unzip: Patch for CVE-2014-81{39,40,41}.

2015-01-08 11:29:40 -08:00
parent d05329620f
commit 173f41cf0b
4 changed files with 214 additions and 1 deletions
@@ -9,7 +9,11 @@ stdenv.mkDerivation {
    sha256 = "0dxx11knh3nk95p2gg2ak777dd11pr7jx5das2g49l262scrcv83";
  };

-  patches = stdenv.lib.optional enableNLS
+  patches = [
+    ./CVE-2014-8139.diff
+    ./CVE-2014-8140.diff
+    ./CVE-2014-8141.diff
+  ] ++ stdenv.lib.optional enableNLS
    (fetchurl {
      url = "http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-arch/unzip/files/unzip-6.0-natspec.patch?revision=1.1";
      name = "unzip-6.0-natspec.patch";