summary refs log tree commit diff
path: root/pkgs/applications/misc/mupdf
diff options
context:
space:
mode:
authorBenjamin Hipple <bhipple@protonmail.com>2018-06-10 16:01:05 -0400
committerxeji <36407913+xeji@users.noreply.github.com>2018-06-10 22:01:05 +0200
commit17d765058560cf3fb323b26249be8a1ebef06884 (patch)
treebf45d396da7bab0b72817fd454558d7691dece0b /pkgs/applications/misc/mupdf
parent6dabad3c77a55cd18a17b9b751cff6b08f9b7d0c (diff)
downloadnixlib-17d765058560cf3fb323b26249be8a1ebef06884.tar
nixlib-17d765058560cf3fb323b26249be8a1ebef06884.tar.gz
nixlib-17d765058560cf3fb323b26249be8a1ebef06884.tar.bz2
nixlib-17d765058560cf3fb323b26249be8a1ebef06884.tar.lz
nixlib-17d765058560cf3fb323b26249be8a1ebef06884.tar.xz
nixlib-17d765058560cf3fb323b26249be8a1ebef06884.tar.zst
nixlib-17d765058560cf3fb323b26249be8a1ebef06884.zip
mupdf: apply CVE-2018-10289 patch (#41802)
Fixes mupdf issue in https://github.com/NixOS/nixpkgs/issues/41748 by applying
patch from https://bugs.ghostscript.com/show_bug.cgi?id=699271
Diffstat (limited to 'pkgs/applications/misc/mupdf')
-rw-r--r--pkgs/applications/misc/mupdf/default.nix13
1 files changed, 8 insertions, 5 deletions
diff --git a/pkgs/applications/misc/mupdf/default.nix b/pkgs/applications/misc/mupdf/default.nix
index fbc7da070211..a8458e3432c5 100644
--- a/pkgs/applications/misc/mupdf/default.nix
+++ b/pkgs/applications/misc/mupdf/default.nix
@@ -23,12 +23,15 @@ in stdenv.mkDerivation rec {
   };
 
   patches = [
+    (fetchpatch {
+      # CVE-2018-10289
+      url = "https://bugs.ghostscript.com/attachment.cgi?id=15230";
+      sha256 = "0jmpacxd9930g6k57kda9jrcrbk75whdlv8xwmqg5jwn848qvy4q";
+    })
   ]
-
-  # Use shared libraries to decrease size
-  ++ stdenv.lib.optional (!stdenv.isDarwin) ./mupdf-1.13-shared_libs-1.patch
-
-  ++ stdenv.lib.optional stdenv.isDarwin ./darwin.patch
+    # Use shared libraries to decrease size
+    ++ stdenv.lib.optional (!stdenv.isDarwin) ./mupdf-1.13-shared_libs-1.patch
+    ++ stdenv.lib.optional stdenv.isDarwin ./darwin.patch
   ;
 
   postPatch = ''