diff options
| author | Thomas Gerbet <thomas@gerbet.me> | 2021-06-03 23:25:14 +0200 |
|---|---|---|
| committer | github-actions[bot] <github-actions[bot]@users.noreply.github.com> | 2021-06-05 21:33:52 +0000 |
| commit | 2ab1f8ded899b9d3763eeb1ec52c1eb9eea326d6 (patch) | |
| tree | b3c0347fa7972f9e021d490ce87e0ea75f0ecd10 | |
| parent | Merge pull request #125621 from etu/backport-php-upgrades (diff) | |
| download | nixpkgs-origin/backport-125569-to-release-21.05.tar.gz | |
gupnp: apply the patch for CVE-2021-33516origin/backport-125569-to-release-21.05
Fixes CVE-2021-33516.
https://discourse.gnome.org/t/security-relevant-releases-for-gupnp-issue-cve-2021-33516/6536
(cherry picked from commit 78d2a14bb8ee82f7f7d227ab473646460d874159)
| -rw-r--r-- | pkgs/development/libraries/gupnp/default.nix | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/pkgs/development/libraries/gupnp/default.nix b/pkgs/development/libraries/gupnp/default.nix index bd8151d603e9..c91d25123f61 100644 --- a/pkgs/development/libraries/gupnp/default.nix +++ b/pkgs/development/libraries/gupnp/default.nix @@ -1,5 +1,6 @@ { lib, stdenv , fetchurl +, fetchpatch , meson , ninja , pkg-config @@ -28,6 +29,14 @@ stdenv.mkDerivation rec { sha256 = "sha256-96AwfqUfXkTRuDL0k92QRURKOk4hHvhd/Zql3W6up9E="; }; + patches = [ + (fetchpatch { + name = "CVE-2021-33516.patch"; + url = "https://gitlab.gnome.org/GNOME/gupnp/-/commit/ca6ec9dcb26fd7a2a630eb6a68118659b589afac.patch"; + sha256 = "sha256-G7e/xNQB7Kp2fPzqVeD/cH3h1co9hZXh55QOUBnAnvU="; + }) + ]; + nativeBuildInputs = [ meson ninja |