Merge pull request #294821 from risicle/ris-frr-CVE-2024-27913

frr: add patch for CVE-2024-27913
This commit is contained in:
Thomas Gerbet 2024-03-11 23:58:29 +01:00 committed by GitHub
commit 37fe5f6f77
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -1,6 +1,7 @@
{ lib
, stdenv
, fetchFromGitHub
, fetchpatch
# build time
, autoreconfHook
@ -94,6 +95,15 @@ stdenv.mkDerivation rec {
hash = "sha256-oDPr51vI+tlT1IiUPufmZh/UE0TNKWrn4RqpnGoGxNo=";
};
patches = [
# fixes crash in OSPF TE parsing
(fetchpatch {
name = "CVE-2024-27913.patch";
url = "https://github.com/FRRouting/frr/commit/541503eecd302d2cc8456167d130014cd2cf1134.patch";
hash = "sha256-7NxPlQK/6lbLs/NqNi4OZ2uBWfXw99SiXDR6okNvJlg=";
})
];
nativeBuildInputs = [
autoreconfHook
bison