From 722e4976bc67b587baf50c3ecde6fbcd681f9de9 Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Tue, 21 Jun 2022 00:19:23 +0100 Subject: [PATCH] liblouis: apply patch for CVE-2022-26981 Fixes: CVE-2022-26981 Refs: liblouis/liblouis#1185 GHSA-xrp8-mw8v-p6mq https://nvd.nist.gov/vuln/detail/CVE-2022-26981 (cherry-pick of a4f5b169f1e40aba9fd2eedcc6ebba3e9f90645e) --- pkgs/development/libraries/liblouis/default.nix | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/pkgs/development/libraries/liblouis/default.nix b/pkgs/development/libraries/liblouis/default.nix index e80583637ef7..9c6c821de558 100644 --- a/pkgs/development/libraries/liblouis/default.nix +++ b/pkgs/development/libraries/liblouis/default.nix @@ -1,5 +1,6 @@ { fetchFromGitHub , lib, stdenv +, fetchpatch , autoreconfHook , pkg-config , gettext @@ -21,6 +22,14 @@ stdenv.mkDerivation rec { sha256 = "sha256-vuD+afTOzldhfCRG5ghnWulNhip7BaTE7GfPhxXSMFw="; }; + patches = [ + (fetchpatch { + name = "CVE-2022-26981.patch"; + url = "https://github.com/liblouis/liblouis/commit/73751be7a5617bfff4a735ae095203a2d3ec50ef.patch"; + sha256 = "sha256-PvGG62QHVslrClZP903AYCBof6jDzNe4L8eFU8X0vF4="; + }) + ]; + outputs = [ "out" "dev" "man" "info" "doc" ]; nativeBuildInputs = [