lsyncd: patch CVE-2014-8990

1 files changed, 10 insertions, 2 deletions

diff --git a/Library/Formula/lsyncd.rb b/Library/Formula/lsyncd.rb
index a82f09c32..4aa1dec00 100644
--- a/Library/Formula/lsyncd.rb
+++ b/Library/Formula/lsyncd.rb
@@ -4,6 +4,8 @@ class Lsyncd < Formula
   homepage "https://github.com/axkibe/lsyncd"
   url "https://github.com/axkibe/lsyncd/archive/release-2.1.5.tar.gz"
   sha1 "2b8eb169365edc54488a97435bbd39ae4a6731b8"
+  revision 2
+
   bottle do
     cellar :any
     sha1 "9d8e796c4e05ca50bcbdae0053ed14d03626be6c" => :yosemite
@@ -11,8 +13,6 @@ class Lsyncd < Formula
     sha1 "6241af90c682dbe7fb10918faa0d0a1ad63d22f2" => :mountain_lion
   end
 
-  revision 1
-
   depends_on "autoconf" => :build
   depends_on "automake" => :build
   depends_on "asciidoc" => :build
@@ -50,6 +50,14 @@ class Lsyncd < Formula
     end
   end
 
+  # patch for CVE-2014-8990
+  # https://github.com/axkibe/lsyncd/commit/e9ffda07f0145f50f2756f8ee3fb0775b455122b
+  # https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8990
+  patch do
+    url "https://gist.githubusercontent.com/tdsmith/d807811d3c6965b0221e/raw/965545662eec39b60d50645487e6ade9d7d43834/cve-2014-8990.diff"
+    sha1 "3ef7d28db8a5e1719a0b7298cb204809f6b5d9d7"
+  end
+
   def install
     # XNU Headers
     resource("xnu").stage buildpath/"xnu"