summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorArnout Engelen <arnout@bzzt.net>2023-11-26 16:13:50 +0100
committerArnout Engelen <arnout@bzzt.net>2023-11-26 16:13:50 +0100
commite89c902564486dfe87f409b9b1ea727e45a7dbd0 (patch)
tree2a0f7be85291224f44e149070bf289d496c738d5
parentfb22f402f47148b2f42d4767615abb367c1b7cfd (diff)
avahi: apply patch for CVE-2023-38472
-rw-r--r--pkgs/development/libraries/avahi/default.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/pkgs/development/libraries/avahi/default.nix b/pkgs/development/libraries/avahi/default.nix
index bcc1928d9249..df3d113dfd2c 100644
--- a/pkgs/development/libraries/avahi/default.nix
+++ b/pkgs/development/libraries/avahi/default.nix
@@ -65,6 +65,13 @@ stdenv.mkDerivation rec {
url = "https://github.com/lathiat/avahi/commit/b448c9f771bada14ae8de175695a9729f8646797.patch";
sha256 = "sha256-/ZVhsBkf70vjDWWG5KXxvGXIpLOZUXdRkn3413iSlnI=";
})
+ # CVE-2023-38472
+ # https://github.com/lathiat/avahi/pull/490 merged Oct 19
+ (fetchpatch {
+ name = "CVE-2023-38472.patch";
+ url = "https://github.com/lathiat/avahi/commit/b024ae5749f4aeba03478e6391687c3c9c8dee40.patch";
+ sha256 = "sha256-FjR8fmhevgdxR9JQ5iBLFXK0ILp2OZQ8Oo9IKjefCqk=";
+ })
# CVE-2023-38471
# https://github.com/lathiat/avahi/pull/494 merged Oct 24
(fetchpatch {