python310Packages.get-video-properties: remove vulnerable binaries
We patched out their usage, but never removed the binaries from the package. A good time to migrate the package to the headless version of ffmpeg.
This commit is contained in:
parent
623644ec74
commit
746a974464
|
@ -1,7 +1,7 @@
|
|||
{ lib
|
||||
, buildPythonPackage
|
||||
, fetchFromGitHub
|
||||
, ffmpeg
|
||||
, ffmpeg-headless
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
|
@ -20,7 +20,10 @@ buildPythonPackage rec {
|
|||
|
||||
postPatch = ''
|
||||
substituteInPlace videoprops/__init__.py \
|
||||
--replace "which('ffprobe')" "'${ffmpeg}/bin/ffprobe'"
|
||||
--replace "which('ffprobe')" "'${ffmpeg-headless}/bin/ffprobe'"
|
||||
|
||||
# unused and vulnerable to various CVEs
|
||||
rm -r videoprops/binary_dependencies
|
||||
'';
|
||||
|
||||
pythonImportsCheck = [ "videoprops" ];
|
||||
|
|
Loading…
Reference in a new issue