diff options
| author | Vladimír Čunát <v@cunat.cz> | 2025-08-09 09:48:19 +0200 |
|---|---|---|
| committer | Vladimír Čunát <v@cunat.cz> | 2025-08-09 09:48:19 +0200 |
| commit | 85dbfc7aaf52ecb755f87e577ddbe6dbbdbc1054 (patch) | |
| tree | f074abe7cc94037c40dde2c416ee4fe44d889dfa | |
| parent | python3Packages.ping3: 4.0.8 -> 5.1.3 (#432189) (diff) | |
| parent | busybox: apply Alpine's patch for tar TOCTOU (diff) | |
| download | nixpkgs-85dbfc7aaf52ecb755f87e577ddbe6dbbdbc1054.tar.gz | |
busybox: apply Alpine's patch for tar TOCTOU (#431370)origin/nixos-unstable
| -rw-r--r-- | pkgs/os-specific/linux/busybox/default.nix | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/busybox/default.nix b/pkgs/os-specific/linux/busybox/default.nix index ef7b545ed548..ed1f723d5ee2 100644 --- a/pkgs/os-specific/linux/busybox/default.nix +++ b/pkgs/os-specific/linux/busybox/default.nix @@ -106,6 +106,10 @@ stdenv.mkDerivation rec { url = "https://git.alpinelinux.org/aports/plain/main/busybox/CVE-2023-42364-CVE-2023-42365.patch?id=8a4bf5971168bf48201c05afda7bee0fbb188e13"; hash = "sha256-nQPgT9eA1asCo38Z9X7LR9My0+Vz5YBPba3ARV3fWcc="; }) + (fetchurl { + url = "https://git.alpinelinux.org/aports/plain/main/busybox/0001-tar-fix-TOCTOU-symlink-race-condition.patch?id=9e42dea5fba84a8afad1f1910b7d3884128a567e"; + hash = "sha256-GmXQhwB1/IPVjXXpGi5RjRvuGJgIMIb7lQKB63m306g="; + }) ] ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) ./clang-cross.patch; |