avahi: apply patch for CVE-2024-52616

Fixes CVE-2024-52616 / https://github.com/avahi/avahi/security/advisories/GHSA-r9j3-vjjh-p8vm

(cherry picked from commit a7e9d5524b)
This commit is contained in:
Thomas Gerbet
2024-12-13 20:08:56 +01:00
committed by github-actions[bot]
parent 6eb01a67e1
commit 41db15ccc3

View File

@@ -10,6 +10,7 @@
expat,
gettext,
glib,
autoreconfHook,
libiconv,
libevent,
nixosTests,
@@ -126,6 +127,12 @@ stdenv.mkDerivation rec {
"fuzz/fuzz-packet.c"
];
})
# https://github.com/avahi/avahi/pull/659 merged Nov 19
(fetchpatch {
name = "CVE-2024-52616.patch";
url = "https://github.com/avahi/avahi/commit/f8710bdc8b29ee1176fe3bfaeabebbda1b7a79f7.patch";
hash = "sha256-BUQOQ4evKLBzV5UV8xW8XL38qk1rg6MJ/vcT5NBckfA=";
})
];
depsBuildBuild = [
@@ -136,6 +143,7 @@ stdenv.mkDerivation rec {
pkg-config
gettext
glib
autoreconfHook
];
buildInputs =