Merge pull request #67454 from mmahut/wavpack

wavpack: CVE-2018-7253 and CVE-2018-7254
This commit is contained in:
Marek Mahut 2019-08-26 23:52:57 +02:00 committed by GitHub
commit a61151916f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -69,6 +69,16 @@ stdenv.mkDerivation rec {
name = "CVE-2019-1010319.patch";
sha256 = "011sqdgpykilaj2c4ns298z7aad03yprpva0dqr39nx88ji6jnrb";
})
(fetchpatch {
url = "https://github.com/dbry/WavPack/commit/36a24c7881427d2e1e4dc1cef58f19eee0d13aec.patch";
name = "CVE-2018-7253.patch";
sha256 = "130kvmlpaj6x1pm6qzdzrmf4xzhp0pj29qrardb76zcfinx5pk2n";
})
(fetchpatch {
url = "https://github.com/dbry/WavPack/commit/8e3fe45a7bac31d9a3b558ae0079e2d92a04799e.patch";
name = "CVE-2018-7254.patch";
sha256 = "06fdzw2cbdj8ajf171z1g53cl6bf1cdh2czswqldrqqvv3jkzk77";
})
];
meta = with stdenv.lib; {