Merge pull request #133057 from MatthewCroughan/lynx-CVE-2021-38165

lynx: add patch for CVE-2021-38165
This commit is contained in:
Martin Weinelt 2021-08-08 01:41:50 +02:00 committed by GitHub
commit 98d712e023
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -2,6 +2,7 @@
, fetchurl, pkg-config, ncurses, gzip
, sslSupport ? true, openssl ? null
, nukeReferences
, fetchpatch
}:
assert sslSupport -> openssl != null;
@ -22,6 +23,14 @@ stdenv.mkDerivation rec {
hardeningEnable = [ "pie" ];
patches = [
(fetchpatch {
name = "CVE-2021-38165.patch";
url = "https://git.alpinelinux.org/aports/plain/main/lynx/CVE-2021-38165.patch?id=3400945dbbb8a87065360963e4caa0e17d3dcc61";
sha256 = "1aykb9y2g2vdpbbpvjlm4r40x7py2yv6jbywwcqcxrlciqcw4x57";
})
];
configureFlags = [
"--enable-default-colors"
"--enable-widec"