From 7566c09a0cccbf184846ee0d5e49973994d13b35 Mon Sep 17 00:00:00 2001
From: Jan Tojnar <jtojnar@gmail.com>
Date: Sun, 1 Mar 2020 16:14:38 +0100
Subject: [PATCH] netpbm: Remove "CVE" patch
The CVE was patched upstream long ago.
http://cve.circl.lu/cve/CVE-2005-2471
-dPARANOIDSAFER seems not to be supported any more.
https://phabricator.wikimedia.org/T136402#2338482
https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=79a06b45e784e6839b2b2129cd2620ea606254e1
---
pkgs/tools/graphics/netpbm/default.nix | 4 ----
1 file changed, 4 deletions(-)
diff --git a/pkgs/tools/graphics/netpbm/default.nix b/pkgs/tools/graphics/netpbm/default.nix
index 78c12e3b8dc..8f3a5ea274e 100644
--- a/pkgs/tools/graphics/netpbm/default.nix
+++ b/pkgs/tools/graphics/netpbm/default.nix
@@ -28,10 +28,6 @@ stdenv.mkDerivation {
};
postPatch = ''
- # CVE-2005-2471, from Arch
- substituteInPlace converter/other/pstopnm.c \
- --replace '"-dSAFER"' '"-dPARANOIDSAFER"'
-
# Install libnetpbm.so symlink to correct destination
substituteInPlace lib/Makefile \
--replace '/sharedlink' '/lib'