libsass: add patch for CVE-2022-26592, CVE-2022-43357 & CVE-2022-43358

(cherry picked from commit 38d918c0fe)
This commit is contained in:
Robert Scott
2023-12-16 12:28:29 +00:00
parent ba5a810b40
commit 932ddcf72e

View File

@@ -1,4 +1,4 @@
{ lib, stdenv, fetchFromGitHub, autoreconfHook }:
{ lib, stdenv, fetchFromGitHub, autoreconfHook, fetchpatch }:
stdenv.mkDerivation rec {
pname = "libsass";
@@ -16,6 +16,14 @@ stdenv.mkDerivation rec {
'';
};
patches = [
(fetchpatch {
name = "CVE-2022-26592.CVE-2022-43357.CVE-2022-43358.patch";
url = "https://github.com/sass/libsass/pull/3184/commits/5bb0ea0c4b2ebebe542933f788ffacba459a717a.patch";
hash = "sha256-DR6pKFWL70uJt//drzq34LeTzT8rUqgUTpgfUHpD2s4=";
})
];
preConfigure = ''
export LIBSASS_VERSION=${version}
'';