diff options
| author | Robert Scott <code@humanleg.org.uk> | 2023-04-13 23:41:49 +0100 |
|---|---|---|
| committer | Vladimír Čunát <v@cunat.cz> | 2023-04-16 08:04:51 +0200 |
| commit | 7d5aa64688f3b4c8e8e9f6ad726e14e0bc51a5e6 (patch) | |
| tree | c2089cdf4287f6dea6d585c25e220474329989a3 | |
| parent | python3Packages.uvloop: skip test (diff) | |
| download | nixpkgs-7d5aa64688f3b4c8e8e9f6ad726e14e0bc51a5e6.tar.gz | |
libde265: add patches for CVE-2023-27102 & CVE-2023-27103
(cherry picked from commit 99910f07fb677c4682325 from PR #226091)
| -rw-r--r-- | pkgs/development/libraries/libde265/default.nix | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/pkgs/development/libraries/libde265/default.nix b/pkgs/development/libraries/libde265/default.nix index c24209e4ab6c..e75393fd919f 100644 --- a/pkgs/development/libraries/libde265/default.nix +++ b/pkgs/development/libraries/libde265/default.nix @@ -1,6 +1,7 @@ { lib , stdenv , fetchFromGitHub +, fetchpatch , autoreconfHook , pkg-config @@ -22,6 +23,19 @@ stdenv.mkDerivation rec { sha256 = "sha256-0aRUh5h49fnjBjy42A5fWYHnhnQ4CFoeSIXZilZewW8="; }; + patches = [ + (fetchpatch { + name = "CVE-2023-27102.patch"; + url = "https://github.com/strukturag/libde265/commit/0b1752abff97cb542941d317a0d18aa50cb199b1.patch"; + sha256 = "sha256-q0NKuk2r5RQT9MJpRO3CTPj6VqYRBnffs9yZ+GM+lNc="; + }) + (fetchpatch { + name = "CVE-2023-27103.patch"; + url = "https://github.com/strukturag/libde265/commit/d6bf73e765b7a23627bfd7a8645c143fd9097995.patch"; + sha256 = "sha256-vxciVzSuVCVDpdz+TKg2tMWp2ArubYji5GLaR9VP4F0="; + }) + ]; + nativeBuildInputs = [ autoreconfHook pkg-config ]; enableParallelBuilding = true; |