pyrox.dev
freeimage: fix CVE-2015-0852 & CVE-2016-5684
+12
-1
pkgs/development/libraries/freeimage/default.nix
+12
-1
pkgs/development/libraries/freeimage/default.nix
···
1
-
{ stdenv, fetchurl, unzip, darwin }:
1
+
{ stdenv, fetchpatch, fetchurl, unzip, darwin }:
2
2
3
3
stdenv.mkDerivation {
4
4
name = "freeimage-3.17.0";
···
7
7
url = mirror://sourceforge/freeimage/FreeImage3170.zip;
8
8
sha256 = "12bz57asdcfsz3zr9i9nska0fb6h3z2aizy412qjqkixkginbz7v";
9
9
};
10
+
11
+
patches = [
12
+
(fetchpatch {
13
+
url = "https://anonscm.debian.org/cgit/debian-science/packages/freeimage.git/plain/debian/patches/Fix-CVE-2015-0852.patch";
14
+
sha256 = "0qkb96mvvhji75gz7dma3vj2b71smp96z3kl2ydj6skvnw6slnmc";
15
+
})
16
+
(fetchpatch {
17
+
url = "https://anonscm.debian.org/cgit/debian-science/packages/freeimage.git/plain/debian/patches/Fix-CVE-2016-5684.patch";
18
+
sha256 = "18g5ckrvqfjcldis7zf7hmfl8b3mgnc6akd6x3cdq8c5j7l1y98f";
19
+
})
20
+
];
10
21
11
22
buildInputs = [ unzip ] ++ stdenv.lib.optional stdenv.isDarwin darwin.cctools;
12
23