diff options
| author | Doron Behar <doron.behar@gmail.com> | 2020-12-27 23:54:10 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-12-27 23:54:10 +0200 |
| commit | a56f793ccc3a99ea452af37e1d2a792b8d4e51e6 (patch) | |
| tree | 017125b80110cc720ca0d358225085abc6dbc86a /pkgs/applications/audio | |
| parent | b19ae92d505f48b81d55ecdb1956a0e4340306ef (diff) | |
| parent | 487fb291d9d0761c118b579ad4cd7bea597d414d (diff) | |
Merge pull request #100980 from devhell/patch-mp3gain-cve-2019-18359
mp3gain: Fix vulnerabilities
Diffstat (limited to 'pkgs/applications/audio')
| -rw-r--r-- | pkgs/applications/audio/mp3gain/default.nix | 18 |
1 files changed, 13 insertions, 5 deletions
diff --git a/pkgs/applications/audio/mp3gain/default.nix b/pkgs/applications/audio/mp3gain/default.nix index f2b4564c7ccf..9bf0b5b8f64c 100644 --- a/pkgs/applications/audio/mp3gain/default.nix +++ b/pkgs/applications/audio/mp3gain/default.nix @@ -1,4 +1,4 @@ -{ stdenv, fetchurl, unzip, mpg123 }: +{ stdenv, fetchurl, fetchpatch, unzip, mpg123 }: stdenv.mkDerivation { name = "mp3gain-1.6.2"; @@ -11,17 +11,25 @@ stdenv.mkDerivation { sourceRoot = "."; + patches = [ + (fetchpatch { + name = "0001-fix-security-bugs.patch"; + url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/media-sound/mp3gain/files/mp3gain-1.6.2-CVE-2019-18359-plus.patch?id=36f8689f7903548f5d89827a6e7bdf70a9882cee"; + sha256 = "10n53wm0xynlcxqlnaqfgamjzcpfz41q1jlg0bhw4kq1kzhs4yyw"; + }) + ]; + buildFlags = [ "OSTYPE=linux" ]; installPhase = '' install -vD mp3gain "$out/bin/mp3gain" ''; - meta = { + meta = with stdenv.lib; { description = "Lossless mp3 normalizer with statistical analysis"; homepage = "http://mp3gain.sourceforge.net/"; - license = stdenv.lib.licenses.lgpl21; - platforms = stdenv.lib.platforms.linux; - maintainers = [ stdenv.lib.maintainers.devhell ]; + license = licenses.lgpl21; + platforms = platforms.linux; + maintainers = with maintainers; [ devhell ]; }; } |