From a348d05d075de14af58284b493cb78bb269ed890 Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Sat, 19 Aug 2023 20:04:27 +0100 Subject: sngrep: add patch for CVE-2023-36192 (cherry picked from commit 25fa8c87ba132365063d9234f5fbb84732432ec0) --- pkgs/applications/networking/sniffers/sngrep/default.nix | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/pkgs/applications/networking/sniffers/sngrep/default.nix b/pkgs/applications/networking/sniffers/sngrep/default.nix index f105450034ed..9adb7117808f 100644 --- a/pkgs/applications/networking/sniffers/sngrep/default.nix +++ b/pkgs/applications/networking/sniffers/sngrep/default.nix @@ -3,6 +3,7 @@ , autoconf , automake , fetchFromGitHub +, fetchpatch , libpcap , ncurses , openssl @@ -20,6 +21,14 @@ stdenv.mkDerivation rec { sha256 = "sha256-gFba2wOU4GwpOZTo5A2QpBgnC6OgDJEeyaPGHbA+7tA="; }; + patches = [ + (fetchpatch { + name = "CVE-2023-36192.patch"; + url = "https://github.com/irontec/sngrep/commit/ad1daf15c8387bfbb48097c25197bf330d2d98fc.patch"; + hash = "sha256-g8fxvxi3d7jmZEKTbxqw29hJbm/ShsKKxstsOUGxTug="; + }) + ]; + nativeBuildInputs = [ autoconf automake -- cgit v1.2.3