python3Packages.fonttools: add patch for CVE-2023-45139

This commit is contained in:
Robert Scott
2024-01-14 11:39:06 +00:00
parent 2bce5ccff0
commit 19879dd31b

View File

@@ -4,6 +4,7 @@
, pythonOlder
, isPyPy
, fetchFromGitHub
, fetchpatch
, setuptools-scm
, fs
, lxml
@@ -36,6 +37,14 @@ buildPythonPackage rec {
hash = "sha256-fcFFJi9Hr0m74LwFIhhhm/bMfxepAvg4/ymU53MmsPg=";
};
patches = [
(fetchpatch {
name = "CVE-2023-45139.patch";
url = "https://github.com/fonttools/fonttools/commit/9f61271dc1ca82ed91f529b130fe5dc5c9bf1f4c.patch";
hash = "sha256-29OB21B8S4hGZlvNJnOTYTFAmEii+z5oK6tycoK3PXc=";
})
];
nativeBuildInputs = [ setuptools-scm ];
passthru.optional-dependencies = let