Unverified Commit c5b33803 authored by Martin Weinelt's avatar Martin Weinelt Committed by GitHub
Browse files

Merge pull request #221829 from LeSuisse/jpegoptim-CVE-2023-27781 

jpegoptim: apply patch for CVE-2023-27781
parents 388d7645 b3cf0538

pkgs/applications/graphics/jpegoptim/default.nix

+9 −1
Original line number Diff line number Diff line 
{ lib, stdenv, fetchFromGitHub, libjpeg }:

{ lib, stdenv, fetchFromGitHub, fetchpatch, libjpeg }:



stdenv.mkDerivation rec {

  version = "1.5.2";
@@ -11,6 +11,14 @@ stdenv.mkDerivation rec { 
    sha256 = "sha256-PROQvOqsis8we58OOZ/kuY+L/CoV7XfnY9wvrpsTJu8=";

  };



  patches = [

    (fetchpatch {

      name = "CVE-2023-27781.patch";

      url = "https://github.com/tjko/jpegoptim/commit/29a073ad297a0954f5e865264e24755d0ffe53ed.patch";

      hash = "sha256-YUjVg0cvElhzMG3b4t5bqcqnHAuzDoNvSqe0yvlgX4E=";

    })

  ];



  # There are no checks, it seems.

  doCheck = false;