taglib: Fix CVE-2017-12678

This commit is contained in:
adisbladis 2018-01-02 10:51:03 +01:00
parent 59be35113d
commit 2e00e2b276
No known key found for this signature in database
GPG key ID: ED58F95069B004F5

View file

@ -1,4 +1,4 @@
{stdenv, fetchurl, zlib, cmake}:
{stdenv, fetchurl, zlib, cmake, fetchpatch}:
stdenv.mkDerivation rec {
name = "taglib-1.11.1";
@ -8,6 +8,15 @@ stdenv.mkDerivation rec {
sha256 = "0ssjcdjv4qf9liph5ry1kngam1y7zp8fzr9xv4wzzrma22kabldn";
};
patches = [
(fetchpatch {
# https://github.com/taglib/taglib/issues/829
name = "CVE-2017-12678.patch";
url = "https://github.com/taglib/taglib/commit/eb9ded1206f18.patch";
sha256 = "1bvpxsvmlpi3by7myzss9kkpdkv405612n8ff68mw1ambj8h1m90";
})
];
nativeBuildInputs = [ cmake ];
buildInputs = [ zlib ];