unzip: apply patch for CVE-2021-4217 (#347338)

2024-10-09 13:48:52 -04:00
parent 5fef96b380 b41deedb62
commit 8a59865bb2
1 changed files with 5 additions and 0 deletions
@@ -63,6 +63,11 @@ stdenv.mkDerivation rec {
    # Clang 16 makes implicit declarations an error by default for C99 and newer, causing the
    # configure script to fail to detect errno and the directory libraries on Darwin.
    ./implicit-declarations-fix.patch
+    (fetchurl {
+      name = "CVE-2021-4217.patch";
+      url = "https://git.launchpad.net/ubuntu/+source/unzip/plain/debian/patches/CVE-2021-4217.patch?id=94a790fcbb5d6c53cdf5d786bcaa0b8dc10309b6";
+      hash = "sha256-YKE4jVNSlrHLbszXNYYRtAQs0ly4AsodEz6tadMIVqE=";
+    })
  ] ++ lib.optional enableNLS
    (fetchurl {
      url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/app-arch/unzip/files/unzip-6.0-natspec.patch?id=56bd759df1d0c750a065b8c845e93d5dfa6b549d";