Merge pull request #72387 from risicle/ris-jhead-CVE-2019-1010301-1010302

jhead: add patches for CVE-2019-1010301, CVE-2019-1010302
This commit is contained in:
Marek Mahut 2019-10-31 23:24:34 +01:00 committed by GitHub
commit fb5130d79a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1,4 +1,4 @@
{ stdenv, fetchurl, libjpeg }:
{ stdenv, fetchurl, fetchpatch, libjpeg }:
stdenv.mkDerivation rec {
pname = "jhead";
@ -9,6 +9,19 @@ stdenv.mkDerivation rec {
sha256 = "1hn0yqcicq3qa20h1g313l1a671r8mccpb9gz0w1056r500lw6c2";
};
patches = [
(fetchpatch {
name = "CVE-2019-1010301.patch";
url = "https://sources.debian.org/data/main/j/jhead/1:3.03-3/debian/patches/36_CVE-2019-1010301";
sha256 = "1vvrg50z5y7sjhfi973wh1q1v79sqp7hk5d4z0dlnx3fqgkjrx7q";
})
(fetchpatch {
name = "CVE-2019-1010302.patch";
url = "https://sources.debian.org/data/main/j/jhead/1:3.03-3/debian/patches/37_CVE-2019-1010302";
sha256 = "1h11mpsi7hpwbi8kpnkjwn6zpqf88f132h0rsg8sggcs3vva2x8y";
})
];
buildInputs = [ libjpeg ];
patchPhase = ''