Merge libsoup: apply patches for CVE-2024-52532, CVE-2024-52531 and CVE-2024-52530 (#360878)

This commit is contained in:
Jan Tojnar
2024-12-04 02:28:42 +01:00
committed by GitHub
@@ -1,6 +1,7 @@
{ stdenv
, lib
, fetchurl
, fetchpatch
, glib
, libxml2
, meson
@@ -29,6 +30,34 @@ stdenv.mkDerivation rec {
sha256 = "sha256-5Ld8Qc/EyMWgNfzcMgx7xs+3XvfFoDQVPfFBP6HZLxM=";
};
patches = [
(fetchpatch {
name = "CVE-2024-52530.patch";
url = "https://gitlab.gnome.org/GNOME/libsoup/-/commit/04df03bc092ac20607f3e150936624d4f536e68b.patch";
hash = "sha256-WRLiW2B/xxr3hW0nmeRNrXtZL44S0nTptPRdTqBV8Iw=";
})
(fetchpatch {
name = "CVE-2024-52531_1.patch";
url = "https://git.launchpad.net/ubuntu/+source/libsoup2.4/patch/?id=4ce2f2dc8ba0c458edce0f039a087fb3ac57787e";
hash = "sha256-wg1qz8xHcnTiinBTF0ECMkrsD8W6M4IbiKGgbJ1gp9o=";
})
(fetchpatch {
name = "CVE-2024-52531_2.patch";
url = "https://git.launchpad.net/ubuntu/+source/libsoup2.4/patch/?id=5866d63aed3500700c5f1d2868ff689bb2ba8b82";
hash = "sha256-e/VXtKX+agCw+ESGbgQ83NaVNbB3jLTxL7+VgNGbZ7U=";
})
(fetchpatch {
name = "CVE-2024-52532_1.patch";
url = "https://git.launchpad.net/ubuntu/+source/libsoup2.4/patch/?id=98e096a0d2142e3c63de2cca7d4023f9c52ed2c6";
hash = "sha256-h7k+HpcKlsVYlAONxTOiupMhsMkf2v246ouxLejurcY=";
})
(fetchpatch {
name = "CVE-2024-52532_2.patch";
url = "https://git.launchpad.net/ubuntu/+source/libsoup2.4/patch/?id=030e72420e8271299c324273f393d92f6d4bb53e";
hash = "sha256-0BEJpEKgjmKACf53lHMglxhmevKsSXR4ejEoTtr4wII=";
})
];
depsBuildBuild = [
pkg-config
];