sg3_utils: 1.48 -> 1.49

Fixes #547002
Changelog:
  https://sg.danny.cz/sg/p/sg3_utils.ChangeLog

References:
  https://github.com/doug-gilbert/sg3_utils/pull/83
  https://bugzilla.redhat.com/show_bug.cgi?id=2502845
  https://www.linuxfromscratch.org/blfs/view/git/general/sg3_utils.html

The home page of the author has version 1.49 released. Updates are released more often on the author's own page than the github mirror.
The CVE-2026-16313 has been corrected via code submitted in PR#83 on doug-gilbert's github mirror for sg3_utils. This code has been added to version 1.49 as per the changelog.

Added [autoreconfHook] to nativeBuildInputs:
  unlike version 1.48, version 1.49 is missing a configure script so autoreconf was required to produce a configuration for building the package.
  this is in line with installation instructions for sg3_utils v1.49 available on linuxfromscratch(see References).

pkgs/by-name/sg/sg3_utils/package.nix

@@ -2,15 +2,16 @@
   lib,
   stdenv,
   fetchurl,
+  autoreconfHook,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "sg3_utils";
-  version = "1.48";
+  version = "1.49";
 
   src = fetchurl {
     url = "https://sg.danny.cz/sg/p/sg3_utils-${finalAttrs.version}.tgz";
-    sha256 = "sha256-1itsPPIDkPpzVwRDkAhBZtJfHZMqETXEULaf5cKD13M=";
+    sha256 = "sha256-hLpQlRCN2Xz7VU17OHIfKqK0P8H5PPgqvW7+TJ2iIKc=";
   };
 
   postPatch = ''
@@ -18,6 +19,8 @@ stdenv.mkDerivation (finalAttrs: {
       --replace-fail '/usr/bin/sg_' "$out/bin/sg_"
   '';
 
+  nativeBuildInputs = [ autoreconfHook ];
+
   outputs = [
     "out"
     "man"