Unverified Commit 6d0adb4d authored by Thomas Gerbet's avatar Thomas Gerbet Committed by GitHub
Browse files

tinyproxy: 1.11.1 -> 1.11.2 (#313449) 

Fixes CVE-2023-49606 and CVE-2023-40533.

https://github.com/tinyproxy/tinyproxy/releases/tag/1.11.2

Reporter advisories:
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1902
parent f365ba1e

pkgs/tools/networking/tinyproxy/default.nix

+2 −11
Original line number Diff line number Diff line 
{ lib

, stdenv

, fetchFromGitHub

, fetchpatch

, autoreconfHook

, perl

, nixosTests
@@ -10,23 +9,15 @@ 


stdenv.mkDerivation rec {

  pname = "tinyproxy";

  version = "1.11.1";

  version = "1.11.2";



  src = fetchFromGitHub {

    sha256 = "sha256-tipFXh9VG5auWTI2/IC5rwMQFls7aZr6dkzhYTZZkXM=";

    hash = "sha256-bpr/O723FmW2gb+85aJrwW5/U7R2HwbePTx15i3rpsE=";

    rev = version;

    repo = "tinyproxy";

    owner = "tinyproxy";

  };



  patches = [

    (fetchpatch {

      name = "CVE-2022-40468.patch";

      url = "https://github.com/tinyproxy/tinyproxy/commit/3764b8551463b900b5b4e3ec0cd9bb9182191cb7.patch";

      sha256 = "sha256-P0c4mUK227ld3703ss5MQhi8Vo2QVTCVXhKmc9fcufk=";

    })

  ];



  # perl is needed for man page generation.

  nativeBuildInputs = [ autoreconfHook perl ];