summary refs log tree commit diff
path: root/pkgs/development/libraries/libtiff
diff options
context:
space:
mode:
authorChristian Kauhaus <kc@flyingcircus.io>2018-06-09 15:49:36 +0200
committerChristian Kauhaus <kc@flyingcircus.io>2018-06-09 15:49:36 +0200
commitcca45cc3e146a7b0abba24b3f72ae245f51473ee (patch)
tree3299d4fa26ee34e35c8ba165a2b0a81e5f513f39 /pkgs/development/libraries/libtiff
parent7468501411c40aefd6ffe1e2a1bedef29e189256 (diff)
downloadnixpkgs-cca45cc3e146a7b0abba24b3f72ae245f51473ee.tar
nixpkgs-cca45cc3e146a7b0abba24b3f72ae245f51473ee.tar.gz
nixpkgs-cca45cc3e146a7b0abba24b3f72ae245f51473ee.tar.bz2
nixpkgs-cca45cc3e146a7b0abba24b3f72ae245f51473ee.tar.lz
nixpkgs-cca45cc3e146a7b0abba24b3f72ae245f51473ee.tar.xz
nixpkgs-cca45cc3e146a7b0abba24b3f72ae245f51473ee.tar.zst
nixpkgs-cca45cc3e146a7b0abba24b3f72ae245f51473ee.zip
Get libtiff on the same patch level as Debian. The imported patch file contains:
CVE-2017-9935
CVE-2017-11613
CVE-2017-17095
CVE-2017-18013
CVE-2018-5784
CVE-2018-7456

Re #41748 (master)
Re #41749 (release-18.03 - needs to be cherry-picked)
Diffstat (limited to 'pkgs/development/libraries/libtiff')
-rw-r--r--pkgs/development/libraries/libtiff/default.nix8
1 files changed, 4 insertions, 4 deletions
diff --git a/pkgs/development/libraries/libtiff/default.nix b/pkgs/development/libraries/libtiff/default.nix
index ab1bda9ed29..6676944d529 100644
--- a/pkgs/development/libraries/libtiff/default.nix
+++ b/pkgs/development/libraries/libtiff/default.nix
@@ -13,12 +13,12 @@ stdenv.mkDerivation rec {
 
   prePatch = let
       debian = fetchurl {
-        url = http://snapshot.debian.org/archive/debian-debug/20180128T155203Z//pool/main/t/tiff/tiff_4.0.9-3.debian.tar.xz;
-        sha256 = "0wya42y7kcq093g3h7ca10cm5sns1mgnkjmdd2qdi59v8arga4y4";
+        url = http://http.debian.net/debian/pool/main/t/tiff/tiff_4.0.9-5.debian.tar.xz;
+        sha256 = "15lwcsd46gini27akms2ngyxnwi1hs2yskrv5x2wazs5fw5ii62w";
       };
     in ''
-      tar xf '${debian}'
-      patches="$patches $(cat debian/patches/series | sed 's|^|debian/patches/|')"
+      tar xf ${debian}
+      patches="$patches $(sed 's|^|debian/patches/|' < debian/patches/series)"
     '';
 
   outputs = [ "bin" "dev" "out" "man" "doc" ];