summary refs log tree commit diff
path: root/pkgs/development/libraries/hunspell
diff options
context:
space:
mode:
authorMartin Milata <martin@martinmilata.cz>2020-02-18 14:13:46 +0100
committerFrederik Rietdijk <freddyrietdijk@fridh.nl>2020-02-19 09:31:01 +0100
commit1caac6f2dc467dd67eff688f3a9befdad5d0f9d0 (patch)
tree3aacd8ed301679cce8979c3b078830f31883404c /pkgs/development/libraries/hunspell
parentc65707bc25b252bc7474cb443f4fda1a93a1b12c (diff)
downloadnixpkgs-1caac6f2dc467dd67eff688f3a9befdad5d0f9d0.tar
nixpkgs-1caac6f2dc467dd67eff688f3a9befdad5d0f9d0.tar.gz
nixpkgs-1caac6f2dc467dd67eff688f3a9befdad5d0f9d0.tar.bz2
nixpkgs-1caac6f2dc467dd67eff688f3a9befdad5d0f9d0.tar.lz
nixpkgs-1caac6f2dc467dd67eff688f3a9befdad5d0f9d0.tar.xz
nixpkgs-1caac6f2dc467dd67eff688f3a9befdad5d0f9d0.tar.zst
nixpkgs-1caac6f2dc467dd67eff688f3a9befdad5d0f9d0.zip
hunspell: add patch for CVE-2019-16707
Fixes #70098, #73651.
Diffstat (limited to 'pkgs/development/libraries/hunspell')
-rw-r--r--pkgs/development/libraries/hunspell/default.nix11
1 files changed, 9 insertions, 2 deletions
diff --git a/pkgs/development/libraries/hunspell/default.nix b/pkgs/development/libraries/hunspell/default.nix
index f2f8cdcab20..a9b28253171 100644
--- a/pkgs/development/libraries/hunspell/default.nix
+++ b/pkgs/development/libraries/hunspell/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, fetchurl, ncurses, readline, autoreconfHook }:
+{ stdenv, fetchurl, fetchpatch, ncurses, readline, autoreconfHook }:
 
 stdenv.mkDerivation rec {
   version = "1.7.0";
@@ -14,7 +14,14 @@ stdenv.mkDerivation rec {
   buildInputs = [ ncurses readline ];
   nativeBuildInputs = [ autoreconfHook ];
 
-  patches = [ ./0001-Make-hunspell-look-in-XDG_DATA_DIRS-for-dictionaries.patch ];
+  patches = [
+    ./0001-Make-hunspell-look-in-XDG_DATA_DIRS-for-dictionaries.patch
+    (fetchpatch {
+      name = "CVE-2019-16707.patch";
+      url = "https://github.com/hunspell/hunspell/commit/ac938e2ecb48ab4dd21298126c7921689d60571b.patch";
+      sha256 = "0bwfksz87iy7ikx3fb54zd5ww169qfm9kl076hsch3cs8p30s8az";
+    })
+  ];
 
   postPatch = ''
     patchShebangs tests