about summary refs log tree commit diff
path: root/pkgs/development
diff options
context:
space:
mode:
authorFranz Pletz <fpletz@fnordicwalking.de>2016-11-10 03:22:31 +0100
committerFranz Pletz <fpletz@fnordicwalking.de>2016-11-10 03:50:43 +0100
commit3190a6c45208bbad97ffe056f01155a2a65ac403 (patch)
treef8ed6ac4aa7c65b9ca06b9b3622752cf03870537 /pkgs/development
parentf7c288507a1fb43d7cd90b55a84a01b48373f2c6 (diff)
downloadnixlib-3190a6c45208bbad97ffe056f01155a2a65ac403.tar
nixlib-3190a6c45208bbad97ffe056f01155a2a65ac403.tar.gz
nixlib-3190a6c45208bbad97ffe056f01155a2a65ac403.tar.bz2
nixlib-3190a6c45208bbad97ffe056f01155a2a65ac403.tar.lz
nixlib-3190a6c45208bbad97ffe056f01155a2a65ac403.tar.xz
nixlib-3190a6c45208bbad97ffe056f01155a2a65ac403.tar.zst
nixlib-3190a6c45208bbad97ffe056f01155a2a65ac403.zip
libwmf: add patch to fix CVE-2016-9011
cc #20274
Diffstat (limited to 'pkgs/development')
-rw-r--r--pkgs/development/libraries/libwmf/default.nix9
1 files changed, 7 insertions, 2 deletions
diff --git a/pkgs/development/libraries/libwmf/default.nix b/pkgs/development/libraries/libwmf/default.nix
index 229563d46af8..5683e88b0205 100644
--- a/pkgs/development/libraries/libwmf/default.nix
+++ b/pkgs/development/libraries/libwmf/default.nix
@@ -1,5 +1,5 @@
-{ stdenv, fetchurl, zlib, imagemagick, libpng, pkgconfig, glib, freetype
-, libjpeg, libxml2 }:
+{ stdenv, fetchurl, fetchpatch, zlib, imagemagick, libpng, pkgconfig, glib
+, freetype, libjpeg, libxml2 }:
 
 stdenv.mkDerivation {
   name = "libwmf-0.2.8.4";
@@ -14,6 +14,11 @@ stdenv.mkDerivation {
   patches = [
     ./CVE-2006-3376.patch ./CVE-2009-1364.patch
     ./CVE-2015-0848+4588+4695+4696.patch
+    (fetchpatch {
+      name = "libwmf-0.2.8.4-CVE-2016-9011-debian.patch";
+      url = "https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=842090;filename=libwmf-0.2.8.4-CVE-2016-9011-debian.patch;msg=10";
+      sha256 = "15vnqrj1dlvn0g8ccrxj2r2cyb1rv0qf0kfangxfgsi5h8is0c2b";
+    })
   ];
 
   meta = {