From 3c039485457b50bfc2daa3036f05722f2ff78813 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Sat, 22 Oct 2022 12:06:27 +0200 Subject: [PATCH] libde265: 1.0.8 -> 1.0.9 Fixes CVE-2021-36409, CVE-2021-35452, CVE-2021-36408, CVE-2021-36410 and CVE-2021-36411. https://github.com/strukturag/libde265/releases/tag/v1.0.9 --- pkgs/development/libraries/libde265/default.nix | 14 +++----------- 1 file changed, 3 insertions(+), 11 deletions(-) diff --git a/pkgs/development/libraries/libde265/default.nix b/pkgs/development/libraries/libde265/default.nix index 762fe1765fd2..2fcd972ad04f 100644 --- a/pkgs/development/libraries/libde265/default.nix +++ b/pkgs/development/libraries/libde265/default.nix @@ -1,24 +1,16 @@ -{ lib, stdenv, fetchFromGitHub, fetchpatch, autoreconfHook, pkg-config }: +{ lib, stdenv, fetchFromGitHub, autoreconfHook, pkg-config }: stdenv.mkDerivation rec { - version = "1.0.8"; + version = "1.0.9"; pname = "libde265"; src = fetchFromGitHub { owner = "strukturag"; repo = "libde265"; rev = "v${version}"; - sha256 = "1dzflqbk248lz5ws0ni5acmf32b3rmnq5gsfaz7691qqjxkl1zml"; + sha256 = "sha256-OpiQapppuKCR27tIG5OW+KiNMP9ysv7CaobiBOW6VUI="; }; - patches = [ - (fetchpatch { - name = "CVE-2022-1253.patch"; - url = "https://github.com/strukturag/libde265/commit/8e89fe0e175d2870c39486fdd09250b230ec10b8.patch"; - sha256 = "sha256-F1BOWFx9oXR2trM22atyD3AJ5x6vVfURQ/PTlYP2Ibg="; - }) - ]; - nativeBuildInputs = [ autoreconfHook pkg-config ]; enableParallelBuilding = true;