cvs: fix CVE-2017-12836

This patch is based on the work of the patch from Thorsten Glaser (MirBSD) [1] [1] http://www.mirbsd.org/cvs.cgi/src/gnu/usr.bin/cvs/src/rsh-client.c.diff?r1=1.6;r2=1.7
2017-11-07 17:01:45 +01:00
parent cfafd6f5a8
commit d0c8c66068
2 changed files with 30 additions and 0 deletions
@@ -11,6 +11,7 @@ stdenv.mkDerivation {
  patches = [
    ./getcwd-chroot.patch
    ./CVE-2012-0804.patch
+    ./CVE-2017-12836.patch
  ];

  hardeningDisable = [ "fortify" "format" ];