From a80b6ca83fffaf2ff5eff32a4460541dd523a7dd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <dev@schuetz-co.de>
Date: Mon, 1 Feb 2021 11:52:10 +0100
Subject: [PATCH] gdk-pixbuf: add patch for CVE-2020-29385

---
 pkgs/development/libraries/gdk-pixbuf/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkgs/development/libraries/gdk-pixbuf/default.nix b/pkgs/development/libraries/gdk-pixbuf/default.nix
index 08b8f70b2d9a..ff2bae13f563 100644
--- a/pkgs/development/libraries/gdk-pixbuf/default.nix
+++ b/pkgs/development/libraries/gdk-pixbuf/default.nix
@@ -44,6 +44,12 @@ stdenv.mkDerivation rec {
       url = "https://gitlab.gnome.org/GNOME/gdk-pixbuf/merge_requests/59.diff";
       sha256 = "0kaflac3mrh6031hwxk7j9fhli775hc503818h8zfl6b28zyn93f";
     })
+
+    (fetchpatch {
+      name = "CVE-2020-29385.patch";
+      url = "https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/bdd3acbd48a575d418ba6bf1b32d7bda2fae1c81.patch";
+      sha256 = "0cbf9sigdk49323wdhi46lxap8agjl72wjscvsg5mxq1dfc9f98k";
+    })
   ];
 
   nativeBuildInputs = [