pkgs/development/libraries/db/CVE-2017-10140-cwd-db_config.patch

   1 --- db-5.3.28/src/env/env_open.c.old    2017-06-26 10:32:11.011419981 +0200
   2 +++ db-5.3.28/src/env/env_open.c        2017-06-26 10:32:46.893721233 +0200
   3 @@ -473,7 +473,7 @@
   4         env->db_mode = mode == 0 ? DB_MODE_660 : mode;
   5
   6         /* Read the DB_CONFIG file. */
   7 -       if ((ret = __env_read_db_config(env)) != 0)
   8 +       if (env->db_home != NULL && (ret = __env_read_db_config(env)) != 0)
   9                 return (ret);
  10
  11         /*