nixpkgs/pkgs/tools/compression/rzip/default.nix

{lib, stdenv, fetchurl, fetchpatch, bzip2}:

stdenv.mkDerivation {
  name = "rzip-2.1";
  src = fetchurl {
    url = "mirror://samba/rzip/rzip-2.1.tar.gz";
    sha256 = "4bb96f4d58ccf16749ed3f836957ce97dbcff3e3ee5fd50266229a48f89815b7";
  };
  buildInputs = [ bzip2 ];

  patches = [
    (fetchpatch {
      name = "CVE-2017-8364-fill-buffer.patch";
      url = "https://sources.debian.net/data/main/r/rzip/2.1-4.1/debian/patches/80-CVE-2017-8364-fill-buffer.patch";
      sha256 = "0jcjlx9ksdvxvjyxmyzscx9ar9992iy5icw0sc3n0p09qi4d6x1r";
    })
  ];

  meta = {
    homepage = "https://rzip.samba.org/";
    description = "Compression program";
    license = lib.licenses.gpl2Plus;
    platforms = lib.platforms.unix;
  };
}