gupnp: apply the patch for CVE-2021-33516
Fixes CVE-2021-33516.
https://discourse.gnome.org/t/security-relevant-releases-for-gupnp-issue-cve-2021-33516/6536
commit78d2a14bb8ee82f7f7d227ab473646460d874159
authorThomas Gerbet <thomas@gerbet.me>
dateThu 3 Jun 2021, 23:25 (5 years ago)
parent1e5e12d
pkgs/development/libraries/gupnp/default.nix+9
@@ -1,5 +1,6 @@
11{ lib, stdenv
22, fetchurl
3+, fetchpatch
34, meson
45, ninja
56, pkg-config
@@ -28,6 +29,14 @@ stdenv.mkDerivation rec {
2829 sha256 = "sha256-96AwfqUfXkTRuDL0k92QRURKOk4hHvhd/Zql3W6up9E=";
2930 };
3031
32+ patches = [
33+ (fetchpatch {
34+ name = "CVE-2021-33516.patch";
35+ url = "https://gitlab.gnome.org/GNOME/gupnp/-/commit/ca6ec9dcb26fd7a2a630eb6a68118659b589afac.patch";
36+ sha256 = "sha256-G7e/xNQB7Kp2fPzqVeD/cH3h1co9hZXh55QOUBnAnvU=";
37+ })
38+ ];
39+
3140 nativeBuildInputs = [
3241 meson
3342 ninja