sngrep: fix CVE-2026-90558

Fixes: NixOS/nixpkgs#562879
Stack Buffer Overflow via SIP Headers

(cherry picked from commit 49546c7a32)
This commit is contained in:
sh0uv1
2026-09-13 18:16:49 +00:00
parent 55e0ba465f
commit 4755bf2a60

View File

@@ -10,6 +10,7 @@
openssl,
pcre2,
pkg-config,
fetchpatch,
}:
stdenv.mkDerivation (finalAttrs: {
@@ -46,6 +47,13 @@ stdenv.mkDerivation (finalAttrs: {
];
patches = [
# TODO: Remove this patch when updating to version 1.8.5
(fetchpatch {
name = "CVE-2026-90558.patch";
url = "https://github.com/irontec/sngrep/commit/1ff74ee3ab5ff280e8ba976aa8c744dca57eb35b.patch";
hash = "sha256-QizEvKztbosj3GoRtG9yxeqTglyBNLuuOmPF92XU7BE=";
})
./fix-sng_strncpy-declaration.patch
];