libtiff: patch for CVE-2019-6128, CVE-2019-14973

CVE-2019-14973.patch is a manually backported of the upstream patch to work around some minor merge conflicts.
2019-10-22 09:47:40 +02:00
parent d0c1ee588f
commit f15564d72b
2 changed files with 394 additions and 0 deletions
@@ -17,6 +17,16 @@ stdenv.mkDerivation rec {
    sha256 = "1r4np635gr6zlc0bic38dzvxia6iqzcrary4n1ylarzpr8fd2lic";
  };

+  patches = [
+    (fetchurl {
+      url = "https://gitlab.com/libtiff/libtiff/commit/0c74a9f49b8d7a36b17b54a7428b3526d20f88a8.patch";
+      name = "CVE-2019-6128.patch";
+      sha256 = "03yvsfq6dxjd3v8ypfwz6cpz2iymqwcbawqqlmkh40dayi7fgizr";
+    })
+    # Manual backport of https://gitlab.com/libtiff/libtiff/commit/1b5e3b6a23827c33acf19ad50ce5ce78f12b3773.patch
+    ./CVE-2019-14973.patch
+  ];
+
  outputs = [ "bin" "dev" "out" "man" "doc" ];

  nativeBuildInputs = [ pkgconfig ];