summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRobert Scott <code@humanleg.org.uk>2021-12-14 22:55:49 +0000
committerRobert Scott <code@humanleg.org.uk>2021-12-27 02:02:38 +0000
commitc7900c5e78bdd272afdb2ceef2828fd353f67d77 (patch)
treef903812a5aee190038a5ff9a774544ba554d7423
parentMerge staging-next-21.11 into staging-21.11 (diff)
downloadnixpkgs-origin/backport-150788-to-release-21.11.tar.gz
lapack: add patch for CVE-2021-4048origin/backport-150788-to-release-21.11
(cherry picked from commit 6d952e40483a6951d585b79070872e81909409a9)
-rw-r--r--pkgs/development/libraries/science/math/liblapack/default.nix9
1 files changed, 9 insertions, 0 deletions
diff --git a/pkgs/development/libraries/science/math/liblapack/default.nix b/pkgs/development/libraries/science/math/liblapack/default.nix
index f81a02303a60..f2a50cb2d3d4 100644
--- a/pkgs/development/libraries/science/math/liblapack/default.nix
+++ b/pkgs/development/libraries/science/math/liblapack/default.nix
@@ -1,6 +1,7 @@
{ lib
, stdenv
, fetchFromGitHub
+, fetchpatch
, gfortran
, cmake
, shared ? true
@@ -17,6 +18,14 @@ stdenv.mkDerivation rec {
sha256 = "sha256-ewYUM+M7jDO5LLnB4joiKkqgXjEDmWbFZbgad8x98gc=";
};
+ patches = [
+ (fetchpatch {
+ name = "CVE-2021-4048.patch";
+ url = "https://github.com/Reference-LAPACK/lapack/commit/0631b6beaed60ba118b0b027c0f8d35397bf5df0.patch";
+ sha256 = "1bqjw3f6ak9iz97y7ckn0rrfcgrzbn9prgfasl489qpxgzp2kjh8";
+ })
+ ];
+
nativeBuildInputs = [ gfortran cmake ];
# Configure stage fails on aarch64-darwin otherwise, due to either clang 11 or gfortran 10.