nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-09-30 20:00:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

cups: patch CVE-2026-87875 and CVE-2026-87876

Browse Source 
(cherry picked from commit 721870b2a6)
This commit is contained in:
Robert Schütz
2026-09-13 17:01:00 -07:00
committed by github-actions[bot]
parent fdfd9b1441
commit e178b0a9d3
1 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
pkgs/by-name/cu/cups/package.nix
View File

@@ -2,6 +2,7 @@
lib,
stdenv,
fetchurl,
fetchpatch,
pkg-config,
removeReferencesTo,
zlib,
@@ -42,6 +43,29 @@ stdenv.mkDerivation (finalAttrs: {
"man"
];
patches = [
(fetchpatch {
name = "CVE-2026-87875.patch";
url = "https://github.com/OpenPrinting/cups/commit/2b1dc178a2d2325135b855142e384f4e8c42d8e4.patch";
excludes = [ "CHANGES.md" ];
hash = "sha256-WHw/UWyUuYEBC6TRADpw+BBCaCts9Nd0jS9qsQHTBMo=";
})
(fetchpatch {
url = "https://github.com/OpenPrinting/cups/commit/76b515154ce6264dae6d7cc44915d85e0e5fa0f4.patch";
hash = "sha256-KtwcB4KrFmsLbtAz6u593qxbnozW2Vb/I9yX36gZTd0=";
})
(fetchpatch {
url = "https://github.com/OpenPrinting/cups/commit/526adb34fe87f7f0cf5f63ae26751c1afa36a5d6.patch";
hash = "sha256-Pg2xbCXalbvDvv5iI19MrjpOTW03XLKfEHN+lhImG1U=";
})
(fetchpatch {
name = "CVE-2026-87876.patch";
url = "https://github.com/OpenPrinting/cups/commit/88e67c00c130a45f3a1edf36686f7a0b2982fef8.patch";
excludes = [ "CHANGES.md" ];
hash = "sha256-gohcRO93JE2ldF5uPbR0re9NYxb13AeVn4b/qYsQGaE=";
})
];
postPatch = ''
substituteInPlace cups/testfile.c \
--replace 'cupsFileFind("cat", "/bin' 'cupsFileFind("cat", "${coreutils}/bin'