talexander/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Releases Activity

nginx: apply patch for CVE-2025-53859 (#433604)

Browse Source
This commit is contained in:
Franz Pletz 2025-08-14 23:55:12 +02:00 committed by GitHub
commit fbf7c69d78
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
pkgs/servers/http/nginx/generic.nix
View File

@ -218,6 +218,13 @@ stdenv.mkDerivation {
./nix-etag-1.15.4.patch
./nix-skip-check-logs-path.patch
]
++ lib.optionals (!lib.versionAtLeast version "1.29.1") [
(fetchpatch {
name = "CVE-2025-53859.patch";
url = "https://nginx.org/download/patch.2025.smtp.txt";
hash = "sha256-v49sLskFNMoKuG8HQISw8ST7ga6DS+ngJiL0D3sUyGk=";
})
]
++ lib.optionals (stdenv.hostPlatform != stdenv.buildPlatform) [
(fetchpatch {
url = "https://raw.githubusercontent.com/openwrt/packages/c057dfb09c7027287c7862afab965a4cd95293a3/net/nginx/patches/102-sizeof_test_fix.patch";