jhead: add patches for CVE-2019-1010301, CVE-2019-1010302

This commit is contained in:
Robert Scott 2019-10-31 21:02:34 +00:00
parent 08884d6a0f
commit 7dacaa056c

View file

@ -1,4 +1,4 @@
{ stdenv, fetchurl, libjpeg }:
{ stdenv, fetchurl, fetchpatch, libjpeg }:
stdenv.mkDerivation rec {
pname = "jhead";
@ -9,6 +9,19 @@ stdenv.mkDerivation rec {
sha256 = "1hn0yqcicq3qa20h1g313l1a671r8mccpb9gz0w1056r500lw6c2";
};
patches = [
(fetchpatch {
name = "CVE-2019-1010301.patch";
url = "https://sources.debian.org/data/main/j/jhead/1:3.03-3/debian/patches/36_CVE-2019-1010301";
sha256 = "1vvrg50z5y7sjhfi973wh1q1v79sqp7hk5d4z0dlnx3fqgkjrx7q";
})
(fetchpatch {
name = "CVE-2019-1010302.patch";
url = "https://sources.debian.org/data/main/j/jhead/1:3.03-3/debian/patches/37_CVE-2019-1010302";
sha256 = "1h11mpsi7hpwbi8kpnkjwn6zpqf88f132h0rsg8sggcs3vva2x8y";
})
];
buildInputs = [ libjpeg ];
patchPhase = ''