Merge pull request #199726 from LeSuisse/timg-CVE-2022-43151

timg: apply patch for CVE-2022-43151
This commit is contained in:
Anderson Torres 2022-11-05 16:45:37 -03:00 committed by GitHub
commit c8153ee8ed
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,4 +1,4 @@
{ lib, stdenv, fetchFromGitHub, cmake, pkg-config, graphicsmagick, libjpeg
{ lib, stdenv, fetchFromGitHub, fetchpatch, cmake, pkg-config, graphicsmagick, libjpeg
, ffmpeg, zlib, libexif, openslide }:
stdenv.mkDerivation rec {
@ -12,6 +12,14 @@ stdenv.mkDerivation rec {
sha256 = "1gdwg15fywya6k6pajkx86kv2d8k85pmisnq53b02br5i01y4k41";
};
patches = [
(fetchpatch {
url = "https://github.com/hzeller/timg/commit/e9667ea2c811aa9eb399b631aef9bba0d3711834.patch";
sha256 = "sha256-xvbOcnKqX52wYZlzm4Be9dz8Rq+n3s2kKPFr0Y0igAU=";
name = "CVE-2022-43151.patch";
})
];
buildInputs = [ graphicsmagick ffmpeg libexif libjpeg openslide zlib ];
nativeBuildInputs = [ cmake pkg-config ];