[Backport release-26.05] rsyslog: fix CVE-2026-19654 (#552242)

This commit is contained in:
Thomas Gerbet
2026-08-13 11:26:04 +00:00
committed by GitHub

View File

@@ -2,6 +2,7 @@
lib,
stdenv,
fetchurl,
fetchpatch,
pkg-config,
autoreconfHook,
autoconf-archive,
@@ -72,6 +73,15 @@ stdenv.mkDerivation (finalAttrs: {
hash = "sha256-JXSz8waOaVXrlO9WQ+K2pbhYXMjqp3IJ/1y8Hi5fceU=";
};
patches = [
# Remove with rsyslog 8.2608.0 or newer.
(fetchpatch {
name = "CVE-2026-19654.patch";
url = "https://github.com/rsyslog/rsyslog/commit/f7f774228273730ba1075f4cd457ae78303a8f08.patch";
hash = "sha256-ww8Ade2eKrQygJduLMPFjxd/fmBnpQ4ePLEzHffPy90=";
})
];
nativeBuildInputs = [
pkg-config
autoreconfHook