Merge pull request #120099 from risicle/ris-clamav-CVE-2021-1405-r20.09

[20.09] clamav: add patch for CVE-2021-1405
NixOS · Apr 21, 2021 · 50c40f0 · 50c40f0
2 parents 1260397 + 7d8cf3e
commit 50c40f0
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/pkgs/tools/security/clamav/default.nix b/pkgs/tools/security/clamav/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl, pkgconfig
+{ stdenv, fetchurl, fetchpatch, pkgconfig
 , zlib, bzip2, libiconv, libxml2, openssl, ncurses, curl, libmilter, pcre2
 , libmspack, systemd, Foundation
 }:
@@ -12,6 +12,14 @@ stdenv.mkDerivation rec {
     sha256 = "06rrzyrhnr0rswryijpbbzywr6387rv8qjq8sb8cl3h2d1m45ggf";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2021-1405.patch";
+      url = "https://github.com/Cisco-Talos/clamav-devel/commit/0c1ec30f9a292b0a5eca4aaaa651150aa5712d6d.patch";
+      sha256 = "0ygqiv9ldwhhnlwxkz91bab4hnzfwczf96mqm1bsa4gz9wmshlks";
+    })
+  ];
+
   # don't install sample config files into the absolute sysconfdir folder
   postPatch = ''
     substituteInPlace Makefile.in --replace ' etc ' ' '