From 86c40d69d72bd7085ee4e6108fa1dc6ff3be9184 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Isma=C3=ABl=20Bouya?= <ismael.bouya@normalesup.org>
Date: Tue, 26 Jan 2021 23:18:36 +0100
Subject: [PATCH] Upgrade sudo CVE-2021-3156

---
 overlays/default.nix      |  1 +
 overlays/sudo/default.nix | 10 ++++++++++
 2 files changed, 11 insertions(+)
 create mode 100644 overlays/sudo/default.nix

diff --git a/overlays/default.nix b/overlays/default.nix
index ee1f7dc..a0af9bf 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -26,6 +26,7 @@
   sc-im = import ./sc-im;
   shaarli = import ./shaarli;
   slrn = import ./slrn;
+  sudo = import ./sudo;
   taskwarrior = import ./taskwarrior;
   vcsh = import ./vcsh;
   weboob = import ./weboob;
diff --git a/overlays/sudo/default.nix b/overlays/sudo/default.nix
new file mode 100644
index 0000000..27fb678
--- /dev/null
+++ b/overlays/sudo/default.nix
@@ -0,0 +1,10 @@
+self: super: {
+  sudo = super.sudo.overrideAttrs (old: rec {
+    version = "1.9.5p2";
+    pname   = "sudo";
+    src = self.fetchurl {
+      url = "https://www.sudo.ws/dist/${pname}-${version}.tar.gz";
+      sha256 = "0y093z4f3822rc88g9asdch12nljdamp817vjxk04mca7ks2x7jk";
+    };
+  });
+}
-- 
2.41.0