oauth2_proxy: add patch for CVE-2021-21291

NixOS · Apr 19, 2021 · d266f7e · d266f7e
1 parent 7c23e16
commit d266f7e
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/pkgs/servers/oauth2_proxy/default.nix b/pkgs/servers/oauth2_proxy/default.nix
@@ -1,4 +1,4 @@
-{ lib, buildGoModule, fetchFromGitHub }:
+{ lib, buildGoModule, fetchFromGitHub, fetchpatch }:
 
 buildGoModule rec {
   pname = "oauth2-proxy";
@@ -11,6 +11,14 @@ buildGoModule rec {
     rev = "v${version}";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2021-21291.patch";
+      url = "https://github.com/oauth2-proxy/oauth2-proxy/commit/780ae4f3c99b579cb2ea9845121caebb6192f725.patch";
+      sha256 = "066cr6ml69pinw3j9rspjy2h3dvqmf4bvmdxvalb1ws3z0xkn4ag";
+    })
+  ];
+
   vendorSha256 = "1hrk3h729kcc77fq44kiywmyzk5a78v7bm5d2yl76lfxxdcdric7";
 
   # Taken from https://github.com/oauth2-proxy/oauth2-proxy/blob/master/Makefile