From 054c9b908c60968b33fc573416e4ccee8d4ce668 Mon Sep 17 00:00:00 2001
From: Thomas Gerbet <thomas@gerbet.me>
Date: Thu, 17 Apr 2025 21:59:39 +0200
Subject: [PATCH] vorbis-tools: 1.4.2 -> 1.4.3

Fixes CVE-2023-43361.

https://github.com/xiph/vorbis-tools/blob/235540c05ad3f9cdc673ca09c237c9a9b5bda6eb/CHANGES
---
 pkgs/applications/audio/vorbis-tools/default.nix | 14 ++------------
 1 file changed, 2 insertions(+), 12 deletions(-)

diff --git a/pkgs/applications/audio/vorbis-tools/default.nix b/pkgs/applications/audio/vorbis-tools/default.nix
index c824ffddde59..8ff65cef581d 100644
--- a/pkgs/applications/audio/vorbis-tools/default.nix
+++ b/pkgs/applications/audio/vorbis-tools/default.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchurl,
-  fetchpatch,
   libogg,
   libvorbis,
   libao,
@@ -16,22 +15,13 @@
 
 stdenv.mkDerivation rec {
   pname = "vorbis-tools";
-  version = "1.4.2";
+  version = "1.4.3";
 
   src = fetchurl {
     url = "http://downloads.xiph.org/releases/vorbis/vorbis-tools-${version}.tar.gz";
-    sha256 = "1c7h4ivgfdyygz2hyh6nfibxlkz8kdk868a576qkkjgj5gn78xyv";
+    hash = "sha256-of493Gd3vc6/a3l+ft/gQ3lUskdW/8yMa4FrY+BGDd4=";
   };
 
-  patches = [
-    # Fixes a call to undeclared function `utf8_decode`.
-    # https://github.com/xiph/vorbis-tools/pull/33
-    (fetchpatch {
-      url = "https://github.com/xiph/vorbis-tools/commit/8a645f78b45ae7e370c0dc2a52d0f2612aa6110b.patch";
-      hash = "sha256-RkT9Xa0pRu/oO9E9qhDa17L0luWgYHI2yINIkPZanmI=";
-    })
-  ];
-
   # ld64 on darwin doesn't support nested archives and as the nested lib
   # (libbase64.a) is not required to build so leave it out
   postPatch = lib.optionalString stdenv.hostPlatform.isDarwin ''