jami: don't use main package's patches, mark with knownVulnerabilities

the patches for CVE-2022-39269 & CVE-2022-39244 won't apply to
jami's pinned version of pjsip, upstream don't seem to be on
top of this either
This commit is contained in:
Robert Scott 2022-10-26 21:23:02 +01:00
parent 834a64f039
commit f6369651e5

View file

@ -71,10 +71,14 @@ rec {
sha256 = "sha256-ENRfQh/HCXqInTV0tu8tGQO7+vTbST6XXpptERXMACE=";
};
patches = old.patches ++ (map (x: patch-src + x) (readLinesToList ./config/pjsip_patches));
patches = (map (x: patch-src + x) (readLinesToList ./config/pjsip_patches));
configureFlags = (readLinesToList ./config/pjsip_args_common)
++ lib.optionals stdenv.isLinux (readLinesToList ./config/pjsip_args_linux);
meta = {
knownVulnerabilities = [ "CVE-2022-39269" "CVE-2022-39244" ];
} // old.meta;
});
opendht-jami = opendht.override {