Merge pull request #260191 from LeSuisse/libcue-CVE-2023-43641

libcue: apply patch for CVE-2023-43641
This commit is contained in:
K900 2023-10-10 19:09:04 +03:00 committed by GitHub
commit 97ec5b4c08
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,4 +1,4 @@
{ lib, stdenv, fetchFromGitHub, cmake, bison, flex }:
{ lib, stdenv, fetchFromGitHub, fetchpatch, cmake, bison, flex }:
stdenv.mkDerivation rec {
pname = "libcue";
@ -11,6 +11,14 @@ stdenv.mkDerivation rec {
sha256 = "1iqw4n01rv2jyk9lksagyxj8ml0kcfwk67n79zy1r6zv1xfp5ywm";
};
patches = [
(fetchpatch {
name = "CVE-2023-43641.patch";
url = "https://github.com/lipnitsk/libcue/commit/fdf72c8bded8d24cfa0608b8e97f2eed210a920e.patch";
hash = "sha256-NjnSMUfman/SwLFWDIhtz2jCOLfpXGGGjO3QwRGURNg=";
})
];
nativeBuildInputs = [ cmake bison flex ];
doCheck = false; # fails all the tests (ctest)