libplist: 1.12 -> 2.0.0

This commit is contained in:
Daiderd Jordan
2017-04-27 22:48:10 +02:00
parent 14adea9156
commit 56ac9ae5da
2 changed files with 4 additions and 49 deletions
@@ -3,11 +3,10 @@
let
inherit (python2Packages) python cython;
in stdenv.mkDerivation rec {
name = "libplist-1.12";
name = "libplist-${version}";
version = "2.0.0";
nativeBuildInputs = [ pkgconfig swig2 python cython ];
#patches = [ ./swig.patch ];
nativeBuildInputs = [ pkgconfig swig2 python cython ];
propagatedBuildInputs = [ libxml2 glib ];
@@ -21,19 +20,12 @@ in stdenv.mkDerivation rec {
src = fetchurl {
url = "http://www.libimobiledevice.org/downloads/${name}.tar.bz2";
sha256 = "1gj4nv0bvdm5y2sqm2vj2rn44k67ahw3mh6q614qq4nyngfdxzqf";
sha256 = "00pnh9zf3iwdji2faccns7vagbmbrwbj9a8zp9s53a6rqaa9czis";
};
meta = {
homepage = http://github.com/JonathanBeck/libplist;
platforms = stdenv.lib.platforms.all;
maintainers = [ ];
knownVulnerabilities = [
"CVE-2017-5209: base64decode function in base64.c allows attackers to obtain sensitive information from process memory or cause a denial of service"
"CVE-2017-5545: attackers to obtain sensitive information from process memory or cause a denial of service"
"CVE-2017-5834: A heap-buffer overflow in parse_dict_node"
"CVE-2017-5835: A memory allocation error leading to DoS"
"CVE-2017-5836: A type inconsistency in bplist.c"
];
};
}