summary refs log tree commit diff
diff options
context:
space:
mode:
authorRobert Scott <code@humanleg.org.uk>2023-04-13 23:41:49 +0100
committerRobert Scott <code@humanleg.org.uk>2023-04-14 00:26:57 +0100
commit99910f07fb677c46823258eb38168409095f8910 (patch)
tree03b5ce4f10cd9b9614fc800b2b9620b2579523bc
parent5557fcff78472f808ee254ee3470a85faf594612 (diff)
downloadnixpkgs-99910f07fb677c46823258eb38168409095f8910.tar
nixpkgs-99910f07fb677c46823258eb38168409095f8910.tar.gz
nixpkgs-99910f07fb677c46823258eb38168409095f8910.tar.bz2
nixpkgs-99910f07fb677c46823258eb38168409095f8910.tar.lz
nixpkgs-99910f07fb677c46823258eb38168409095f8910.tar.xz
nixpkgs-99910f07fb677c46823258eb38168409095f8910.tar.zst
nixpkgs-99910f07fb677c46823258eb38168409095f8910.zip
libde265: add patches for CVE-2023-27102 & CVE-2023-27103
-rw-r--r--pkgs/development/libraries/libde265/default.nix14
1 files changed, 14 insertions, 0 deletions
diff --git a/pkgs/development/libraries/libde265/default.nix b/pkgs/development/libraries/libde265/default.nix
index c24209e4ab6..e75393fd919 100644
--- a/pkgs/development/libraries/libde265/default.nix
+++ b/pkgs/development/libraries/libde265/default.nix
@@ -1,6 +1,7 @@
 { lib
 , stdenv
 , fetchFromGitHub
+, fetchpatch
 , autoreconfHook
 , pkg-config
 
@@ -22,6 +23,19 @@ stdenv.mkDerivation rec {
     sha256 = "sha256-0aRUh5h49fnjBjy42A5fWYHnhnQ4CFoeSIXZilZewW8=";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2023-27102.patch";
+      url = "https://github.com/strukturag/libde265/commit/0b1752abff97cb542941d317a0d18aa50cb199b1.patch";
+      sha256 = "sha256-q0NKuk2r5RQT9MJpRO3CTPj6VqYRBnffs9yZ+GM+lNc=";
+    })
+    (fetchpatch {
+      name = "CVE-2023-27103.patch";
+      url = "https://github.com/strukturag/libde265/commit/d6bf73e765b7a23627bfd7a8645c143fd9097995.patch";
+      sha256 = "sha256-vxciVzSuVCVDpdz+TKg2tMWp2ArubYji5GLaR9VP4F0=";
+    })
+  ];
+
   nativeBuildInputs = [ autoreconfHook pkg-config ];
 
   enableParallelBuilding = true;