Merge pull request #100980 from devhell/patch-mp3gain-cve-2019-18359
mp3gain: Fix vulnerabilities
This commit is contained in:
commit
a56f793ccc
1 changed files with 13 additions and 5 deletions
|
@ -1,4 +1,4 @@
|
|||
{ stdenv, fetchurl, unzip, mpg123 }:
|
||||
{ stdenv, fetchurl, fetchpatch, unzip, mpg123 }:
|
||||
|
||||
stdenv.mkDerivation {
|
||||
name = "mp3gain-1.6.2";
|
||||
|
@ -11,17 +11,25 @@ stdenv.mkDerivation {
|
|||
|
||||
sourceRoot = ".";
|
||||
|
||||
patches = [
|
||||
(fetchpatch {
|
||||
name = "0001-fix-security-bugs.patch";
|
||||
url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/media-sound/mp3gain/files/mp3gain-1.6.2-CVE-2019-18359-plus.patch?id=36f8689f7903548f5d89827a6e7bdf70a9882cee";
|
||||
sha256 = "10n53wm0xynlcxqlnaqfgamjzcpfz41q1jlg0bhw4kq1kzhs4yyw";
|
||||
})
|
||||
];
|
||||
|
||||
buildFlags = [ "OSTYPE=linux" ];
|
||||
|
||||
installPhase = ''
|
||||
install -vD mp3gain "$out/bin/mp3gain"
|
||||
'';
|
||||
|
||||
meta = {
|
||||
meta = with stdenv.lib; {
|
||||
description = "Lossless mp3 normalizer with statistical analysis";
|
||||
homepage = "http://mp3gain.sourceforge.net/";
|
||||
license = stdenv.lib.licenses.lgpl21;
|
||||
platforms = stdenv.lib.platforms.linux;
|
||||
maintainers = [ stdenv.lib.maintainers.devhell ];
|
||||
license = licenses.lgpl21;
|
||||
platforms = platforms.linux;
|
||||
maintainers = with maintainers; [ devhell ];
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue