Merge pull request #203817 from risicle/ris-mujs-CVE-2022-44789-r22.05

[22.05] mujs: add patch for CVE-2022-44789
This commit is contained in:
Robert Scott
2022-12-02 19:27:21 +00:00
committed by GitHub

View File

@@ -1,4 +1,4 @@
{ lib, stdenv, fetchurl, readline }:
{ lib, stdenv, fetchurl, readline, fetchpatch }:
stdenv.mkDerivation rec {
pname = "mujs";
@@ -9,6 +9,19 @@ stdenv.mkDerivation rec {
sha256 = "sha256-ZpdtHgajUnVKI0Kvc9Guy7U8x82uK2jNoBO33c+SMjM=";
};
patches = [
(fetchpatch {
name = "CVE-2022-44789.patch";
url = "https://git.ghostscript.com/?p=mujs.git;a=patch;h=edb50ad66f7601ca9a3544a0e9045e8a8c60561f";
sha256 = "sha256-KHBJlDchrXTmN5vEuyQ+saX12F5hyUlJFguiDsZkGqc=";
})
(fetchpatch {
name = "regex-compilation-stack-overflow.patch";
url = "https://git.ghostscript.com/?p=mujs.git;a=patch;h=160ae29578054dc09fd91e5401ef040d52797e61";
sha256 = "sha256-R0gTPj10fKtHbVe5RM6HNL772hVl9rXylkPw5qQWt0w=";
})
];
buildInputs = [ readline ];
makeFlags = [ "prefix=$(out)" ];