about summary refs log tree commit diff
path: root/pkgs/development/libraries/gdk-pixbuf
diff options
context:
space:
mode:
authorqubitnano <146656568+qubitnano@users.noreply.github.com>2024-05-03 23:50:06 -0400
committerqubitnano <146656568+qubitnano@users.noreply.github.com>2024-05-04 00:41:25 -0400
commit9b10f90188dd7954b082026f7419b4ce024fe15c (patch)
tree29845f0f496d48c36e303f9d741c9d01107f7f52 /pkgs/development/libraries/gdk-pixbuf
parente69ace568e16728dd82336c260ee48dd9e1035a4 (diff)
gdk-pixbuf: disable ani loader
The "others" option includes ani which is currently affected by CVE-2022-48622.
Disable this by removing it from the build while allowing the other loaders
to build.
Diffstat (limited to 'pkgs/development/libraries/gdk-pixbuf')
-rw-r--r--pkgs/development/libraries/gdk-pixbuf/default.nix3
1 files changed, 3 insertions, 0 deletions
diff --git a/pkgs/development/libraries/gdk-pixbuf/default.nix b/pkgs/development/libraries/gdk-pixbuf/default.nix
index ea9ff1d918087..f9fd75f1a6af9 100644
--- a/pkgs/development/libraries/gdk-pixbuf/default.nix
+++ b/pkgs/development/libraries/gdk-pixbuf/default.nix
@@ -101,6 +101,9 @@ stdenv.mkDerivation (finalAttrs: {
     substituteInPlace docs/meson.build \
       --replace "dependency('gi-docgen'," "dependency('gi-docgen', native:true," \
       --replace "'gi-docgen', req" "'gi-docgen', native:true, req"
+
+    # Remove 'ani' loader until proper fix for CVE-2022-48622
+    substituteInPlace meson.build --replace-fail "'ani'," ""
   '';
 
   postInstall =