bzip2: patch CVE-2019-12900

The vulnerability seems quite serious. It isn't practical to use fetchpatch here due to bootstrapping, so I just committed the small patch file.
2019-06-22 11:58:21 +02:00
parent ffd9bf7e29
commit 4fd6cb7abd
2 changed files with 14 additions and 0 deletions
@@ -22,6 +22,7 @@ stdenv.mkDerivation rec {

  patches = [
    ./CVE-2016-3189.patch
+    ./cve-2019-12900.patch
  ];

  postPatch = ''