Unverified Commit 96a74beb authored by Thomas Gerbet's avatar Thomas Gerbet Committed by GitHub
Browse files

tinyproxy: 1.11.2 -> 1.11.3, tinyproxy: add patch for CVE-2026-31842 (#509511)

parents b95df024 a0ecf8fa

pkgs/by-name/ti/tinyproxy/package.nix

+12 −2
Original line number Diff line number Diff line
@@ -2,6 +2,7 @@ 
  lib,

  stdenv,

  fetchFromGitHub,

  fetchpatch2,

  autoreconfHook,

  perl,

  nixosTests,
@@ -10,15 +11,24 @@ 


stdenv.mkDerivation (finalAttrs: {

  pname = "tinyproxy";

  version = "1.11.2";

  version = "1.11.3";



  src = fetchFromGitHub {

    hash = "sha256-bpr/O723FmW2gb+85aJrwW5/U7R2HwbePTx15i3rpsE=";

    hash = "sha256-In/ZG50i2jKl0x7yfSs3KHlBdm8NdXtspMJPiv4BW6g=";

    rev = finalAttrs.version;

    repo = "tinyproxy";

    owner = "tinyproxy";

  };



  patches = [

    # Fix case-sensitive matching of "chunked" (CVE-2026-31842)

    (fetchpatch2 {

      name = "fix-chunked-case-sensitivity.patch";

      url = "https://github.com/tinyproxy/tinyproxy/commit/879bf844abffa0bf5fae6aff0c73179024dd9f98.patch";

      hash = "sha256-Nav3nXyxdoM/tIvfyPJHEYEjAtrRrJlvkMXzsQCZan4=";

    })

  ];



  # perl is needed for man page generation.

  nativeBuildInputs = [

    autoreconfHook