nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-02 13:00:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

[25.05] libwebsockets: apply patches for CVE-2025-11677 and CVE-2025-11678 (#457785)

Browse Source
This commit is contained in:
Rick van Schijndel
2025-11-10 20:25:25 +00:00
committed by GitHub
parent 0c0b8dfcbd e51631083c
commit 077f2dae41
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
pkgs/by-name/li/libwebsockets/package.nix
View File

@@ -2,6 +2,7 @@
lib,
stdenv,
fetchFromGitHub,
fetchpatch,
cmake,
openssl,
zlib,
@@ -21,6 +22,27 @@ stdenv.mkDerivation rec {
hash = "sha256-KOAhIVn4G5u0A1TE75Xv7iYO3/i8foqWYecH0kJHdBM=";
};
patches = [
(fetchpatch {
name = "CVE-2025-11677.patch";
url = "https://libwebsockets.org/git/libwebsockets/patch?id=2f082ec31261f556969160143ba94875d783971a";
hash = "sha256-FeiZAbr1kpt+YNjhi2gfG2A6nXKiSssMFRmlALaneu4=";
})
(fetchpatch {
name = "CVE-2025-11678.patch";
url = "https://libwebsockets.org/git/libwebsockets/patch?id=2bb9598562b37c942ba5b04bcde3f7fdf66a9d3a";
hash = "sha256-1uQUkoMbK+3E/QYMIBLlBZypwHBIrWBtm+KIW07WRj8=";
})
];
# Updating to 4.4.1 would bring some errors, and the patch doesn't apply cleanly
# https://github.com/warmcat/libwebsockets/commit/47efb8c1c2371fa309f85a32984e99b2cc1d614a
postPatch = ''
for f in $(find . -name CMakeLists.txt); do
sed '/^cmake_minimum_required/Is/VERSION [0-9]\.[0-9]/VERSION 3.5/' -i "$f"
done
'';
outputs = [
"out"
"dev"