Commit b3cf0538 authored by Thomas Gerbet's avatar Thomas Gerbet
Browse files

jpegoptim: apply patch for CVE-2023-27781 

See https://github.com/tjko/jpegoptim/issues/132
parent 3e1d10de

pkgs/applications/graphics/jpegoptim/default.nix

+9 −1
Original line number Diff line number Diff line 
{ lib, stdenv, fetchFromGitHub, libjpeg }:

{ lib, stdenv, fetchFromGitHub, fetchpatch, libjpeg }:



stdenv.mkDerivation rec {

  version = "1.5.2";
@@ -11,6 +11,14 @@ stdenv.mkDerivation rec { 
    sha256 = "sha256-PROQvOqsis8we58OOZ/kuY+L/CoV7XfnY9wvrpsTJu8=";

  };



  patches = [

    (fetchpatch {

      name = "CVE-2023-27781.patch";

      url = "https://github.com/tjko/jpegoptim/commit/29a073ad297a0954f5e865264e24755d0ffe53ed.patch";

      hash = "sha256-YUjVg0cvElhzMG3b4t5bqcqnHAuzDoNvSqe0yvlgX4E=";

    })

  ];



  # There are no checks, it seems.

  doCheck = false;