mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-22 21:50:55 +00:00
Code Issues Wiki Activity

Merge #72958: libexif: fix CVE-2018-20030

Browse source
This commit is contained in:
Vladimír Čunát 2019-11-16 18:26:13 +01:00
parent 8c997725a2 233f36303b
commit 908f6240d8
No known key found for this signature in database
GPG key ID: E747DF1F9575A3AA
1 changed files with 18 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
pkgs/development/libraries/libexif/default.nix
View file

@ -9,21 +9,32 @@ stdenv.mkDerivation rec {
}; };
patches = [ patches = [
(fetchpatch { (fetchpatch {
name = "CVE-2017-7544.patch"; name = "CVE-2017-7544.patch";
url = https://sourceforge.net/p/libexif/bugs/_discuss/thread/fc394c4b/489a/attachment/xx.pat; url = "https://github.com/libexif/libexif/commit/c39acd1692023b26290778a02a9232c873f9d71a.patch";
sha256 = "1qgk8hgnxr8d63jsc4vljxz9yg33mbml280dq4a6050rmk9wq4la"; sha256 = "0xgx6ly2i4q05shb61mfx6njwf1yp347jkznm0ka4m85i41xm6sd";
}) })
(fetchpatch {
name = "CVE-2018-20030-1.patch";
url = "https://github.com/libexif/libexif/commit/5d28011c40ec86cf52cffad541093d37c263898a.patch";
sha256 = "1wv8s962wmbn2m2xypgirf12g6msrbplpsmd5bh86irfwhkcppj3";
})
(fetchpatch {
name = "CVE-2018-20030-2.patch";
url = "https://github.com/libexif/libexif/commit/6aa11df549114ebda520dde4cdaea2f9357b2c89.patch";
sha256 = "01aqvz63glwq6wg0wr7ykqqghb4abgq77ghvhizbzadg1k4h7drx";
excludes = [ "NEWS" ];
})
]; ];
patchFlags = "-p0";
buildInputs = [ gettext ]; buildInputs = [ gettext ];
meta = { meta = {
homepage = http://libexif.sourceforge.net/; homepage = https://libexif.github.io/;
description = "A library to read and manipulate EXIF data in digital photographs"; description = "A library to read and manipulate EXIF data in digital photographs";
license = stdenv.lib.licenses.lgpl21; license = stdenv.lib.licenses.lgpl21;
platforms = stdenv.lib.platforms.unix; platforms = stdenv.lib.platforms.unix;
maintainers = [ stdenv.lib.maintainers.erictapen ];
}; };
} }