summary refs log tree commit diff
path: root/pkgs/development/libraries/libtiff
diff options
context:
space:
mode:
authorRobert Scott <code@humanleg.org.uk>2022-07-31 17:29:52 +0100
committerWinter <winter@winter.cafe>2022-08-06 02:28:58 -0400
commit19c5c57e72da4f3289cd216fd7b190035eea3187 (patch)
tree0efb05a35b0bae548186c20bffd237672e22cf0a /pkgs/development/libraries/libtiff
parentd6fe4d729a12afbfc35073651ec5962effc67702 (diff)
downloadnixpkgs-19c5c57e72da4f3289cd216fd7b190035eea3187.tar
nixpkgs-19c5c57e72da4f3289cd216fd7b190035eea3187.tar.gz
nixpkgs-19c5c57e72da4f3289cd216fd7b190035eea3187.tar.bz2
nixpkgs-19c5c57e72da4f3289cd216fd7b190035eea3187.tar.lz
nixpkgs-19c5c57e72da4f3289cd216fd7b190035eea3187.tar.xz
nixpkgs-19c5c57e72da4f3289cd216fd7b190035eea3187.tar.zst
nixpkgs-19c5c57e72da4f3289cd216fd7b190035eea3187.zip
libtiff: add patch for CVE-2022-34526
Diffstat (limited to 'pkgs/development/libraries/libtiff')
-rw-r--r--pkgs/development/libraries/libtiff/default.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/pkgs/development/libraries/libtiff/default.nix b/pkgs/development/libraries/libtiff/default.nix
index 404a4004fd4..7f6d11d9e71 100644
--- a/pkgs/development/libraries/libtiff/default.nix
+++ b/pkgs/development/libraries/libtiff/default.nix
@@ -36,6 +36,11 @@ stdenv.mkDerivation rec {
     # libc++abi 11 has an `#include <version>`, this picks up files name
     # `version` in the project's include paths
     ./rename-version.patch
+    (fetchpatch {
+      name = "CVE-2022-34526.patch";
+      url = "https://gitlab.com/libtiff/libtiff/-/commit/275735d0354e39c0ac1dc3c0db2120d6f31d1990.patch";
+      sha256 = "sha256-faKsdJjvQwNdkAKjYm4vubvZvnULt9zz4l53zBFr67s=";
+    })
   ];
 
   postPatch = ''