From 85dddef69e085668d99d1d2e1895a8924f4c3266 Mon Sep 17 00:00:00 2001 From: Marek Mahut Date: Wed, 31 Jul 2019 17:21:29 +0200 Subject: [PATCH 1/2] wavpack: CVE-2019-1010317 Fixes #65655 --- pkgs/development/libraries/wavpack/default.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkgs/development/libraries/wavpack/default.nix b/pkgs/development/libraries/wavpack/default.nix index adfce3ea50b7..285da3f79e4a 100644 --- a/pkgs/development/libraries/wavpack/default.nix +++ b/pkgs/development/libraries/wavpack/default.nix @@ -59,6 +59,11 @@ stdenv.mkDerivation rec { name = "CVE-2018-19841.patch"; sha256 = "08gx5xx51bi86cqqy7cv1d25k669a7wnkksasjspphwkpwkcxymy"; }) + (fetchpatch { + url = "https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.patch"; + name = "CVE-2019-1010317.patch"; + sha256 = "0v748nd9408v6ah37cn8wr0k0m0ny1g884q8q92j1dhwad69kfid"; + }) ]; meta = with stdenv.lib; { From 87d5ec4175246eab8495aae75bc8083f8ee6df65 Mon Sep 17 00:00:00 2001 From: Marek Mahut Date: Wed, 31 Jul 2019 17:24:00 +0200 Subject: [PATCH 2/2] wavpack: CVE-2019-1010319 Fixes #65655 --- pkgs/development/libraries/wavpack/default.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkgs/development/libraries/wavpack/default.nix b/pkgs/development/libraries/wavpack/default.nix index 285da3f79e4a..8af33c10319c 100644 --- a/pkgs/development/libraries/wavpack/default.nix +++ b/pkgs/development/libraries/wavpack/default.nix @@ -64,6 +64,11 @@ stdenv.mkDerivation rec { name = "CVE-2019-1010317.patch"; sha256 = "0v748nd9408v6ah37cn8wr0k0m0ny1g884q8q92j1dhwad69kfid"; }) + (fetchpatch { + url = "https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.patch"; + name = "CVE-2019-1010319.patch"; + sha256 = "011sqdgpykilaj2c4ns298z7aad03yprpva0dqr39nx88ji6jnrb"; + }) ]; meta = with stdenv.lib; {