libtiff: patch CVE-2024-13978 and CVE-2025-9165 (#436742)
This commit is contained in:
@@ -60,6 +60,21 @@ stdenv.mkDerivation (finalAttrs: {
|
||||
# libc++abi 11 has an `#include <version>`, this picks up files name
|
||||
# `version` in the project's include paths
|
||||
./rename-version.patch
|
||||
(fetchpatch {
|
||||
name = "CVE-2024-13978_1.patch";
|
||||
url = "https://gitlab.com/libtiff/libtiff/-/commit/7be20ccaab97455f192de0ac561ceda7cd9e12d1.patch";
|
||||
hash = "sha256-cpsQyIvyP6LkGeQTlLX73iNd1AcPkvZ6Xqfns7G3JBc=";
|
||||
})
|
||||
(fetchpatch {
|
||||
name = "CVE-2024-13978_2.patch";
|
||||
url = "https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4.patch";
|
||||
hash = "sha256-cZlLTeB7/nvylf5SLzKF7g91aBERhZxpV5fmWEJVrX4=";
|
||||
})
|
||||
(fetchpatch {
|
||||
name = "CVE-2025-9165.patch";
|
||||
url = "https://gitlab.com/libtiff/libtiff/-/commit/ed141286a37f6e5ddafb5069347ff5d587e7a4e0.patch";
|
||||
hash = "sha256-DIsk8trbHMMTrj6jP5Ae8ciRjHV4CPHdWCN+VbeFnFo=";
|
||||
})
|
||||
];
|
||||
|
||||
postPatch = ''
|
||||
|
||||
Reference in New Issue
Block a user