nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-28 09:53:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

linux_4_9: patch for CVE-2017-5986

Browse Source 
Seems fairly low impact[1] but we might as well patch it until a new 4.9
version is released

[1]: https://bugzilla.redhat.com/show_bug.cgi?id=1420276
This commit is contained in:
Joachim Fasting 2017-02-17 19:09:50 +01:00
parent 73577a2b05
commit e8007c0e89
No known key found for this signature in database
GPG Key ID: 7544761007FE4E08
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
pkgs/os-specific/linux/kernel/patches.nix
View File

@ -175,4 +175,13 @@ rec {
};
};
sctp_bug_on_CVE_2017_5986 = rec
{ name = "sctp_BUG_ON_CVE_2017_5986.patch";
patch = fetchpatch {
inherit name;
url = "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/patch/?id=2dcab598484185dea7ec22219c76dcdd59e3cb90";
sha256 = "15np10bfm5yzby9zbkrh23qpm91wnprblsk0xn9yjryypnz8njxh";
};
};
}

1
pkgs/top-level/all-packages.nix
View File

@ -11294,6 +11294,7 @@ with pkgs;
# !!! 4.7 patch doesn't apply, 4.9 patch not up yet, will keep checking
# kernelPatches.cpu-cgroup-v2."4.7"
kernelPatches.modinst_arg_list_too_long
kernelPatches.sctp_bug_on_CVE_2017_5986
]
++ lib.optionals ((platform.kernelArch or null) == "mips")
[ kernelPatches.mips_fpureg_emu