From d628521d0b79df8882980a897f1e91fe78c29660 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= Date: Thu, 7 Nov 2019 21:27:20 +0100 Subject: [PATCH] expat: fetch the patch from "my private mirror" Fixes #71075. I'm really tired of these, so lemme try this approach. --- pkgs/development/libraries/expat/default.nix | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/pkgs/development/libraries/expat/default.nix b/pkgs/development/libraries/expat/default.nix index fdd49dc4cca5..4916cce933be 100644 --- a/pkgs/development/libraries/expat/default.nix +++ b/pkgs/development/libraries/expat/default.nix @@ -1,4 +1,4 @@ -{ stdenv, fetchurl, fetchpatch }: +{ stdenv, fetchurl }: stdenv.mkDerivation rec { name = "expat-2.2.7"; @@ -9,12 +9,9 @@ stdenv.mkDerivation rec { }; patches = [ - (fetchpatch { - name = "CVE-2019-15903.patch"; - url = "https://sources.debian.org/data/main/e/expat/2.2.7-2/debian/patches/CVE-2019-15903_Deny_internal_entities_closing_the_doctype.patch"; + (fetchurl { + url = "https://raw.githubusercontent.com/vcunat/patch-mirror/master/CVE-2019-15903.patch"; sha256 = "0lv4392ihpk71fgaf1fz03gandqkaqisal8xrzvcqnvnq4mnmwxp"; - stripLen = 1; - excludes = [ "tests/runtests.c" "Changes" ]; }) ];