Merge pull request #284491 from LeSuisse/libredwg-CVE-2023-26157

libredwg: apply patch for CVE-2023-26157
This commit is contained in:
Nick Cao 2024-01-28 12:16:58 -05:00 committed by GitHub
commit 41ba20eb59
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -1,6 +1,7 @@
{ lib
, stdenv
, fetchFromGitHub
, fetchpatch
, autoreconfHook
, writeShellScript
, pkg-config
@ -27,6 +28,14 @@ stdenv.mkDerivation rec {
fetchSubmodules = true;
};
patches = [
(fetchpatch {
name = "CVE-2023-26157.patch";
url = "https://github.com/LibreDWG/libredwg/commit/c8cf03ce4c2315b146caf582ea061c0460193bcc.patch";
hash = "sha256-EEF3YYPW+6SvXRiAw3zz6tWU9w/qmGtc09Tf8wn7hVc=";
})
];
postPatch = let
printVersion = writeShellScript "print-version" ''
echo -n ${lib.escapeShellArg version}