[26.05] haproxy: fix CVE-2026-90678 (#565055)

This commit is contained in:
Thomas Gerbet
2026-09-20 08:45:30 +00:00
committed by GitHub

View File

@@ -5,6 +5,7 @@
sslLibrary ? "openssl",
stdenv,
lib,
fetchpatch,
fetchurl,
nixosTests,
zlib,
@@ -40,6 +41,15 @@ stdenv.mkDerivation (finalAttrs: {
hash = "sha256-ywGFCNBymseyaGlEqKk37a3bB0ThDNEFfdZQFQzcKD4=";
};
patches = [
# Remove once the packaged release fixes CVE-2026-90678.
(fetchpatch {
name = "CVE-2026-90678.patch";
url = "https://github.com/haproxy/haproxy/commit/81482d95aa6dfbd3f6eadd2f3650f256dc0b4e03.patch";
hash = "sha256-jmupw5lPzWqutD4RpAECetFNLzXvejWS4PCoMW+ZPtM=";
})
];
buildInputs = [
sslPkg
zlib