about summary refs log tree commit diff
path: root/nixpkgs/pkgs/development/libraries/zziplib
diff options
context:
space:
mode:
authorAlyssa Ross <hi@alyssa.is>2019-06-19 19:22:30 +0000
committerAlyssa Ross <hi@alyssa.is>2019-06-19 19:22:30 +0000
commit6c3ffdc228a9808c65a0205cd1fd404578d02dee (patch)
treec5998bfbac1bc92dace314e051164f830976d661 /nixpkgs/pkgs/development/libraries/zziplib
parentef93931efff0323fd13c4270415b578c73b5ef35 (diff)
parent83ba5afcc9682b52b39a9a958f730b966cc369c5 (diff)
downloadnixlib-6c3ffdc228a9808c65a0205cd1fd404578d02dee.tar
nixlib-6c3ffdc228a9808c65a0205cd1fd404578d02dee.tar.gz
nixlib-6c3ffdc228a9808c65a0205cd1fd404578d02dee.tar.bz2
nixlib-6c3ffdc228a9808c65a0205cd1fd404578d02dee.tar.lz
nixlib-6c3ffdc228a9808c65a0205cd1fd404578d02dee.tar.xz
nixlib-6c3ffdc228a9808c65a0205cd1fd404578d02dee.tar.zst
nixlib-6c3ffdc228a9808c65a0205cd1fd404578d02dee.zip
Merge commit '83ba5afcc9682b52b39a9a958f730b966cc369c5'
Diffstat (limited to 'nixpkgs/pkgs/development/libraries/zziplib')
-rw-r--r--nixpkgs/pkgs/development/libraries/zziplib/default.nix9
1 files changed, 8 insertions, 1 deletions
diff --git a/nixpkgs/pkgs/development/libraries/zziplib/default.nix b/nixpkgs/pkgs/development/libraries/zziplib/default.nix
index 6aede4e9653f..010c73336b92 100644
--- a/nixpkgs/pkgs/development/libraries/zziplib/default.nix
+++ b/nixpkgs/pkgs/development/libraries/zziplib/default.nix
@@ -1,4 +1,4 @@
-{ docbook_xml_dtd_412, fetchurl, stdenv, perl, python2, zip, xmlto, zlib }:
+{ docbook_xml_dtd_412, fetchurl, stdenv, perl, python2, zip, xmlto, zlib, fetchpatch }:
 
 stdenv.mkDerivation rec {
   name = "zziplib-${version}";
@@ -9,6 +9,13 @@ stdenv.mkDerivation rec {
     sha256 = "0i052a7shww0fzsxrdp3rd7g4mbzx7324a8ysbc0br7frpblcql4";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2018-17828.patch";
+      url = "https://github.com/gdraheim/zziplib/commit/f609ae8971f3c0ce6.diff";
+      sha256 = "0jhiz4fgr93wzh6q03avn95b2nsf6402jaki6hxirxyhs5v9ahry";
+    })
+  ];
   postPatch = ''
     sed -i -e s,--export-dynamic,, configure
   '';