Merge pull request #192127 from risicle/ris-tinyproxy-CVE-2022-40468

tinyproxy: add patch for CVE-2022-40468

authored by Robert Scott and committed by GitHub b11b1384 f51c1c5e

+16 -1
+16 -1
pkgs/tools/networking/tinyproxy/default.nix
··· 1 - { lib, stdenv, fetchFromGitHub, autoreconfHook, perl, withDebug ? false }: 1 + { lib 2 + , stdenv 3 + , fetchFromGitHub 4 + , fetchpatch 5 + , autoreconfHook 6 + , perl 7 + , withDebug ? false 8 + }: 2 9 3 10 stdenv.mkDerivation rec { 4 11 pname = "tinyproxy"; ··· 10 17 repo = "tinyproxy"; 11 18 owner = "tinyproxy"; 12 19 }; 20 + 21 + patches = [ 22 + (fetchpatch { 23 + name = "CVE-2022-40468.patch"; 24 + url = "https://github.com/tinyproxy/tinyproxy/commit/3764b8551463b900b5b4e3ec0cd9bb9182191cb7.patch"; 25 + sha256 = "sha256-P0c4mUK227ld3703ss5MQhi8Vo2QVTCVXhKmc9fcufk="; 26 + }) 27 + ]; 13 28 14 29 # perl is needed for man page generation. 15 30 nativeBuildInputs = [ autoreconfHook perl ];