Merge pull request #199651 from aaronjheng/sudo

sudo: 1.9.12 -> 1.9.12p1
This commit is contained in:
Pierre Bourdon 2022-11-05 15:08:50 +01:00 committed by GitHub
commit ae496a644e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,7 +1,6 @@
{ lib
, stdenv
, fetchurl
, fetchpatch
, buildPackages
, coreutils
, pam
@ -15,21 +14,13 @@
stdenv.mkDerivation rec {
pname = "sudo";
version = "1.9.12";
version = "1.9.12p1";
src = fetchurl {
url = "https://www.sudo.ws/dist/${pname}-${version}.tar.gz";
hash = "sha256-3hVzOIgXDFaDTar9NL+YPbEPshA5dC/Pw5a9MhaNY2I=";
hash = "sha256-R1oYqOs9qLKRfOqwY6a69R6gkSjDxH4+DjOrdJe6t9g=";
};
patches = [
(fetchpatch {
name = "CVE-2022-43995.patch";
url = "https://github.com/sudo-project/sudo/commit/bd209b9f16fcd1270c13db27ae3329c677d48050.patch";
sha256 = "sha256-JUdoStoSyv6KBPsyzxuMIxqwZMZsjUPj8zUqOSvmZ1A=";
})
];
prePatch = ''
# do not set sticky bit in nix store
substituteInPlace src/Makefile.in --replace 04755 0755