gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

libwebsockets: apply patches for CVE-2025-11677 and CVE-2025-11678 (#456575)

Browse Source
This commit is contained in:
Rick van Schijndel
2025-11-02 11:10:16 +00:00
committed by GitHub
parent dc81b3b9b8 8a8e9a8312
commit 51bbe0973e
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/by-name/li/libwebsockets/package.nix
+14
View File
@@ -2,6 +2,7 @@
lib,
stdenv,
fetchFromGitHub,
fetchpatch,
cmake,
openssl,
zlib,
@@ -21,6 +22,19 @@ stdenv.mkDerivation rec {
hash = "sha256-KOAhIVn4G5u0A1TE75Xv7iYO3/i8foqWYecH0kJHdBM=";
};
patches = [
(fetchpatch {
name = "CVE-2025-11677.patch";
url = "https://libwebsockets.org/git/libwebsockets/patch?id=2f082ec31261f556969160143ba94875d783971a";
hash = "sha256-FeiZAbr1kpt+YNjhi2gfG2A6nXKiSssMFRmlALaneu4=";
})
(fetchpatch {
name = "CVE-2025-11678.patch";
url = "https://libwebsockets.org/git/libwebsockets/patch?id=2bb9598562b37c942ba5b04bcde3f7fdf66a9d3a";
hash = "sha256-1uQUkoMbK+3E/QYMIBLlBZypwHBIrWBtm+KIW07WRj8=";
})
];
# Updating to 4.4.1 would bring some errors, and the patch doesn't apply cleanly
# https://github.com/warmcat/libwebsockets/commit/47efb8c1c2371fa309f85a32984e99b2cc1d614a
postPatch = ''