c4patino/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-07-06 17:13:24 -05:00
Code Issues Projects Releases Packages Wiki Activity

perlPackages.BytesRandomSecureTiny: add patch for CVE-2026-11702

Browse source 
(cherry picked from commit 78581b87cd)
This commit is contained in:
Stig Palmquist 2026-06-27 11:45:19 +02:00 • committed by github-actions[bot]
commit 2e542f0165
1 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
pkgs/top-level/perl-packages.nix
View file

@ -2907,6 +2907,17 @@ with self;
url = "mirror://cpan/authors/id/D/DA/DAVIDO/Bytes-Random-Secure-Tiny-1.011.tar.gz";
hash = "sha256-A9lntfgoRpCRN9WrmYSsVwrBCkQB4MYC89IgjEZayYI=";
};
patches = [
(fetchpatch {
name = "CVE-2026-11702.patch";
url = "https://security.metacpan.org/patches/B/Bytes-Random-Secure-Tiny/1.011/CVE-2026-11702-r1.patch";
hash = "sha256-81wvVdtQsF5YeRhjAeaOFa7aE1cgdCni+G28LA7ZLqM=";
})
];
preCheck = ''
# Remove test that CVE patch breaks: "Attempt to access disallowed key '_rng' in a restricted hash"
rm t/35-mrie-cover.t
'';
meta = {
description = "Tiny Perl extension to generate cryptographically-secure random bytes";
license = with lib.licenses; [