advancecomp: fix CVE-2019-9210

This commit is contained in:
Andreas Rammhold 2019-12-15 23:15:35 +01:00
parent ce549ddf26
commit f23627cb12
No known key found for this signature in database
GPG Key ID: E432E410B5E48C86

View File

@ -1,5 +1,9 @@
{ stdenv, fetchFromGitHub { stdenv
, autoreconfHook, zlib }: , fetchFromGitHub
, fetchpatch
, autoreconfHook
, zlib
}:
stdenv.mkDerivation rec { stdenv.mkDerivation rec {
pname = "advancecomp"; pname = "advancecomp";
@ -15,6 +19,15 @@ stdenv.mkDerivation rec {
nativeBuildInputs = [ autoreconfHook ]; nativeBuildInputs = [ autoreconfHook ];
buildInputs = [ zlib ]; buildInputs = [ zlib ];
patches = [
(fetchpatch {
name = "CVE-2019-9210.patch";
url = "https://github.com/amadvance/advancecomp/commit/fcf71a89265c78fc26243574dda3a872574a5c02.patch";
sha256 = "0cdv9g87c1y8zwhqkd9ba2zjw4slcvg7yzcqv43idvnwb5fl29n7";
excludes = [ "doc/history.d" ];
})
];
meta = with stdenv.lib; { meta = with stdenv.lib; {
description = ''A set of tools to optimize deflate-compressed files''; description = ''A set of tools to optimize deflate-compressed files'';
license = licenses.gpl3 ; license = licenses.gpl3 ;