pyrox.dev
lol
tinyproxy: 1.11.1 -> 1.11.2 (#313449)
Fixes CVE-2023-49606 and CVE-2023-40533.
https://github.com/tinyproxy/tinyproxy/releases/tag/1.11.2
Reporter advisories:
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1902
authored by
Thomas Gerbet
and committed by
GitHub
6d0adb4d
f365ba1e
+2
-11
+2
-11
pkgs/tools/networking/tinyproxy/default.nix
+2
-11
pkgs/tools/networking/tinyproxy/default.nix
···
1
1
{ lib
2
2
, stdenv
3
3
, fetchFromGitHub
4
-
, fetchpatch
5
4
, autoreconfHook
6
5
, perl
7
6
, nixosTests
···
10
9
11
10
stdenv.mkDerivation rec {
12
11
pname = "tinyproxy";
13
-
version = "1.11.1";
12
+
version = "1.11.2";
14
13
15
14
src = fetchFromGitHub {
16
-
sha256 = "sha256-tipFXh9VG5auWTI2/IC5rwMQFls7aZr6dkzhYTZZkXM=";
15
+
hash = "sha256-bpr/O723FmW2gb+85aJrwW5/U7R2HwbePTx15i3rpsE=";
17
16
rev = version;
18
17
repo = "tinyproxy";
19
18
owner = "tinyproxy";
20
19
};
21
-
22
-
patches = [
23
-
(fetchpatch {
24
-
name = "CVE-2022-40468.patch";
25
-
url = "https://github.com/tinyproxy/tinyproxy/commit/3764b8551463b900b5b4e3ec0cd9bb9182191cb7.patch";
26
-
sha256 = "sha256-P0c4mUK227ld3703ss5MQhi8Vo2QVTCVXhKmc9fcufk=";
27
-
})
28
-
];
29
20
30
21
# perl is needed for man page generation.
31
22
nativeBuildInputs = [ autoreconfHook perl ];