avahi: apply patch for CVE-2023-38470

This commit is contained in:
Arnout Engelen 2023-11-26 16:05:00 +01:00
parent 38b85cb444
commit f65b41f13d
No known key found for this signature in database
GPG key ID: 061107B0F74A6DAA

View file

@ -51,8 +51,15 @@ stdenv.mkDerivation rec {
url = "https://github.com/lathiat/avahi/commit/a2696da2f2c50ac43b6c4903f72290d5c3fa9f6f.patch";
sha256 = "sha256-BEYFGCnQngp+OpiKIY/oaKygX7isAnxJpUPCUvg+efc=";
})
# CVE-2023-38470
# https://github.com/lathiat/avahi/pull/457 merged Sep 19
(fetchpatch {
name = "CVE-2023-38470.patch";
url = "https://github.com/lathiat/avahi/commit/94cb6489114636940ac683515417990b55b5d66c.patch";
sha256 = "sha256-Fanh9bvz+uknr5pAmltqijuUAZIG39JR2Lyq5zGKJ58=";
})
# CVE-2023-38473
# https://github.com/lathiat/avahi/pull/486
# https://github.com/lathiat/avahi/pull/486 merged Oct 18
(fetchpatch {
name = "CVE-2023-38473.patch";
url = "https://github.com/lathiat/avahi/commit/b448c9f771bada14ae8de175695a9729f8646797.patch";