gdk-pixbuf: 2.42.10 -> 2.42.11

The most impactful change seems to be the desactivation of a bunch of loaders.
This mitigates CVE-2022-48622 in the `ani` loader which does not have a proper
fix (https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/202).

Changes:
https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/blob/2.42.11/NEWS?ref_type=tags
https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/compare/2.42.10...2.42.11
This commit is contained in:
Thomas Gerbet 2024-04-20 11:58:24 +02:00
parent 917d4f32ff
commit 676ca4e68f

View file

@ -25,7 +25,7 @@
stdenv.mkDerivation (finalAttrs: {
pname = "gdk-pixbuf";
version = "2.42.10";
version = "2.42.11";
outputs = [ "out" "dev" "man" ]
++ lib.optional withIntrospection "devdoc"
@ -35,7 +35,7 @@ stdenv.mkDerivation (finalAttrs: {
inherit (finalAttrs) pname version;
in fetchurl {
url = "mirror://gnome/sources/${pname}/${lib.versions.majorMinor version}/${pname}-${version}.tar.xz";
sha256 = "7ptsddE7oJaQei48aye2G80X9cfr6rWltDnS8uOf5Es=";
hash = "sha256-Sdy0AjiHCGR+jDIdVrb7MPIeUeUV0MWpQiaNIwUqLwA=";
};
patches = [