From a71c54dc3547cbdac3b78caf17860de65946d4c8 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Mon, 13 Apr 2026 10:02:36 +0200
Subject: [PATCH 1/2] tinyproxy: 1.11.2 -> 1.11.3

Diff: https://github.com/tinyproxy/tinyproxy/compare/1.11.2...1.11.3
---
 pkgs/by-name/ti/tinyproxy/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ti/tinyproxy/package.nix b/pkgs/by-name/ti/tinyproxy/package.nix
index 2875acff42cc..9ab1e4826f0c 100644
--- a/pkgs/by-name/ti/tinyproxy/package.nix
+++ b/pkgs/by-name/ti/tinyproxy/package.nix
@@ -10,10 +10,10 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "tinyproxy";
-  version = "1.11.2";
+  version = "1.11.3";
 
   src = fetchFromGitHub {
-    hash = "sha256-bpr/O723FmW2gb+85aJrwW5/U7R2HwbePTx15i3rpsE=";
+    hash = "sha256-In/ZG50i2jKl0x7yfSs3KHlBdm8NdXtspMJPiv4BW6g=";
     rev = finalAttrs.version;
     repo = "tinyproxy";
     owner = "tinyproxy";

From a0ecf8fa7e9d42563bbce0535b3cba8034bff424 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Mon, 13 Apr 2026 12:27:42 +0200
Subject: [PATCH 2/2] tinyproxy: add patch for CVE-2026-31842

---
 pkgs/by-name/ti/tinyproxy/package.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pkgs/by-name/ti/tinyproxy/package.nix b/pkgs/by-name/ti/tinyproxy/package.nix
index 9ab1e4826f0c..035c3194b91e 100644
--- a/pkgs/by-name/ti/tinyproxy/package.nix
+++ b/pkgs/by-name/ti/tinyproxy/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch2,
   autoreconfHook,
   perl,
   nixosTests,
@@ -19,6 +20,15 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "tinyproxy";
   };
 
+  patches = [
+    # Fix case-sensitive matching of "chunked" (CVE-2026-31842)
+    (fetchpatch2 {
+      name = "fix-chunked-case-sensitivity.patch";
+      url = "https://github.com/tinyproxy/tinyproxy/commit/879bf844abffa0bf5fae6aff0c73179024dd9f98.patch";
+      hash = "sha256-Nav3nXyxdoM/tIvfyPJHEYEjAtrRrJlvkMXzsQCZan4=";
+    })
+  ];
+
   # perl is needed for man page generation.
   nativeBuildInputs = [
     autoreconfHook