python310Packages.get-video-properties: remove vulnerable binaries

We patched out their usage, but never removed the binaries from the
package.

A good time to migrate the package to the headless version of ffmpeg.
This commit is contained in:
Martin Weinelt 2023-09-29 05:08:48 +02:00
parent 623644ec74
commit 746a974464
No known key found for this signature in database
GPG key ID: 87C1E9888F856759

View file

@ -1,7 +1,7 @@
{ lib
, buildPythonPackage
, fetchFromGitHub
, ffmpeg
, ffmpeg-headless
}:
buildPythonPackage rec {
@ -20,7 +20,10 @@ buildPythonPackage rec {
postPatch = ''
substituteInPlace videoprops/__init__.py \
--replace "which('ffprobe')" "'${ffmpeg}/bin/ffprobe'"
--replace "which('ffprobe')" "'${ffmpeg-headless}/bin/ffprobe'"
# unused and vulnerable to various CVEs
rm -r videoprops/binary_dependencies
'';
pythonImportsCheck = [ "videoprops" ];