nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

libvncserver: backport CVE-2026-32853 and CVE-2026-32854 fixes

Browse Source 
Backport the complete upstream bounds checks for UltraZip decoding and malformed HTTP proxy requests.

https://github.com/LibVNC/libvncserver/security/advisories/GHSA-87q7-v983-qwcj
https://github.com/LibVNC/libvncserver/security/advisories/GHSA-xjp8-4qqv-5x4x

Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
(cherry picked from commit 2cd494ee4e)
This commit is contained in:
Gerhard Schwanzer
2026-07-26 10:59:06 +02:00
committed by github-actions[bot]
parent 76e03dc7f2
commit 4cf468acf4
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
pkgs/by-name/li/libvncserver/package.nix
View File

@@ -41,6 +41,18 @@ stdenv.mkDerivation (finalAttrs: {
url = "https://github.com/LibVNC/libvncserver/commit/e64fa928170f22a2e21b5bbd6d46c8f8e7dd7a96.patch";
hash = "sha256-AAZ3H34+nLqQggb/sNSx2gIGK96m4zatHX3wpyjNLOA=";
})
(fetchpatch {
name = "CVE-2026-32854.patch";
url = "https://github.com/LibVNC/libvncserver/commit/dc78dee51a7e270e537a541a17befdf2073f5314.patch";
hash = "sha256-CgVfvsrgZWnjIzu/0UegoAuCqO7WHhCDVvhH8Yk1cXo=";
})
(fetchpatch {
name = "CVE-2026-32853.patch";
url = "https://github.com/LibVNC/libvncserver/commit/009008e2f4d5a54dd71f422070df3af7b3dbc931.patch";
hash = "sha256-ZgpiIS7KoRzDmVLQ0J86wTFFykCBVMt6bZwJsFvIO74=";
})
];
nativeBuildInputs = [