summary refs log tree commit diff
path: root/pkgs/applications/graphics/shutter
diff options
context:
space:
mode:
authorGraham Christensen <graham@tumblr.com>2016-11-16 13:57:45 -0500
committerGraham Christensen <graham@grahamc.com>2016-11-16 22:06:06 -0500
commitd0d3330866eb74befa24d1cfbead4a22f28fae87 (patch)
tree0d379adc1f39b72fe8764fa8905d167c3bdb4209 /pkgs/applications/graphics/shutter
parent7ed55dc9e47443276f48908065101d1e9380929e (diff)
downloadnixpkgs-d0d3330866eb74befa24d1cfbead4a22f28fae87.tar
nixpkgs-d0d3330866eb74befa24d1cfbead4a22f28fae87.tar.gz
nixpkgs-d0d3330866eb74befa24d1cfbead4a22f28fae87.tar.bz2
nixpkgs-d0d3330866eb74befa24d1cfbead4a22f28fae87.tar.lz
nixpkgs-d0d3330866eb74befa24d1cfbead4a22f28fae87.tar.xz
nixpkgs-d0d3330866eb74befa24d1cfbead4a22f28fae87.tar.zst
nixpkgs-d0d3330866eb74befa24d1cfbead4a22f28fae87.zip
shutter: add patch for CVE-2015-0854 with remote code
Diffstat (limited to 'pkgs/applications/graphics/shutter')
-rw-r--r--pkgs/applications/graphics/shutter/default.nix10
1 files changed, 9 insertions, 1 deletions
diff --git a/pkgs/applications/graphics/shutter/default.nix b/pkgs/applications/graphics/shutter/default.nix
index 0d52e563c9d..3d4e8c592ab 100644
--- a/pkgs/applications/graphics/shutter/default.nix
+++ b/pkgs/applications/graphics/shutter/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl, perl, perlPackages, makeWrapper, imagemagick, gdk_pixbuf, librsvg }:
+{ stdenv, fetchurl, fetchpatch, perl, perlPackages, makeWrapper, imagemagick, gdk_pixbuf, librsvg }:
 
 let
   perlModules = with perlPackages;
@@ -18,6 +18,14 @@ stdenv.mkDerivation rec {
     sha256 = "09cn3scwy98wqxkrjhnmxhpfnnynlbb41856yn5m3zwzqrxiyvak";
   };
 
+  patches = [
+    (fetchpatch {
+      url = "http://svnweb.mageia.org/packages/cauldron/shutter/current/SOURCES/CVE-2015-0854.patch?revision=880308&view=co";
+      name = "CVE-2015-0854.patch";
+      sha256 = "14r18sxz3ylf39cn9b85snjhjxdk6ngq4vnpljwghw2q5430nb12";
+    })
+  ];
+
   buildInputs = [ perl makeWrapper gdk_pixbuf librsvg ] ++ perlModules;
 
   installPhase = ''