taglib: Fix CVE-2017-12678

NixOS · Jan 2, 2018 · 2e00e2b · 2e00e2b
1 parent 59be351
commit 2e00e2b
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/pkgs/development/libraries/taglib/default.nix b/pkgs/development/libraries/taglib/default.nix
@@ -1,4 +1,4 @@
-{stdenv, fetchurl, zlib, cmake}:
+{stdenv, fetchurl, zlib, cmake, fetchpatch}:
 
 stdenv.mkDerivation rec {
   name = "taglib-1.11.1";
@@ -8,6 +8,15 @@ stdenv.mkDerivation rec {
     sha256 = "0ssjcdjv4qf9liph5ry1kngam1y7zp8fzr9xv4wzzrma22kabldn";
   };
 
+  patches = [
+    (fetchpatch {
+      # https://github.com/taglib/taglib/issues/829
+      name = "CVE-2017-12678.patch";
+      url = "https://github.com/taglib/taglib/commit/eb9ded1206f18.patch";
+      sha256 = "1bvpxsvmlpi3by7myzss9kkpdkv405612n8ff68mw1ambj8h1m90";
+    })
+  ];
+
   nativeBuildInputs = [ cmake ];
 
   buildInputs = [ zlib ];