nixpkgs/pkgs/development/libraries/exiv2/default.nix
Vladimír Čunát da3105d538 exiv2: fix CVE-2014-9449 by upstream patch
It's just a crash fix, not a "real" vulnerability.
2015-02-07 06:48:21 +01:00

29 lines
886 B
Nix

{stdenv, fetchurl, fetchpatch, zlib, expat}:
stdenv.mkDerivation rec {
name = "exiv2-0.24";
src = fetchurl {
url = "http://www.exiv2.org/${name}.tar.gz";
sha256 = "13pgvz14kyapxl89pxjaq3274k56d5lzfckpg1g9z7gvqzk4797l";
};
patches = [(fetchpatch {
name = "CVE-2014-9449.diff";
url = "http://dev.exiv2.org/projects/exiv2/repository/revisions/3264/diff?format=diff&rev_to=3263";
sha256 = "02w0fksl966d4v6bkg6rq3wmvv8xjpvfp47qr0nv1xq0bphxqzag";
})];
propagatedBuildInputs = [zlib expat];
# configure script finds zlib&expat but it thinks that they're in /usr
configureFlags = "--with-zlib=${zlib} --with-expat=${expat}";
meta = {
homepage = http://www.exiv2.org/;
description = "A library and command-line utility to manage image metadata";
maintainers = [stdenv.lib.maintainers.urkud];
platforms = stdenv.lib.platforms.all;
};
}