diff options
| author | Thomas Gerbet <thomas@gerbet.me> | 2024-08-31 23:35:14 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-08-31 23:35:14 +0200 |
| commit | 4927f77b7a68615ce99678086cd3dcd0eda34fdd (patch) | |
| tree | 09daf7f1f5ae676b00e7db05ab3cb3d8b0fb66ef | |
| parent | [Backport release-24.05] nixos/iso-image: Compress squashfs with zstd 19 (#33... (diff) | |
| parent | duckdb: add patch for CVE-2024-41672 (diff) | |
| download | nixpkgs-4927f77b7a68615ce99678086cd3dcd0eda34fdd.tar.gz | |
[24.05] duckdb: add patch for CVE-2024-41672 (#337510)
| -rw-r--r-- | pkgs/development/libraries/duckdb/default.nix | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/pkgs/development/libraries/duckdb/default.nix b/pkgs/development/libraries/duckdb/default.nix index 343574f251a8..42a180949be2 100644 --- a/pkgs/development/libraries/duckdb/default.nix +++ b/pkgs/development/libraries/duckdb/default.nix @@ -30,6 +30,14 @@ stdenv.mkDerivation (finalAttrs: { rev = "refs/tags/v${finalAttrs.version}"; }; + patches = [ + (fetchpatch { + name = "CVE-2024-41672.patch"; + url = "https://github.com/duckdb/duckdb/commit/c9b7c98aa0e1cd7363fe8bb8543a95f38e980d8a.patch"; + hash = "sha256-Zb962mWIgy2t/0csbwZ8BcLgpdIA9/JpJ0+EWr1Kg1g="; + }) + ]; + outputs = [ "out" "lib" "dev" ]; nativeBuildInputs = [ cmake ninja python3 ]; |