From 022ea0e5f82f0d574b583c0553f3e15a69fd7cb4 Mon Sep 17 00:00:00 2001
From: Thomas Gerbet <thomas@gerbet.me>
Date: Sat, 1 Apr 2023 12:21:09 +0200
Subject: [PATCH] cilium-cli: apply patch for CVE-2023-28114

https://github.com/advisories/GHSA-6f27-3p6c-p5jc
---
 .../applications/networking/cluster/cilium/default.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/pkgs/applications/networking/cluster/cilium/default.nix b/pkgs/applications/networking/cluster/cilium/default.nix
index 9399d5b7fb9b..bb471bb4e60e 100644
--- a/pkgs/applications/networking/cluster/cilium/default.nix
+++ b/pkgs/applications/networking/cluster/cilium/default.nix
@@ -1,4 +1,4 @@
-{ lib, buildGoModule, fetchFromGitHub, installShellFiles }:
+{ lib, buildGoModule, fetchFromGitHub, fetchpatch, installShellFiles }:
 
 buildGoModule rec {
   pname = "cilium-cli";
@@ -11,6 +11,14 @@ buildGoModule rec {
     sha256 = "sha256-libZapDj6Y/tGJEXAX3iZH2+pS64dg7IUsgTxT0Z6JA=";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2023-28114.patch";
+      url = "https://github.com/cilium/cilium-cli/commit/fb1427025764e1eebc4a7710d902c4f22cae2610.patch";
+      hash = "sha256-WHWtv/GP4AhaZBx0WheTCBaZNdnzr8KNqwfKK2BtheY=";
+    })
+  ];
+
   vendorSha256 = null;
 
   subPackages = [ "cmd/cilium" ];