unzip: patch for CVE-2014-9913 and CVE-2016-9844

2016-12-15 17:17:58 -05:00
parent 4fa5237984
commit 5cbb0f7fbf
3 changed files with 59 additions and 0 deletions
@@ -18,6 +18,8 @@ stdenv.mkDerivation {
    ./CVE-2014-9636.diff
    ./CVE-2015-7696.diff
    ./CVE-2015-7697.diff
+    ./CVE-2014-9913.patch
+    ./CVE-2016-9844.patch
  ] ++ stdenv.lib.optional enableNLS
    (fetchurl {
      url = "http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-arch/unzip/files/unzip-6.0-natspec.patch?revision=1.1";