[release-25.11] lldpd: fix oob heap read (#520381)

This commit is contained in:
Martin Weinelt
2026-05-15 09:58:08 +00:00
committed by GitHub

View File

@@ -1,6 +1,7 @@
{
stdenv,
fetchurl,
fetchpatch,
lib,
libevent,
net-snmp,
@@ -19,6 +20,15 @@ stdenv.mkDerivation rec {
hash = "sha256-YbjLItSHnmj3glovuOHpKrtKukdzl3zwJYvDLtn1VFA=";
};
patches = [
(fetchpatch {
# https://github.com/lldpd/lldpd/security/advisories/GHSA-2g8p-2h3j-63m3
name = "CVE-2026-46433.patch";
url = "https://github.com/lldpd/lldpd/commit/ca931be63a9cae0fcd8e9b6ae4e916d49f141cd6.patch";
hash = "sha256-Zy0vp3OnFjb6f8BUsd3p+SNI2jGPr60OJviLDf/F9mU=";
})
];
configureFlags = [
"--localstatedir=/var"
"--enable-pie"