about summary refs log tree commit diff
path: root/pkgs/development/libraries
diff options
context:
space:
mode:
authorRobert Scott <code@humanleg.org.uk>2019-11-22 09:54:12 +0000
committerRenaud <c0bw3b@users.noreply.github.com>2019-11-22 10:54:12 +0100
commit99e96faee364924a08b4c8b7121292b81020a239 (patch)
treeda1e119b98a403f7c62fd5dbb705732ed4869124 /pkgs/development/libraries
parent6d448d7fbd69b0985e83c741d097c0742821a836 (diff)
libextractor: add patch for CVE-2019-15531
(#73792)
(cherry picked from commit 593def2396e2a88dbf9a26dcc892772b39c773a7)
Diffstat (limited to 'pkgs/development/libraries')
-rw-r--r--pkgs/development/libraries/libextractor/default.nix11
1 files changed, 10 insertions, 1 deletions
diff --git a/pkgs/development/libraries/libextractor/default.nix b/pkgs/development/libraries/libextractor/default.nix
index b2d9af657a935..c44fb16595759 100644
--- a/pkgs/development/libraries/libextractor/default.nix
+++ b/pkgs/development/libraries/libextractor/default.nix
@@ -1,4 +1,4 @@
-{ fetchurl, stdenv, libtool, gettext, zlib, bzip2, flac, libvorbis
+{ fetchurl, fetchpatch, stdenv, libtool, gettext, zlib, bzip2, flac, libvorbis
 , exiv2, libgsf, rpm, pkgconfig
 , gtkSupport ? true, glib ? null, gtk3 ? null
 , videoSupport ? true, ffmpeg ? null, libmpeg2 ? null}:
@@ -14,6 +14,15 @@ stdenv.mkDerivation rec {
     sha256 = "1z1cb35griqzvshqdv5ck98dy0sgpsswn7fgiy7lbzi34sma8dg2";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2019-15531.patch";
+      url = "https://git.gnunet.org/libextractor.git/patch/?id=d2b032452241708bee68d02aa02092cfbfba951a";
+      sha256 = "01xhcjbzv6p53wz7y2ii76kb8m9iwvnm4ip9w4a0bpgaxqz4b9fw";
+      excludes = [ "ChangeLog" ];
+    })
+  ];
+
   preConfigure =
     '' echo "patching installation directory in \`extractor.c'..."
        sed -i "src/main/extractor.c" \