diff options
author | Robert Scott <code@humanleg.org.uk> | 2023-04-13 23:41:49 +0100 |
---|---|---|
committer | Robert Scott <code@humanleg.org.uk> | 2023-04-14 00:26:57 +0100 |
commit | 99910f07fb677c46823258eb38168409095f8910 (patch) | |
tree | 03b5ce4f10cd9b9614fc800b2b9620b2579523bc | |
parent | 5557fcff78472f808ee254ee3470a85faf594612 (diff) |
libde265: add patches for CVE-2023-27102 & CVE-2023-27103
-rw-r--r-- | pkgs/development/libraries/libde265/default.nix | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/pkgs/development/libraries/libde265/default.nix b/pkgs/development/libraries/libde265/default.nix index c24209e4ab6c3..e75393fd919fd 100644 --- a/pkgs/development/libraries/libde265/default.nix +++ b/pkgs/development/libraries/libde265/default.nix @@ -1,6 +1,7 @@ { lib , stdenv , fetchFromGitHub +, fetchpatch , autoreconfHook , pkg-config @@ -22,6 +23,19 @@ stdenv.mkDerivation rec { sha256 = "sha256-0aRUh5h49fnjBjy42A5fWYHnhnQ4CFoeSIXZilZewW8="; }; + patches = [ + (fetchpatch { + name = "CVE-2023-27102.patch"; + url = "https://github.com/strukturag/libde265/commit/0b1752abff97cb542941d317a0d18aa50cb199b1.patch"; + sha256 = "sha256-q0NKuk2r5RQT9MJpRO3CTPj6VqYRBnffs9yZ+GM+lNc="; + }) + (fetchpatch { + name = "CVE-2023-27103.patch"; + url = "https://github.com/strukturag/libde265/commit/d6bf73e765b7a23627bfd7a8645c143fd9097995.patch"; + sha256 = "sha256-vxciVzSuVCVDpdz+TKg2tMWp2ArubYji5GLaR9VP4F0="; + }) + ]; + nativeBuildInputs = [ autoreconfHook pkg-config ]; enableParallelBuilding = true; |