Unverified Commit 107f8b57 authored by Yohann Boniface's avatar Yohann Boniface Committed by GitHub
Browse files

haproxy: apply patch for CVE-2025-11230 (#448541)

parents 9dc2909a dc8a6de5

pkgs/by-name/ha/haproxy/package.nix

+9 −0
Original line number Diff line number Diff line
@@ -6,6 +6,7 @@ 
  stdenv,

  lib,

  fetchurl,

  fetchpatch,

  nixosTests,

  zlib,

  libxcrypt,
@@ -49,6 +50,14 @@ stdenv.mkDerivation (finalAttrs: { 
    hash = "sha256-dzFqPhtsOSRbwR71j01trdBjwBTBuuyPDYF5jFGeBys=";

  };



  patches = [

    (fetchpatch {

      name = "CVE-2025-11230.patch";

      url = "https://github.com/haproxy/haproxy/commit/06675db4bf234ed17e14305f1d59259d2fe78b06.patch";

      hash = "sha256-ULHN2gj4TZHUEDIJ6FAaRoyth/wz4VhXOf6maFfkhJA=";

    })

  ];



  buildInputs = [

    sslPkg

    zlib