aboutsummaryrefslogtreecommitdiff
path: root/infra/libkookie/nixpkgs/pkgs/development/libraries/libexif/default.nix
diff options
context:
space:
mode:
authorMx Kookie <kookie@spacekookie.de>2020-12-09 18:55:19 +0000
committerMx Kookie <kookie@spacekookie.de>2020-12-09 18:55:19 +0000
commit80d90d9b204f7c17912740f9f414fe5d59f293ba (patch)
tree5f2065a06e724270610760d59d01c6888b375a46 /infra/libkookie/nixpkgs/pkgs/development/libraries/libexif/default.nix
parent3a31a84c7d3e589035ad08499206aac44a81f424 (diff)
parent83cbad92d73216bb0d9187c56cce0b91f9121d5a (diff)
Merge commit '83cbad92d73216bb0d9187c56cce0b91f9121d5a' into main
Diffstat (limited to 'infra/libkookie/nixpkgs/pkgs/development/libraries/libexif/default.nix')
-rw-r--r--infra/libkookie/nixpkgs/pkgs/development/libraries/libexif/default.nix16
1 files changed, 15 insertions, 1 deletions
diff --git a/infra/libkookie/nixpkgs/pkgs/development/libraries/libexif/default.nix b/infra/libkookie/nixpkgs/pkgs/development/libraries/libexif/default.nix
index fd2ed39e34a4..a0f831e927ef 100644
--- a/infra/libkookie/nixpkgs/pkgs/development/libraries/libexif/default.nix
+++ b/infra/libkookie/nixpkgs/pkgs/development/libraries/libexif/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchFromGitHub, autoreconfHook, gettext }:
+{ stdenv, fetchFromGitHub, fetchpatch, autoreconfHook, gettext }:
stdenv.mkDerivation rec {
pname = "libexif";
@@ -11,6 +11,20 @@ stdenv.mkDerivation rec {
sha256 = "0mzndakdi816zcs13z7yzp7hj031p2dcyfq2p391r63d9z21jmy1";
};
+ patches = [
+ (fetchpatch {
+ name = "CVE-2020-0198.patch";
+ url = "https://github.com/libexif/libexif/commit/ce03ad7ef4e8aeefce79192bf5b6f69fae396f0c.patch";
+ sha256 = "1040278g5dbq3vvlyk8cmzb7flpi9bfsp99268hw69i6ilwbdf2k";
+ })
+ (fetchpatch {
+ name = "CVE-2020-0452.patch";
+ url = "https://github.com/libexif/libexif/commit/9266d14b5ca4e29b970fa03272318e5f99386e06.patch";
+ excludes = [ "NEWS" ];
+ sha256 = "0k4z1gbbkli6wwyy9qm2qvn0h00qda6wqym61nmmbys7yc2zryj6";
+ })
+ ];
+
nativeBuildInputs = [ autoreconfHook gettext ];
meta = with stdenv.lib; {