From 82679a6d3f3c4fb869fffb73d6340d428bff81a3 Mon Sep 17 00:00:00 2001
From: Hythera <87016780+Hythera@users.noreply.github.com>
Date: Thu, 21 May 2026 16:22:20 +0200
Subject: [PATCH] libsolv: 0.7.36 -> 0.7.37

changelog: https://github.com/openSUSE/libsolv/blob/0.7.37/NEWS

diff: https://github.com/openSUSE/libsolv/compare/0.7.36...0.7.37
---
 pkgs/by-name/li/libsolv/package.nix | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/li/libsolv/package.nix b/pkgs/by-name/li/libsolv/package.nix
index 32a17dfcf222..63a1ac4e31d6 100644
--- a/pkgs/by-name/li/libsolv/package.nix
+++ b/pkgs/by-name/li/libsolv/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch,
   cmake,
   ninja,
   pkg-config,
@@ -18,16 +19,24 @@
 }:
 
 stdenv.mkDerivation (finalAttrs: {
-  version = "0.7.36";
+  version = "0.7.37";
   pname = "libsolv";
 
   src = fetchFromGitHub {
     owner = "openSUSE";
     repo = "libsolv";
     rev = finalAttrs.version;
-    hash = "sha256-7a/vAdgW7ma2GHqv1LaQNFA7w1Hmzm6Q/HriNN6hlpE=";
+    hash = "sha256-hiumMnTJ3eP+acH2V0eNTM71Fw//IWQPechCA0+kH1s=";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2026-9149";
+      url = "https://github.com/openSUSE/libsolv/commit/210386037c892a720972ad35a3d8f7073b4d763b.patch";
+      hash = "sha256-ju3xn78UGMR5usq1e1ovFTWnKW1TPDA77sNGx8yc8Z8=";
+    })
+  ];
+
   cmakeFlags = [
     "-DENABLE_COMPLEX_DEPS=true"
     (lib.cmakeBool "ENABLE_CONDA" withConda)