fop: apply patch for CVE-2024-28168

https://www.openwall.com/lists/oss-security/2024/10/09/1
(cherry picked from commit 562995272c)
This commit is contained in:
Thomas Gerbet
2024-10-11 21:18:47 +02:00
committed by github-actions[bot]
parent 138474277c
commit a1a2ad1e5b

View File

@@ -1,6 +1,7 @@
{ lib
, stdenv
, fetchurl
, fetchpatch
, ant
, jdk
, jre
@@ -17,6 +18,14 @@ stdenv.mkDerivation (finalAttrs: {
hash = "sha256-b7Av17wu6Ar/npKOiwYqzlvBFSIuXTpqTacM1sxtBvc=";
};
patches = [
(fetchpatch {
name = "CVE-2024-28168.patch";
url = "https://github.com/apache/xmlgraphics-fop/commit/d96ba9a11710d02716b6f4f6107ebfa9ccec7134.patch";
hash = "sha256-zmUA1Tq6iZtvNECCiXebXodp6AikBn10NTZnVHpPMlw=";
})
];
nativeBuildInputs = [
ant
jdk