Merge pull request #228190 from risicle/ris-screen-CVE-2023-24626

screen: add patch from CVE-2023-24626
This commit is contained in:
Maximilian Bosch 2023-04-26 21:12:25 +02:00 committed by GitHub
commit e506555f21
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1,4 +1,13 @@
{ lib, stdenv, fetchurl, autoreconfHook, ncurses, libxcrypt, utmp, pam ? null }:
{ lib
, stdenv
, fetchurl
, fetchpatch
, autoreconfHook
, ncurses
, libxcrypt
, utmp
, pam ? null
}:
stdenv.mkDerivation rec {
pname = "screen";
@ -9,6 +18,15 @@ stdenv.mkDerivation rec {
sha256 = "1x1hqy4h47i7hk85f779lkwkm7gkq8h8mxwd0znkh5adpf0m4czr";
};
patches = [
(fetchpatch {
name = "CVE-2023-24626.patch";
url = "https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7";
stripLen = 1;
sha256 = "sha256-NV6Uh4h9AK7kQMHqbxeuhjFEvwQH7OWdu7h8pZCGFog=";
})
];
configureFlags= [
"--enable-telnet"
"--enable-pam"