Commit 56299527 authored by Thomas Gerbet's avatar Thomas Gerbet Committed by Bjørn Forsman
Browse files

fop: apply patch for CVE-2024-28168 

https://www.openwall.com/lists/oss-security/2024/10/09/1
parent 69151ff7

pkgs/tools/typesetting/fop/default.nix

+9 −0
Original line number Diff line number Diff line 
{ lib

, stdenv

, fetchurl

, fetchpatch

, ant

, jdk

, jre
@@ -17,6 +18,14 @@ stdenv.mkDerivation (finalAttrs: { 
    hash = "sha256-b7Av17wu6Ar/npKOiwYqzlvBFSIuXTpqTacM1sxtBvc=";

  };



  patches = [

    (fetchpatch {

      name = "CVE-2024-28168.patch";

      url = "https://github.com/apache/xmlgraphics-fop/commit/d96ba9a11710d02716b6f4f6107ebfa9ccec7134.patch";

      hash = "sha256-zmUA1Tq6iZtvNECCiXebXodp6AikBn10NTZnVHpPMlw=";

    })

  ];



  nativeBuildInputs = [

    ant

    jdk