Merge pull request #91053 from veprbl/pr/root5_CVE-2017-1000203

[20.03] root5: fix CVE-2017-1000203
NixOS · Jun 22, 2020 · 0e22213 · 0e22213
2 parents 9c42eb7 + 7e37d80
commit 0e22213
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkgs/applications/science/misc/root/5.nix b/pkgs/applications/science/misc/root/5.nix
@@ -32,6 +32,12 @@ stdenv.mkDerivation rec {
     # disable dictionary generation for stuff that includes libc headers
     # our glibc requires a modern compiler
     ./disable_libc_dicts_root5.patch
+
+    (fetchpatch {
+      name = "CVE-2017-1000203.patch";
+      url = "https://github.com/root-project/root/commit/a568e80022ae6ffbfa0a908d625c986ee857cc0f.diff";
+      sha256 = "0fxiwh36ry2w98a7sw74z9rnp686vrddxmd34wkvjnj9alry9i5f";
+    })
   ];
 
   preConfigure = ''