diff options
| author | Maximilian Bosch <maximilian@mbosch.me> | 2022-11-11 13:55:16 +0100 |
|---|---|---|
| committer | Maximilian Bosch <maximilian@mbosch.me> | 2022-11-12 12:22:32 +0100 |
| commit | c1135fc57de106496d14bfa4be1329741a705fa6 (patch) | |
| tree | 5fc6ed4c5069be11fd456542760ceb876c997a01 | |
| parent | Merge pull request #200589 from NixOS/kernel-updates (diff) | |
| download | nixpkgs-c1135fc57de106496d14bfa4be1329741a705fa6.tar.gz | |
redis: patch for CVE-2022-3647
https://nvd.nist.gov/vuln/detail/CVE-2022-3647
| -rw-r--r-- | pkgs/servers/nosql/redis/default.nix | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/pkgs/servers/nosql/redis/default.nix b/pkgs/servers/nosql/redis/default.nix index d10d8b8c073d..804070d0f0f5 100644 --- a/pkgs/servers/nosql/redis/default.nix +++ b/pkgs/servers/nosql/redis/default.nix @@ -1,5 +1,5 @@ { lib, stdenv, fetchurl, lua, pkg-config, nixosTests -, tcl, which, ps +, tcl, which, ps, fetchpatch , withSystemd ? stdenv.isLinux && !stdenv.hostPlatform.isStatic, systemd # dependency ordering is broken at the moment when building with openssl , tlsSupport ? !stdenv.hostPlatform.isStatic, openssl @@ -14,6 +14,15 @@ stdenv.mkDerivation rec { hash = "sha256-ZwVMw3tYwSXfk714AAJh7A70Q2omtA84Jix4DlYxXMM="; }; + patches = [ + # https://nvd.nist.gov/vuln/detail/CVE-2022-3647 + (fetchpatch { + name = "CVE-2022-3647.patch"; + url = "https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020a3.patch"; + sha256 = "sha256-R5Tj/bHFTRnvWXiOYvRulqePzU5zvKbGfpO87TLfLWk="; + }) + ]; + nativeBuildInputs = [ pkg-config ]; buildInputs = [ lua ] |