openssh: Disable roaming (security fix)

Fixes CVE-2016-0777 and CVE-0216-0778. Closes #12385.
2016-01-14 16:40:27 +01:00
parent 0fa58f4e01
commit 2d65772950
2 changed files with 52 additions and 1 deletions
@@ -36,7 +36,7 @@ stdenv.mkDerivation rec {
      export NIX_LDFLAGS="$NIX_LDFLAGS -lgcc_s"
    '';

-  patches = [ ./locale_archive.patch ./openssh-6.9p1-security-7.0.patch ]
+  patches = [ ./locale_archive.patch ./openssh-6.9p1-security-7.0.patch ./disable-roaming.patch ]
    ++ optional withGssapiPatches gssapiSrc;

  buildInputs = [ zlib openssl libedit pkgconfig pam ]