harfbuzz: apply patch for CVE-2026-22693 (#479165)

2026-01-12 08:43:29 +00:00
parent 076c9e28d2 16e7551ed4
commit 3dfd65030e
1 changed files with 10 additions and 0 deletions
@@ -2,6 +2,7 @@
  lib,
  stdenv,
  fetchurl,
+  fetchpatch,
  pkg-config,
  glib,
  freetype,
@@ -41,6 +42,15 @@ stdenv.mkDerivation (finalAttrs: {
    hash = "sha256-hmDr08J9lAf8hDO10XK6+6XwMXywu0M58o5TcMk9Qrc=";
  };

+  patches = [
+    (fetchpatch {
+      # https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww
+      name = "CVE-2026-22693.patch";
+      url = "https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae.patch";
+      hash = "sha256-mdgIhp1ndPSfzplBRB7s+BN2T5Z9dEYZ0bAmSDCUPSE=";
+    })
+  ];
+
  postPatch = ''
    patchShebangs src/*.py test
  ''