Commit a0ecf8fa authored by Fabian Affolter's avatar Fabian Affolter
Browse files

tinyproxy: add patch for CVE-2026-31842

parent a71c54dc
Loading
Loading
Loading
Loading
+10 −0
Original line number Diff line number Diff line
@@ -2,6 +2,7 @@
  lib,
  stdenv,
  fetchFromGitHub,
  fetchpatch2,
  autoreconfHook,
  perl,
  nixosTests,
@@ -19,6 +20,15 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "tinyproxy";
  };

  patches = [
    # Fix case-sensitive matching of "chunked" (CVE-2026-31842)
    (fetchpatch2 {
      name = "fix-chunked-case-sensitivity.patch";
      url = "https://github.com/tinyproxy/tinyproxy/commit/879bf844abffa0bf5fae6aff0c73179024dd9f98.patch";
      hash = "sha256-Nav3nXyxdoM/tIvfyPJHEYEjAtrRrJlvkMXzsQCZan4=";
    })
  ];

  # perl is needed for man page generation.
  nativeBuildInputs = [
    autoreconfHook