ceph: apply patch for CVE-2020-10753

Fixes: CVE-2020-10753
2020-06-26 14:46:16 +02:00 · 2020-06-26 14:46:16 +02:00 · f76a83c2c6
commit f76a83c2c6
parent 8828a1d8bc
1 changed files with 6 additions and 0 deletions
--- a/pkgs/tools/filesystems/ceph/default.nix
+++ b/pkgs/tools/filesystems/ceph/default.nix
@ -106,6 +106,12 @@ in rec {

    patches = [
      ./0000-fix-SPDK-build-env.patch
+      (fetchurl {
+        # Remove for Ceph > v15.2.3; https://www.openwall.com/lists/oss-security/2020/06/25/5
+        name = "CVE-2020-10753.patch";
+        url = "https://github.com/ceph/ceph/pull/35773/commits/1524d3c0c5cb11775313ea1e2bb36a93257947f2.patch";
+        sha256 = "1c04kirijp4c8a5pgwqx17dzdnzvd29nl2nr3qdvf4fkqwnlf48s";
+      })
    ];

    nativeBuildInputs = [