glibc: patch CVE-2018-11236, CVE-2018-11237

Patches have been imported into nixpkgs and manually edited to avoid merge conflicts on ChangeLog / NEWS files.
2019-10-03 00:03:11 +02:00
parent 3a4658ea04
commit 17be09a1f0
3 changed files with 206 additions and 0 deletions
@@ -92,6 +92,11 @@ stdenv.mkDerivation ({
        url = "https://salsa.debian.org/glibc-team/glibc/raw/49767c9f7de4828220b691b29de0baf60d8a54ec/debian/patches/localedata/locale-C.diff";
        sha256 = "0irj60hs2i91ilwg5w7sqrxb695c93xg0ik7yhhq9irprd7fidn4";
      })
+
+      # https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=5460617d1567657621107d895ee2dd83bc1f88f2
+      ./CVE-2018-11236.patch
+      # https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=f51c8367685dc888a02f7304c729ed5277904aff
+      ./CVE-2018-11237.patch
    ]
    ++ lib.optional stdenv.isx86_64 ./fix-x64-abi.patch
    ++ lib.optional stdenv.hostPlatform.isMusl ./fix-rpc-types-musl-conflicts.patch