From 003ffbe7d6d07c4fcd8f5ca41065736aa53171f0 Mon Sep 17 00:00:00 2001
From: Marek Mahut <marek.mahut@satoshilabs.com>
Date: Tue, 16 Jul 2019 17:58:24 +0200
Subject: [PATCH 1/2] wavpack: CVE-2018-19840

---
 pkgs/development/libraries/wavpack/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/development/libraries/wavpack/default.nix b/pkgs/development/libraries/wavpack/default.nix
index 7163e2a87d7..aa45b72d4dd 100644
--- a/pkgs/development/libraries/wavpack/default.nix
+++ b/pkgs/development/libraries/wavpack/default.nix
@@ -49,6 +49,11 @@ stdenv.mkDerivation rec {
       name = "CVE-2019-11498-4.patch";
       sha256 = "0qdw071b14hmxkjw6kn83d8hzq89l3hqh64pl1f1wb8m51w5xfg7";
     })
+    (fetchpatch {
+      url = "https://github.com/dbry/WavPack/commit/070ef6f138956d9ea9612e69586152339dbefe51.patch";
+      name = "CVE-2018-19840.patch";
+      sha256 = "08y27py8hnki74ad8wbknnd36vj5pzzcm2vk3ngcbsjnj7x5mffz";
+    })
   ];
 
   meta = with stdenv.lib; {

From 71a37531906732665ada409d00e501085f9d4394 Mon Sep 17 00:00:00 2001
From: Marek Mahut <marek.mahut@satoshilabs.com>
Date: Tue, 16 Jul 2019 18:00:18 +0200
Subject: [PATCH 2/2] wavpack: CVE-2018-19841

---
 pkgs/development/libraries/wavpack/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/development/libraries/wavpack/default.nix b/pkgs/development/libraries/wavpack/default.nix
index aa45b72d4dd..adfce3ea50b 100644
--- a/pkgs/development/libraries/wavpack/default.nix
+++ b/pkgs/development/libraries/wavpack/default.nix
@@ -54,6 +54,11 @@ stdenv.mkDerivation rec {
       name = "CVE-2018-19840.patch";
       sha256 = "08y27py8hnki74ad8wbknnd36vj5pzzcm2vk3ngcbsjnj7x5mffz";
     })
+    (fetchpatch {
+      url = "https://github.com/dbry/WavPack/commit/bba5389dc598a92bdf2b297c3ea34620b6679b5b.patch";
+      name = "CVE-2018-19841.patch";
+      sha256 = "08gx5xx51bi86cqqy7cv1d25k669a7wnkksasjspphwkpwkcxymy";
+    })
   ];
 
   meta = with stdenv.lib; {