Merge pull request #196988 from risicle/ris-shapelib-CVE-2022-0699

shapelib: add patch for CVE-2022-0699
This commit is contained in:
Anderson Torres 2022-10-20 22:11:21 -03:00 committed by GitHub
commit 9d2dc4f1fd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1,4 +1,8 @@
{ lib, stdenv, fetchurl }:
{ lib
, stdenv
, fetchurl
, fetchpatch
}:
stdenv.mkDerivation rec {
pname = "shapelib";
@ -9,6 +13,14 @@ stdenv.mkDerivation rec {
sha256 = "1qfsgb8b3yiqwvr6h9m81g6k9fjhfys70c22p7kzkbick20a9h0z";
};
patches = [
(fetchpatch {
name = "CVE-2022-0699.patch";
url = "https://github.com/OSGeo/shapelib/commit/c75b9281a5b9452d92e1682bdfe6019a13ed819f.patch";
sha256 = "sha256-zJ7JHUtInA5q/RbkSs1DqVK+UQi2vIw2t1jqxocnQQI=";
})
];
meta = with lib; {
description = "C Library for reading, writing and updating ESRI Shapefiles";
homepage = "http://shapelib.maptools.org/";