pyrox.dev
corosync: apply patch for CVE-2025-30472 (#420780)
+9
pkgs/by-name/co/corosync/package.nix
+9
pkgs/by-name/co/corosync/package.nix
···
2
2
lib,
3
3
stdenv,
4
4
fetchurl,
5
+
fetchpatch2,
5
6
makeWrapper,
6
7
pkg-config,
7
8
kronosnet,
···
31
32
url = "http://build.clusterlabs.org/corosync/releases/${pname}-${version}.tar.gz";
32
33
sha256 = "sha256-IDNUu93uGpezxQoHbq6JxjX0Bt1nTMrvyUu5CSrNlTU=";
33
34
};
35
+
36
+
patches = [
37
+
(fetchpatch2 {
38
+
name = "CVE-2025-30472.patch";
39
+
url = "https://github.com/corosync/corosync/commit/7839990f9cdf34e55435ed90109e82709032466a.patch??full_index=1";
40
+
hash = "sha256-EgGTfOM9chjLnb1QWNGp6IQQKQGdetNkztdddXlN/uo=";
41
+
})
42
+
];
34
43
35
44
nativeBuildInputs = [
36
45
makeWrapper