Upgrade sudo CVE-2021-3156

diff --git a/overlays/default.nix b/overlays/default.nix
index ee1f7dcbd7b502c8048813327005e4764b164d90..a0af9bf8e374f323741c096384e4679be26372c9 100644 (file)
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -26,6 +26,7 @@
   sc-im = import ./sc-im;
   shaarli = import ./shaarli;
   slrn = import ./slrn;
+  sudo = import ./sudo;
   taskwarrior = import ./taskwarrior;
   vcsh = import ./vcsh;
   weboob = import ./weboob;

diff --git a/overlays/sudo/default.nix b/overlays/sudo/default.nix
new file mode 100644 (file)
index 0000000..27fb678
--- /dev/null
+++ b/overlays/sudo/default.nix
@@ -0,0 +1,10 @@
+self: super: {
+  sudo = super.sudo.overrideAttrs (old: rec {
+    version = "1.9.5p2";
+    pname   = "sudo";
+    src = self.fetchurl {
+      url = "https://www.sudo.ws/dist/${pname}-${version}.tar.gz";
+      sha256 = "0y093z4f3822rc88g9asdch12nljdamp817vjxk04mca7ks2x7jk";
+    };
+  });
+}