gnu: shadow: Fix CVE-2017-2616.

* gnu/packages/patches/shadow-CVE-2017-2616.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/admin.scm (shadow): Use it.
This commit is contained in:
Leo Famulari 2017-02-23 14:35:00 -05:00
parent 9f05908fb1
commit 1c851cbe0c
No known key found for this signature in database
GPG key ID: 2646FA30BACA7F08
3 changed files with 75 additions and 1 deletions

View file

@ -276,7 +276,8 @@ client and server, a telnet client and server, and an rsh client and server.")
(uri (string-append
"https://github.com/shadow-maint/shadow/releases/"
"download/" version "/shadow-" version ".tar.xz"))
(patches (search-patches "shadow-4.4-su-snprintf-fix.patch"))
(patches (search-patches "shadow-4.4-su-snprintf-fix.patch"
"shadow-CVE-2017-2616.patch"))
(sha256
(base32
"0g7hf55ar2pafg5g3ldx0fwzjk36wf4xb21p4ndanbjm3c2a9ab1"))))