summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorArnout Engelen <arnout@bzzt.net>2023-11-24 10:36:33 +0100
committerArnout Engelen <arnout@bzzt.net>2023-11-24 10:36:49 +0100
commit73ff1fc601308d78b45759bc632aa69d2603f562 (patch)
treeeb51be35b6f0da2b09acc292f5e59793343a2b1b
parente4ad989506ec7d71f7302cc3067abd82730a4beb (diff)
avahi: apply patch for CVE-2023-38473
As no release appears to be imminent... https://github.com/lathiat/avahi/issues/503
-rw-r--r--pkgs/development/libraries/avahi/default.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/pkgs/development/libraries/avahi/default.nix b/pkgs/development/libraries/avahi/default.nix
index 772650bd3a8a..7fb9abf04979 100644
--- a/pkgs/development/libraries/avahi/default.nix
+++ b/pkgs/development/libraries/avahi/default.nix
@@ -51,6 +51,13 @@ stdenv.mkDerivation rec {
url = "https://github.com/lathiat/avahi/commit/a2696da2f2c50ac43b6c4903f72290d5c3fa9f6f.patch";
sha256 = "sha256-BEYFGCnQngp+OpiKIY/oaKygX7isAnxJpUPCUvg+efc=";
})
+ # CVE-2023-38473
+ # https://github.com/lathiat/avahi/pull/486
+ (fetchpatch {
+ name = "CVE-2023-38473.patch";
+ url = "https://github.com/lathiat/avahi/commit/b448c9f771bada14ae8de175695a9729f8646797.patch";
+ sha256 = "sha256-/ZVhsBkf70vjDWWG5KXxvGXIpLOZUXdRkn3413iSlnI=";
+ })
];
depsBuildBuild = [