libusbmuxd, libimobiledevice: Fix CVE-2016-5104

2016-07-10 10:46:22 +02:00
parent f1f6dc9b87
commit 77f2fff41d
2 changed files with 16 additions and 3 deletions
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl, pkgconfig, libplist }:
+{ stdenv, fetchurl, fetchpatch, pkgconfig, libplist }:

 stdenv.mkDerivation rec {
  name = "libusbmuxd-1.0.10";
@@ -7,6 +7,13 @@ stdenv.mkDerivation rec {
    sha256 = "1wn9zq2224786mdr12c5hxad643d29wg4z6b7jn888jx4s8i78hs";
  };

+  patches = [
+    (fetchpatch { # CVE-2016-5104
+      url = "https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed61ce6482614196.patch";
+      sha256 = "0cl3vys7bkwbdzf64d0rz3zlqpfc30w4l7j49ljv01agh42ywhgk";
+    })
+  ];
+
  nativeBuildInputs = [ pkgconfig ];
  buildInputs = [ libplist ];