nixpkgs/pkgs/applications/misc/djvulibre/default.nix

{ lib, stdenv
, fetchurl
, libjpeg
, libtiff
, librsvg
, libiconv
}:

stdenv.mkDerivation rec {
  pname = "djvulibre";
  version = "3.5.27";

  src = fetchurl {
    url = "mirror://sourceforge/djvu/${pname}-${version}.tar.gz";
    sha256 = "0psh3zl9dj4n4r3lx25390nx34xz0bg0ql48zdskhq354ljni5p6";
  };

  outputs = [ "bin" "dev" "out" ];

  buildInputs = [
    libjpeg
    libtiff
    librsvg
    libiconv
  ];

  patches = [
    ./CVE-2019-18804.patch
    # This one is needed to make the following
    # two CVE patches apply cleanly
    ./fix_hongfuzz_crash.patch
    ./CVE-2019-15142.patch
    ./CVE-2019-15143.patch
    ./CVE-2019-15144.patch
    ./CVE-2019-15145.patch
  ];

  meta = with lib; {
    description = "The big set of CLI tools to make/modify/optimize/show/export DJVU files";
    homepage = "http://djvu.sourceforge.net";
    license = licenses.gpl2;
    maintainers = with maintainers; [ Anton-Latukha ];
    platforms = platforms.all;
  };
}
treewide: with stdenv.lib; in meta -> with lib; Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix 2021-01-11 07:54:33 +00:00			`{ lib, stdenv`
djvulibre: {adopt, clean-up, upd description} 2019-09-18 21:17:03 +01:00			`, fetchurl`
			`, libjpeg`
			`, libtiff`
			`, librsvg`
			`, libiconv`
			`}:`
* Cleaned up a lot of description fields that contained newlines. Some of these should be longDescriptions, but most others just shouldn't contain newlines. E.g. write description = "Bla"; and not description = '' Bla ''; This pollutes "nix-env -qa --description" output. svn path=/nixpkgs/trunk/; revision=14310 2009-03-03 13:27:40 +00:00
* Added Okular (which is a separate package now). svn path=/nixpkgs/branches/kde-4.7/; revision=27723 2011-07-11 15:29:27 +01:00			`stdenv.mkDerivation rec {`
djvulibre: {adopt, clean-up, upd description} 2019-09-18 21:17:03 +01:00			`pname = "djvulibre";`
			`version = "3.5.27";`
Added DjVuLibre svn path=/nixpkgs/trunk/; revision=8938 2007-07-01 21:11:32 +01:00
			`src = fetchurl {`
djvulibre: {adopt, clean-up, upd description} 2019-09-18 21:17:03 +01:00			`url = "mirror://sourceforge/djvu/${pname}-${version}.tar.gz";`
djvulibre: small update I find no new build failures of depending packages. 2015-02-12 19:32:24 +00:00			`sha256 = "0psh3zl9dj4n4r3lx25390nx34xz0bg0ql48zdskhq354ljni5p6";`
Added DjVuLibre svn path=/nixpkgs/trunk/; revision=8938 2007-07-01 21:11:32 +01:00			`};`

treewide: Shuffle outputs Make either 'bin' or 'out' the first output. 2016-08-29 01:30:01 +01:00			`outputs = [ "bin" "dev" "out" ];`
djvulibre: split dev and bin outputs 2015-10-28 18:36:40 +00:00
djvulibre: {adopt, clean-up, upd description} 2019-09-18 21:17:03 +01:00			`buildInputs = [`
			`libjpeg`
			`libtiff`
			`librsvg`
			`libiconv`
			`];`
Added DjVuLibre svn path=/nixpkgs/trunk/; revision=8938 2007-07-01 21:11:32 +01:00
djvulibre: patching multiple CVEs Addresses: https://github.com/NixOS/nixpkgs/issues/73624 https://github.com/NixOS/nixpkgs/issues/70086 2019-12-03 01:05:49 +00:00			`patches = [`
			`./CVE-2019-18804.patch`
			`# This one is needed to make the following`
			`# two CVE patches apply cleanly`
			`./fix_hongfuzz_crash.patch`
			`./CVE-2019-15142.patch`
			`./CVE-2019-15143.patch`
			`./CVE-2019-15144.patch`
			`./CVE-2019-15145.patch`
			`];`

treewide: with stdenv.lib; in meta -> with lib; Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix 2021-01-11 07:54:33 +00:00			`meta = with lib; {`
djvulibre: {adopt, clean-up, upd description} 2019-09-18 21:17:03 +01:00			`description = "The big set of CLI tools to make/modify/optimize/show/export DJVU files";`
			`homepage = "http://djvu.sourceforge.net";`
djvulibre: Refactor 2015-03-27 21:09:22 +00:00			`license = licenses.gpl2;`
djvulibre: {adopt, clean-up, upd description} 2019-09-18 21:17:03 +01:00			`maintainers = with maintainers; [ Anton-Latukha ];`
djvulibre: Refactor 2015-03-27 21:09:22 +00:00			`platforms = platforms.all;`
Added DjVuLibre svn path=/nixpkgs/trunk/; revision=8938 2007-07-01 21:11:32 +01:00			`};`
			`}`