tinyproxy: add patch for CVE-2026-31842

This commit is contained in:
Fabian Affolter
2026-04-13 12:27:42 +02:00
parent a71c54dc35
commit a0ecf8fa7e

View File

@@ -2,6 +2,7 @@
lib,
stdenv,
fetchFromGitHub,
fetchpatch2,
autoreconfHook,
perl,
nixosTests,
@@ -19,6 +20,15 @@ stdenv.mkDerivation (finalAttrs: {
owner = "tinyproxy";
};
patches = [
# Fix case-sensitive matching of "chunked" (CVE-2026-31842)
(fetchpatch2 {
name = "fix-chunked-case-sensitivity.patch";
url = "https://github.com/tinyproxy/tinyproxy/commit/879bf844abffa0bf5fae6aff0c73179024dd9f98.patch";
hash = "sha256-Nav3nXyxdoM/tIvfyPJHEYEjAtrRrJlvkMXzsQCZan4=";
})
];
# perl is needed for man page generation.
nativeBuildInputs = [
autoreconfHook