Vulnerability roundup 93: avahi-0.7: 1 advisory [9.1]

[ckauhaus]

search, files

• CVE-2017-6519 CVSSv3=9.1 (nixos-20.03)

Scanned versions: nixos-20.03: 0d0660f.

Cc @globin
Cc @lovek323

[redvers]

patches = [
    ./no-mkdir-localstatedir.patch
    (fetchpatch {
      name ="CVE-2017-6519-CVE-2018-100084.patch";
      url = "https://github.com/lathiat/avahi/commit/e111def44a7df4624a4aa3f85fe98054bffb6b4f.patch";
      sha256 = "06n7b7kz6xcc35c7xjfc1kj3k2llyjgi09nhy0ci32l1bhacjw0q";
    })
  ];

Patches are in place already,

[ckauhaus]

This issue got created while vulnix' patch detection was broken. This has been fixed in the meantime. Sorry for the noise.

[redvers]

No problemo <3