Commit 16e7551e authored by Thomas Gerbet's avatar Thomas Gerbet
Browse files

harfbuzz: apply patch for CVE-2026-22693 

https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww
parent 92d9b93a

pkgs/by-name/ha/harfbuzz/package.nix

+10 −0
Original line number Diff line number Diff line
@@ -2,6 +2,7 @@ 
  lib,

  stdenv,

  fetchurl,

  fetchpatch,

  pkg-config,

  glib,

  freetype,
@@ -41,6 +42,15 @@ stdenv.mkDerivation (finalAttrs: { 
    hash = "sha256-hmDr08J9lAf8hDO10XK6+6XwMXywu0M58o5TcMk9Qrc=";

  };



  patches = [

    (fetchpatch {

      # https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww

      name = "CVE-2026-22693.patch";

      url = "https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae.patch";

      hash = "sha256-mdgIhp1ndPSfzplBRB7s+BN2T5Z9dEYZ0bAmSDCUPSE=";

    })

  ];



  postPatch = ''

    patchShebangs src/*.py test

  ''