cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

Merge pull request #152261 from Moredread/mediathekview-log4j-master

Browse source 
mediathekview: CVE-2021-45105 (log4j) mitigation
This commit is contained in:
Jörg Thalheim 2021-12-28 07:16:13 +00:00 committed by GitHub
commit 829d6970a3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
pkgs/applications/video/mediathekview/default.nix
View file

@ -1,4 +1,4 @@
{ lib, stdenv, fetchurl, makeWrapper, jre }: { lib, stdenv, fetchurl, makeWrapper, jre, zip }:
stdenv.mkDerivation rec { stdenv.mkDerivation rec {
version = "13.8.0"; version = "13.8.0";
@ -8,13 +8,16 @@ stdenv.mkDerivation rec {
sha256 = "0zfkwz5psv7m0881ykgqrxwjhadg39c55aj2wpy7m1jdara86c5q"; sha256 = "0zfkwz5psv7m0881ykgqrxwjhadg39c55aj2wpy7m1jdara86c5q";
}; };
nativeBuildInputs = [ makeWrapper ]; nativeBuildInputs = [ makeWrapper zip ];
installPhase = '' installPhase = ''
runHook preInstall runHook preInstall
mkdir -p $out/{bin,lib} mkdir -p $out/{bin,lib}
# log4j mitigation, see https://logging.apache.org/log4j/2.x/security.html
zip -d MediathekView.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
install -m644 MediathekView.jar $out/lib install -m644 MediathekView.jar $out/lib
makeWrapper ${jre}/bin/java $out/bin/mediathek \ makeWrapper ${jre}/bin/java $out/bin/mediathek \