diff options
| author | midchildan <git@midchildan.org> | 2021-05-03 14:08:08 +0900 |
|---|---|---|
| committer | midchildan <git@midchildan.org> | 2021-05-03 15:34:37 +0900 |
| commit | f251766a219f7f32eca08567f663f0eb8e6a4968 (patch) | |
| tree | 03745e23255b2ff1877a1c52ecbd75a468896970 | |
| parent | pythonPackages.hetzner: 0.8.2 -> 0.8.3 (diff) | |
| download | nixpkgs-f251766a219f7f32eca08567f663f0eb8e6a4968.tar.gz | |
perlPackages.ImageExifTool: apply fix for CVE-2021-22204
| -rw-r--r-- | pkgs/top-level/perl-packages.nix | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/pkgs/top-level/perl-packages.nix b/pkgs/top-level/perl-packages.nix index fc352630cd01..5b21f564e57b 100644 --- a/pkgs/top-level/perl-packages.nix +++ b/pkgs/top-level/perl-packages.nix @@ -9531,6 +9531,16 @@ let sha256 = "1z0s0zvga24m9dzp1lnrsvwv9qmvn21ifd9in520sd54ld774ifp"; }; + patches = [ + # Unfortunately, not every release is uploaded to CPAN so security fixes + # would need to be cherry-picked from releases + (fetchpatch { + name = "CVE-2021-22204.patch"; + url = "https://salsa.debian.org/perl-team/modules/packages/libimage-exiftool-perl/-/raw/0347501fda93cb8366d6451aedcf258b34fb4a2b/debian/patches/CVE-2021-22204.patch"; + sha256 = "1fxw32zcssillnv764wsd05lyswn8bbrc90q5cy9aknx0ncgsrxj"; + }) + ]; + nativeBuildInputs = stdenv.lib.optional stdenv.isDarwin shortenPerlShebang; postInstall = stdenv.lib.optionalString stdenv.isDarwin '' shortenPerlShebang $out/bin/exiftool |