From 3190a6c45208bbad97ffe056f01155a2a65ac403 Mon Sep 17 00:00:00 2001 From: Franz Pletz Date: Thu, 10 Nov 2016 03:22:31 +0100 Subject: [PATCH] libwmf: add patch to fix CVE-2016-9011 cc #20274 --- pkgs/development/libraries/libwmf/default.nix | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/libwmf/default.nix b/pkgs/development/libraries/libwmf/default.nix index 229563d46af..5683e88b020 100644 --- a/pkgs/development/libraries/libwmf/default.nix +++ b/pkgs/development/libraries/libwmf/default.nix @@ -1,5 +1,5 @@ -{ stdenv, fetchurl, zlib, imagemagick, libpng, pkgconfig, glib, freetype -, libjpeg, libxml2 }: +{ stdenv, fetchurl, fetchpatch, zlib, imagemagick, libpng, pkgconfig, glib +, freetype, libjpeg, libxml2 }: stdenv.mkDerivation { name = "libwmf-0.2.8.4"; @@ -14,6 +14,11 @@ stdenv.mkDerivation { patches = [ ./CVE-2006-3376.patch ./CVE-2009-1364.patch ./CVE-2015-0848+4588+4695+4696.patch + (fetchpatch { + name = "libwmf-0.2.8.4-CVE-2016-9011-debian.patch"; + url = "https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=842090;filename=libwmf-0.2.8.4-CVE-2016-9011-debian.patch;msg=10"; + sha256 = "15vnqrj1dlvn0g8ccrxj2r2cyb1rv0qf0kfangxfgsi5h8is0c2b"; + }) ]; meta = {