haproxy: fix CVE-2018-11469

(cherry picked from commit ea8b37c1c849b9c953f4beadb84cb061d75de40d)
release-18.03-flake
Andreas Rammhold 2018-06-04 22:10:16 +02:00
parent 4697ed67bd
commit cf1c5918c7
No known key found for this signature in database
GPG Key ID: E432E410B5E48C86
1 changed files with 9 additions and 1 deletions

View File

@ -1,6 +1,6 @@
{ useLua ? !stdenv.isDarwin
, usePcre ? true
, stdenv, fetchurl
, stdenv, fetchurl, fetchpatch
, openssl, zlib, lua5_3 ? null, pcre ? null
}:
@ -17,6 +17,14 @@ stdenv.mkDerivation rec {
sha256 = "00miblgwll3mycsgmp3gd3cn4lwsagxzgjxk5i6csnyqgj97fss3";
};
patches = [
(fetchpatch {
name = "CVE-2018-11469.patch";
url = "https://git.haproxy.org/?p=haproxy-1.8.git;a=patch;h=17514045e5d934dede62116216c1b016fe23dd06";
sha256 = "0hzcvghg8qz45n3mrcgsjgvrvicvbvm52cc4hs5jbk1yb50qvls7";
})
];
buildInputs = [ openssl zlib ]
++ stdenv.lib.optional useLua lua5_3
++ stdenv.lib.optional usePcre pcre;