From 646296bcb7d753bd7f8a961860e7d03d6eb37e6e Mon Sep 17 00:00:00 2001
From: quantenzitrone <general@dev.quantenzitrone.eu>
Date: Tue, 22 Sep 2026 20:46:11 +0200
Subject: [PATCH] libx11: add patch for CVE-2026-88806

closes https://github.com/NixOS/nixpkgs/issues/565742
---
 pkgs/by-name/li/libx11/package.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pkgs/by-name/li/libx11/package.nix b/pkgs/by-name/li/libx11/package.nix
index 1099666b8094..aaf77bf3a701 100644
--- a/pkgs/by-name/li/libx11/package.nix
+++ b/pkgs/by-name/li/libx11/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchurl,
+  fetchpatch,
   buildPackages,
   pkg-config,
   xorgproto,
@@ -26,6 +27,14 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-aWBvSFwsB8FO9k91t7sybUhYevM3ldmrPmB8C1+U8Rw=";
   };
 
+  patches = [
+    # fixes CVE-2026-88806
+    (fetchpatch {
+      url = "https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/6d4432b13c0b3b6a644c13de9c793a14db48d545.patch";
+      hash = "sha256-ahsf/DYeaOjkd9TcH9ZkfzB9qAaj4jRNi1AGyjoIycY=";
+    })
+  ];
+
   strictDeps = true;
 
   depsBuildBuild = [ buildPackages.stdenv.cc ];