[24.05] openimageio: add patch for CVE-2024-40630 (#337514)

This commit is contained in:
Thomas Gerbet
2024-09-07 18:27:07 +02:00
committed by GitHub

View File

@@ -1,5 +1,6 @@
{ lib, stdenv
, fetchFromGitHub
, fetchpatch
, boost
, cmake
, giflib
@@ -24,6 +25,14 @@ stdenv.mkDerivation rec {
hash = "sha256-FtUZqk1m9ahdnwhrBeMFkUbV0dangMY/w9ShevCASfo=";
};
patches = [
(fetchpatch {
name = "CVE-2024-40630.patch";
url = "https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/0a2dcb4cf2c3fd4825a146cd3ad929d9d8305ce3.patch";
hash = "sha256-zwKcXRVjf8oq3MO6twfjbY9oM1M7GtV7usrXCT5cwWo=";
})
];
# Workaround broken zlib version detecion in CMake < 3.37.
postPatch = ''
substituteInPlace ./src/cmake/Config.cmake.in \