015b146f206573969268ad21ffe54e4 (patch) | |
| tree | 99f401a8c60f23301258402f172050e07d60fdca | |
| parent | Merge pull request #171296 from risicle/ris-clickhouse-21.8.15.7-r21.11 (diff) | |
| download | nixpkgs-862bdf3a2015b146f206573969268ad21ffe54e4.tar.gz | |
traefik: add patch for CVE-2022-23632
| -rw-r--r-- | pkgs/servers/traefik/default.nix | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/servers/traefik/default.nix b/pkgs/servers/traefik/default.nix index fab7806bac53..424e24380932 100644 --- a/pkgs/servers/traefik/default.nix +++ b/pkgs/servers/traefik/default.nix @@ -1,4 +1,4 @@ -{ lib, fetchzip, buildGoModule, go-bindata, nixosTests }: +{ lib, fetchzip, buildGoModule, go-bindata, nixosTests, fetchpatch }: buildGoModule rec { pname = "traefik"; @@ -12,6 +12,14 @@ buildGoModule rec { vendorSha256 = "sha256-NyIPT2NmJFB1wjNNteAEpTPYSYQZtEWJBOvG0YtxUGc="; + patches = [ + (fetchpatch { + name = "CVE-2022-23632.patch"; + url = "https://github.com/traefik/traefik/commit/0c83ee736ca4aa93bba2d4cce4c00fd247785915.patch"; + sha256 = "0sjd9mvkilnihs5y43gh4lijxkkrf4l9kx8jf89wzs1dy5jm6fl8"; + }) + ]; + doCheck = false; subPackages = [ "cmd/traefik" ]; |