lz4: apply fix for CVE-2025-62813 (#455945)

2025-11-09 15:50:38 +00:00
parent 89b2739164 d81ba7d1f2
commit d16d1b0fc1
1 changed files with 9 additions and 0 deletions
@@ -2,6 +2,7 @@
  lib,
  stdenv,
  fetchFromGitHub,
+  fetchpatch,
  cmake,
  valgrind,
  testers,
@@ -18,6 +19,14 @@ stdenv.mkDerivation (finalAttrs: {
    hash = "sha256-/dG1n59SKBaEBg72pAWltAtVmJ2cXxlFFhP+klrkTos=";
  };

+  patches = [
+    (fetchpatch {
+      name = "CVE-2025-62813.patch";
+      url = "https://github.com/lz4/lz4/commit/f64efec011c058bd70348576438abac222fe6c82.patch";
+      hash = "sha256-qOvK0A3MGX14WdhThV7m4G6s+ZMP6eA/07A2BY5nesY=";
+    })
+  ];
+
  nativeBuildInputs = [
    cmake
  ];