glibc: patch CVE-2020-1752

/cc roundup #88306; the issue seems quite serious to me. I also made two other patches non-conditional, as we rebuild all platforms anyway.
2020-05-31 09:11:45 +02:00
parent c2039e1901
commit 3f08d642fe
2 changed files with 64 additions and 2 deletions
@@ -106,10 +106,10 @@ stdenv.mkDerivation ({
        url = "https://salsa.debian.org/glibc-team/glibc/raw/49767c9f7de4828220b691b29de0baf60d8a54ec/debian/patches/localedata/locale-C.diff";
        sha256 = "0irj60hs2i91ilwg5w7sqrxb695c93xg0ik7yhhq9irprd7fidn4";
      })
-    ]
-    ++ lib.optionals stdenv.isx86_64 [
+
      ./fix-x64-abi.patch
      ./2.27-CVE-2019-19126.patch
+      ./2.30-cve-2020-1752.patch
    ]
    ++ lib.optional stdenv.hostPlatform.isMusl ./fix-rpc-types-musl-conflicts.patch
    ++ lib.optional stdenv.buildPlatform.isDarwin ./darwin-cross-build.patch;