wireshark: patch for CVE-2017-6041

(cherry picked from commit 194d137)
NixOS · Feb 22, 2017 · 6e17350 · 6e17350
1 parent 142fd06
commit 6e17350
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/pkgs/applications/networking/sniffers/wireshark/default.nix b/pkgs/applications/networking/sniffers/wireshark/default.nix
@@ -29,7 +29,13 @@ stdenv.mkDerivation {
   ] ++ optional withQt qt4
     ++ (optionals withGtk [gtk pango cairo gdk_pixbuf]);
 
-  patches = [ ./wireshark-lookup-dumpcap-in-path.patch ];
+  patches = [ ./wireshark-lookup-dumpcap-in-path.patch
+  (fetchurl {
+    url = "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commitdiff_plain;h=c7042bedbb3b12c5f4e19e59e52da370d4ffe62f;hp=bc2b135677110d8065ba1174f09bc7f5ba73b9e9";
+    sha256 = "1m70akywf2r52lhlvzr720vl1i7ng9cqbzaiif8s81xs4g4nn2rz";
+    name = "wireshark-CVE-2017-6014.patch";
+  })
+  ];
 
   configureFlags = "--disable-usr-local --disable-silent-rules --with-ssl"
     + (if withGtk then