about summary refs log tree commit diff
path: root/pkgs/development/libraries/avahi
diff options
context:
space:
mode:
authorArnout Engelen <arnout@bzzt.net>2023-11-26 16:13:50 +0100
committerArnout Engelen <arnout@bzzt.net>2023-11-26 16:13:50 +0100
commite89c902564486dfe87f409b9b1ea727e45a7dbd0 (patch)
tree2a0f7be85291224f44e149070bf289d496c738d5 /pkgs/development/libraries/avahi
parentfb22f402f47148b2f42d4767615abb367c1b7cfd (diff)
avahi: apply patch for CVE-2023-38472
Diffstat (limited to 'pkgs/development/libraries/avahi')
-rw-r--r--pkgs/development/libraries/avahi/default.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/pkgs/development/libraries/avahi/default.nix b/pkgs/development/libraries/avahi/default.nix
index bcc1928d92496..df3d113dfd2cf 100644
--- a/pkgs/development/libraries/avahi/default.nix
+++ b/pkgs/development/libraries/avahi/default.nix
@@ -65,6 +65,13 @@ stdenv.mkDerivation rec {
       url = "https://github.com/lathiat/avahi/commit/b448c9f771bada14ae8de175695a9729f8646797.patch";
       sha256 = "sha256-/ZVhsBkf70vjDWWG5KXxvGXIpLOZUXdRkn3413iSlnI=";
     })
+    # CVE-2023-38472
+    # https://github.com/lathiat/avahi/pull/490 merged Oct 19
+    (fetchpatch {
+      name = "CVE-2023-38472.patch";
+      url = "https://github.com/lathiat/avahi/commit/b024ae5749f4aeba03478e6391687c3c9c8dee40.patch";
+      sha256 = "sha256-FjR8fmhevgdxR9JQ5iBLFXK0ILp2OZQ8Oo9IKjefCqk=";
+    })
     # CVE-2023-38471
     # https://github.com/lathiat/avahi/pull/494 merged Oct 24
     (fetchpatch {