Unverified Commit e31ac722 authored by Martin Weinelt's avatar Martin Weinelt
Browse files

libmicrohttpd: Apply patch for CVE-2023-27371 

https://lists.gnu.org/archive/html/libmicrohttpd/2023-02/msg00000.html
parent 97b2abc6

pkgs/development/libraries/libmicrohttpd/generic.nix

+12 −1
Original line number Diff line number Diff line 
{ lib, stdenv, libgcrypt, curl, gnutls, pkg-config, libiconv, libintl, version, src, meta ? {} }:

{ lib, stdenv, libgcrypt, curl, gnutls, pkg-config, libiconv, libintl, version, src, meta ? {}, fetchpatch }:



let

  meta_ = meta;
@@ -8,6 +8,17 @@ stdenv.mkDerivation rec { 
  pname = "libmicrohttpd";

  inherit version src;



  patches = lib.optionals (lib.versionOlder version "0.9.76") [

    (fetchpatch {

      name = "CVE-2023-27371.patch";

      url = "https://git.gnunet.org/libmicrohttpd.git/patch/?id=e0754d1638c602382384f1eface30854b1defeec";

      hash = "sha256-vzrq9HPysGpc13rFEk6zLPgpUqp/ST4q/Wp30Dam97k=";

      excludes = [

        "ChangeLog"

      ];

    })

  ];



  outputs = [ "out" "dev" "devdoc" "info" ];

  nativeBuildInputs = [ pkg-config ];

  buildInputs = [ libgcrypt curl gnutls libiconv libintl ];