From eda117687797c974fa21f57508f17a0501ed7f61 Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Sun, 31 Jul 2022 17:29:52 +0100 Subject: [PATCH] libtiff: add patch for CVE-2022-34526 (cherry picked from commit 19c5c57e72da4f3289cd216fd7b190035eea3187) --- pkgs/development/libraries/libtiff/default.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkgs/development/libraries/libtiff/default.nix b/pkgs/development/libraries/libtiff/default.nix index 410447a78321..f08e815d6d73 100644 --- a/pkgs/development/libraries/libtiff/default.nix +++ b/pkgs/development/libraries/libtiff/default.nix @@ -93,6 +93,11 @@ stdenv.mkDerivation rec { url = "https://gitlab.com/libtiff/libtiff/-/commit/c1ae29f9ebacd29b7c3e0c7db671af7db3584bc2.patch"; sha256 = "1y75c72s41pl39d5zr5pmkiyfrancllv8fbl10zvc67pg3qjq4v8"; }) + (fetchpatch { + name = "CVE-2022-34526.patch"; + url = "https://gitlab.com/libtiff/libtiff/-/commit/275735d0354e39c0ac1dc3c0db2120d6f31d1990.patch"; + sha256 = "sha256-faKsdJjvQwNdkAKjYm4vubvZvnULt9zz4l53zBFr67s="; + }) ]; postPatch = ''