Skip to content

Commit

Permalink
poppler: add patch for CVE-2022-38784
Browse files Browse the repository at this point in the history 
Close #189196 (original PR)
  • Loading branch information
@risicle @vcunat
risicle authored and vcunat committed Sep 1, 2022
1 parent 2da64a8 commit 04ca702
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions pkgs/development/libraries/poppler/default.nix
View file
Original file line number Diff line number Diff line change
Expand Up @@ -44,6 +44,14 @@ stdenv.mkDerivation rec {
sha256 = "sha256-tJMyhyFALyXLdSP5zcL318WfRa2Zm951xjyQYE2w8gs=";
};

patches = [
(fetchpatch {
name = "CVE-2022-38784.patch";
url = "https://gitlab.freedesktop.org/poppler/poppler/-/commit/27354e9d9696ee2bc063910a6c9a6b27c5184a52.patch";
sha256 = "sha256-M12zaHxcgQB/37tHffllqzd+Juq9BH5gpKVGaRY00vI=";
})
];

nativeBuildInputs = [
cmake
ninja
Expand Down

2 comments on commit 04ca702

@github-actions
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@vcunat, you pushed a commit directly to master/release branch
instead of going through a Pull Request.

That's highly discouraged beyond the few exceptions listed
on #118661

@vcunat
Copy link
Member

@vcunat vcunat commented on 04ca702 Sep 1, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, intentional. Tested in a PR targeted elsewhere.

Please sign in to comment.