rsync: 3.1.2 -> 3.1.3
The CVE patches weren't previously applied because they depend on the enableCopyDevicesPatch parameter. The naming of the patches attribute in base.nix was misleading. The new rsync release now really fixes: * CVE-2017-15994 * CVE-2017-16548 * CVE-2017-17433 * CVE-2017-17434
This commit is contained in:
@@ -13,7 +13,7 @@ stdenv.mkDerivation rec {
|
||||
|
||||
mainSrc = base.src;
|
||||
|
||||
patchesSrc = base.patches;
|
||||
patchesSrc = base.upstreamPatchTarball;
|
||||
|
||||
srcs = [mainSrc] ++ stdenv.lib.optional enableCopyDevicesPatch patchesSrc;
|
||||
patches = stdenv.lib.optional enableCopyDevicesPatch "./patches/copy-devices.diff";
|
||||
|
||||
Reference in New Issue
Block a user