From e121ca2c8f2caec2c02d1983a16374db1920f663 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Thu, 28 Apr 2022 15:37:14 +0200 Subject: [PATCH] cifs-utils: fix information disclosure in logger https://github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379 Fixes: CVE-2022-29869 --- pkgs/os-specific/linux/cifs-utils/default.nix | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/pkgs/os-specific/linux/cifs-utils/default.nix b/pkgs/os-specific/linux/cifs-utils/default.nix index e7a4a7f1de51..e4635a915efb 100644 --- a/pkgs/os-specific/linux/cifs-utils/default.nix +++ b/pkgs/os-specific/linux/cifs-utils/default.nix @@ -18,6 +18,12 @@ stdenv.mkDerivation rec { url = "https://github.com/piastry/cifs-utils/commit/007c07fd91b6d42f8bd45187cf78ebb06801139d.patch"; sha256 = "sha256-3uoHso2q17r2bcEW+ZjYUWsW4OIGYA7kxYZxQQy0JOg="; }) + (fetchpatch { + # Fix disclosure of invalid credential configuration in verbose mode + name = "CVE-2022-29869.patch"; + url = "https://github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379.patch"; + sha256 = "sha256-MjfreeL1ME550EYK9LPOUAAjIk1BoMGfb+pQe3A1bz8="; + }) ]; nativeBuildInputs = [ autoreconfHook docutils pkg-config ];