librsvg: 2.56.2 -> 2.56.3

Signed-off-by: Henri Rosten <henri.rosten@unikie.com>
(cherry picked from commit 644f2a109a)
Fixes CVE-2023-38633
This commit is contained in:
Henri Rosten 2023-08-02 13:49:28 +03:00 committed by Vladimír Čunát
parent 9337be115b
commit 24bacf845b
No known key found for this signature in database
GPG key ID: E747DF1F9575A3AA

View file

@ -32,7 +32,7 @@
stdenv.mkDerivation (finalAttrs: {
pname = "librsvg";
version = "2.56.2";
version = "2.56.3";
outputs = [ "out" "dev" ] ++ lib.optionals withIntrospection [
"devdoc"
@ -40,13 +40,13 @@ stdenv.mkDerivation (finalAttrs: {
src = fetchurl {
url = "mirror://gnome/sources/librsvg/${lib.versions.majorMinor finalAttrs.version}/librsvg-${finalAttrs.version}.tar.xz";
sha256 = "PsPE2Pc+C6S5EwAmlp6DccCStzQpjTbi/bPrSvzsEgA=";
hash = "sha256-WjKASKAtAUZFzSf2EUD04LESgPssfyohhk/gxZrBzog=";
};
cargoDeps = rustPlatform.fetchCargoTarball {
inherit (finalAttrs) src;
name = "librsvg-deps-${finalAttrs.version}";
hash = "sha256-GIEpZ5YMvmYQLcaLXseXQ6gIF7ICtUKq28JCVJ3PEYk=";
hash = "sha256-s7eNMSdajr2VhB/BPVUFftHhHKCqpR9sTfxfWwag1mI=";
# TODO: move this to fetchCargoTarball
dontConfigure = true;
};