libde265: 1.0.8 -> 1.0.9

Fixes CVE-2021-36409, CVE-2021-35452, CVE-2021-36408, CVE-2021-36410 and CVE-2021-36411.
https://github.com/strukturag/libde265/releases/tag/v1.0.9
This commit is contained in:
Thomas Gerbet
2022-10-22 19:09:15 +02:00
parent f58fea6249
commit 3c03948545
@@ -1,24 +1,16 @@
{ lib, stdenv, fetchFromGitHub, fetchpatch, autoreconfHook, pkg-config }:
{ lib, stdenv, fetchFromGitHub, autoreconfHook, pkg-config }:
stdenv.mkDerivation rec {
version = "1.0.8";
version = "1.0.9";
pname = "libde265";
src = fetchFromGitHub {
owner = "strukturag";
repo = "libde265";
rev = "v${version}";
sha256 = "1dzflqbk248lz5ws0ni5acmf32b3rmnq5gsfaz7691qqjxkl1zml";
sha256 = "sha256-OpiQapppuKCR27tIG5OW+KiNMP9ysv7CaobiBOW6VUI=";
};
patches = [
(fetchpatch {
name = "CVE-2022-1253.patch";
url = "https://github.com/strukturag/libde265/commit/8e89fe0e175d2870c39486fdd09250b230ec10b8.patch";
sha256 = "sha256-F1BOWFx9oXR2trM22atyD3AJ5x6vVfURQ/PTlYP2Ibg=";
})
];
nativeBuildInputs = [ autoreconfHook pkg-config ];
enableParallelBuilding = true;