perlPackages.CatalystAuthenticationCredentialHTTP: apply patch for CVE-2025-40920

See https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/pull/1
This commit is contained in:
Thomas Gerbet
2025-08-13 15:04:02 +02:00
parent c78e5ada0e
commit ad8f238ec4

View File

@@ -3307,6 +3307,13 @@ with self;
url = "mirror://cpan/authors/id/E/ET/ETHER/Catalyst-Authentication-Credential-HTTP-1.018.tar.gz";
hash = "sha256-b6GBbe5kSw216gzBXF5xHcLO0gg2JavOcJZSHx1lpSk=";
};
patches = [
(fetchpatch {
name = "CVE-2025-40920.patch";
url = "https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/commit/ad2c03aad95406db4ce35dfb670664ebde004c18.patch";
hash = "sha256-WI6JwvY6i3KkQO9HbbSvHPX8mgM8I2cF0UTjF1D14T4=";
})
];
buildInputs = [
ModuleBuildTiny
TestException
@@ -3316,6 +3323,7 @@ with self;
propagatedBuildInputs = [
CatalystPluginAuthentication
ClassAccessor
CryptSysRandom
DataUUID
StringEscape
];