diff options
| author | Thomas Gerbet <thomas@gerbet.me> | 2024-10-11 21:18:47 +0200 |
|---|---|---|
| committer | Bjørn Forsman <bjorn.forsman@gmail.com> | 2024-10-12 12:54:41 +0200 |
| commit | 562995272c6557ab647a16ab76330e21623a3e86 (patch) | |
| tree | b39acd7d12c1cd8259816b64071485a7c7a8e7b2 | |
| parent | aerospace: init at 0.14.2-Beta (#344015) (diff) | |
| download | nixpkgs-562995272c6557ab647a16ab76330e21623a3e86.tar.gz | |
fop: apply patch for CVE-2024-28168
https://www.openwall.com/lists/oss-security/2024/10/09/1
| -rw-r--r-- | pkgs/tools/typesetting/fop/default.nix | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/pkgs/tools/typesetting/fop/default.nix b/pkgs/tools/typesetting/fop/default.nix index 94a24211f9a3..4981ec2a7a0c 100644 --- a/pkgs/tools/typesetting/fop/default.nix +++ b/pkgs/tools/typesetting/fop/default.nix @@ -1,6 +1,7 @@ { lib , stdenv , fetchurl +, fetchpatch , ant , jdk , jre @@ -17,6 +18,14 @@ stdenv.mkDerivation (finalAttrs: { hash = "sha256-b7Av17wu6Ar/npKOiwYqzlvBFSIuXTpqTacM1sxtBvc="; }; + patches = [ + (fetchpatch { + name = "CVE-2024-28168.patch"; + url = "https://github.com/apache/xmlgraphics-fop/commit/d96ba9a11710d02716b6f4f6107ebfa9ccec7134.patch"; + hash = "sha256-zmUA1Tq6iZtvNECCiXebXodp6AikBn10NTZnVHpPMlw="; + }) + ]; + nativeBuildInputs = [ ant jdk |