mediathekview: CVE-2021-45105 (log4j) mitigation
Remove the affected JndiLookup.class until we can update to the lastest Mediathekview version.
This commit is contained in:
parent
59b2ed7599
commit
2a360652e2
|
@ -1,4 +1,4 @@
|
||||||
{ lib, stdenv, fetchurl, makeWrapper, jre }:
|
{ lib, stdenv, fetchurl, makeWrapper, jre, zip }:
|
||||||
|
|
||||||
stdenv.mkDerivation rec {
|
stdenv.mkDerivation rec {
|
||||||
version = "13.8.0";
|
version = "13.8.0";
|
||||||
|
@ -8,13 +8,16 @@ stdenv.mkDerivation rec {
|
||||||
sha256 = "0zfkwz5psv7m0881ykgqrxwjhadg39c55aj2wpy7m1jdara86c5q";
|
sha256 = "0zfkwz5psv7m0881ykgqrxwjhadg39c55aj2wpy7m1jdara86c5q";
|
||||||
};
|
};
|
||||||
|
|
||||||
nativeBuildInputs = [ makeWrapper ];
|
nativeBuildInputs = [ makeWrapper zip ];
|
||||||
|
|
||||||
installPhase = ''
|
installPhase = ''
|
||||||
runHook preInstall
|
runHook preInstall
|
||||||
|
|
||||||
mkdir -p $out/{bin,lib}
|
mkdir -p $out/{bin,lib}
|
||||||
|
|
||||||
|
# log4j mitigation, see https://logging.apache.org/log4j/2.x/security.html
|
||||||
|
zip -d MediathekView.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
|
||||||
|
|
||||||
install -m644 MediathekView.jar $out/lib
|
install -m644 MediathekView.jar $out/lib
|
||||||
|
|
||||||
makeWrapper ${jre}/bin/java $out/bin/mediathek \
|
makeWrapper ${jre}/bin/java $out/bin/mediathek \
|
||||||
|
|
Loading…
Reference in a new issue