about summary refs log tree commit diff
path: root/pkgs/development/libraries/openexr
diff options
context:
space:
mode:
authorChristian Kauhaus <kc@flyingcircus.io>2019-10-27 18:08:45 +0100
committerFrederik Rietdijk <freddyrietdijk@fridh.nl>2019-11-03 10:30:17 +0100
commit1bd842a121cc07a86635bfe88495da551005f561 (patch)
tree4bf87735b945e63b026860ea7f3fe0f9ece2214e /pkgs/development/libraries/openexr
parent9802b19e596500c62e532a9fd81a29c5ef7b76f6 (diff)
downloadnixlib-1bd842a121cc07a86635bfe88495da551005f561.tar
nixlib-1bd842a121cc07a86635bfe88495da551005f561.tar.gz
nixlib-1bd842a121cc07a86635bfe88495da551005f561.tar.bz2
nixlib-1bd842a121cc07a86635bfe88495da551005f561.tar.lz
nixlib-1bd842a121cc07a86635bfe88495da551005f561.tar.xz
nixlib-1bd842a121cc07a86635bfe88495da551005f561.tar.zst
nixlib-1bd842a121cc07a86635bfe88495da551005f561.zip
openexr: patch CVE-2018-18444
Diffstat (limited to 'pkgs/development/libraries/openexr')
-rw-r--r--pkgs/development/libraries/openexr/default.nix9
1 files changed, 8 insertions, 1 deletions
diff --git a/pkgs/development/libraries/openexr/default.nix b/pkgs/development/libraries/openexr/default.nix
index 9eef138c532e..7bd3985c12b2 100644
--- a/pkgs/development/libraries/openexr/default.nix
+++ b/pkgs/development/libraries/openexr/default.nix
@@ -1,4 +1,5 @@
-{ lib, stdenv, buildPackages, fetchurl, autoconf, automake, libtool, pkgconfig, zlib, ilmbase, }:
+{ lib, stdenv, buildPackages, fetchurl, autoconf, automake, libtool, pkgconfig,
+  zlib, ilmbase, fetchpatch }:
 
 let
   # Doesn't really do anything when not crosscompiling
@@ -16,6 +17,12 @@ stdenv.mkDerivation rec {
 
   patches = [
     ./bootstrap.patch
+    (fetchpatch {
+      name = "CVE-2018-18444.patch";
+      url = "https://github.com/openexr/openexr/commit/1b0f1e5d7dcf2e9d6cbb4e005e803808b010b1e0.patch";
+      sha256 = "0f5m4wdwqqg8wfg7azzsz5yfpdrvws314rd4sqfc74j1g6wrcnqj";
+      stripLen = 1;
+    })
   ];
 
   outputs = [ "bin" "dev" "out" "doc" ];