glibc: add patch for CVE-2019-19126

including patch in-repo as it needs modification to remove the changes to NEWS but fetchpatch doesn't work here
2019-12-10 18:51:16 +01:00
parent 490f8ab122
commit 9234d1d6db
2 changed files with 22 additions and 1 deletions
@@ -98,7 +98,10 @@ stdenv.mkDerivation ({
      # https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=f51c8367685dc888a02f7304c729ed5277904aff
      ./CVE-2018-11237.patch
    ]
-    ++ lib.optional stdenv.isx86_64 ./fix-x64-abi.patch
+    ++ lib.optionals stdenv.isx86_64 [
+      ./fix-x64-abi.patch
+      ./2.27-CVE-2019-19126.patch
+    ]
    ++ lib.optional stdenv.hostPlatform.isMusl ./fix-rpc-types-musl-conflicts.patch
    ++ lib.optional stdenv.buildPlatform.isDarwin ./darwin-cross-build.patch