Unverified Commit 757bec77 authored by Vladimír Čunát's avatar Vladimír Čunát
Browse files

Merge #221837: libmicrohttpd: Apply patch for CVE-2023-27371

...into staging
parents 1aec1811 e31ac722
Loading
Loading
Loading
Loading
+12 −1
Original line number Diff line number Diff line
{ lib, stdenv, libgcrypt, curl, gnutls, pkg-config, libiconv, libintl, version, src, meta ? {} }:
{ lib, stdenv, libgcrypt, curl, gnutls, pkg-config, libiconv, libintl, version, src, meta ? {}, fetchpatch }:

let
  meta_ = meta;
@@ -8,6 +8,17 @@ stdenv.mkDerivation rec {
  pname = "libmicrohttpd";
  inherit version src;

  patches = lib.optionals (lib.versionOlder version "0.9.76") [
    (fetchpatch {
      name = "CVE-2023-27371.patch";
      url = "https://git.gnunet.org/libmicrohttpd.git/patch/?id=e0754d1638c602382384f1eface30854b1defeec";
      hash = "sha256-vzrq9HPysGpc13rFEk6zLPgpUqp/ST4q/Wp30Dam97k=";
      excludes = [
        "ChangeLog"
      ];
    })
  ];

  outputs = [ "out" "dev" "devdoc" "info" ];
  nativeBuildInputs = [ pkg-config ];
  buildInputs = [ libgcrypt curl gnutls libiconv libintl ];