openimageio: add patch for CVE-2024-40630

This commit is contained in:
Robert Scott 2024-08-26 18:27:44 +01:00
parent 8031304124
commit 4daef60456

View File

@ -1,5 +1,6 @@
{ lib, stdenv
, fetchFromGitHub
, fetchpatch
, boost
, cmake
, giflib
@ -24,6 +25,14 @@ stdenv.mkDerivation rec {
hash = "sha256-FtUZqk1m9ahdnwhrBeMFkUbV0dangMY/w9ShevCASfo=";
};
patches = [
(fetchpatch {
name = "CVE-2024-40630.patch";
url = "https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/0a2dcb4cf2c3fd4825a146cd3ad929d9d8305ce3.patch";
hash = "sha256-zwKcXRVjf8oq3MO6twfjbY9oM1M7GtV7usrXCT5cwWo=";
})
];
# Workaround broken zlib version detecion in CMake < 3.37.
postPatch = ''
substituteInPlace ./src/cmake/Config.cmake.in \