colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

lighttpd: add patch for CVE-2022-22707

Browse Source
This commit is contained in:
Robert Scott 2022-01-15 20:44:05 +00:00 committed by Bjørn Forsman
parent a0b3813092
commit ecfda6ef7c
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
pkgs/servers/http/lighttpd/default.nix
View File

@ -9,6 +9,7 @@
, enableWebDAV ? false, sqlite, libuuid
, enableExtendedAttrs ? false, attr
, perl
, fetchpatch
}:
stdenv.mkDerivation rec {
@ -20,6 +21,14 @@ stdenv.mkDerivation rec {
sha256 = "1fgasvif13gvzz4rf5mjpy28cbw9fs4ymhx18494mxgb080pzvra";
};
patches = [
(fetchpatch {
name = "CVE-2022-22707.patch";
url = "https://github.com/lighttpd/lighttpd1.4/commit/8c62a890e23f5853b1a562b03fe3e1bccc6e7664.patch";
sha256 = "0zm2khgllsd1ivh9m7sisfsyrdfz45zsmiwl963wf0gn8m100gzk";
})
];
postPatch = ''
patchShebangs tests
# Linux sandbox has an empty hostname and not /etc/hosts, which fails some tests