graphite2: patch for CVE-2017-5436
use release tarball Closes #13039. Signed-off-by: ilovezfs <ilovezfs@icloud.com>
This commit is contained in:
parent
d0bf8474af
commit
a16bea16bc
1 changed files with 16 additions and 3 deletions
|
@ -1,11 +1,24 @@
|
|||
class Graphite2 < Formula
|
||||
desc "Smart font renderer for non-Roman scripts"
|
||||
homepage "http://graphite.sil.org"
|
||||
url "https://github.com/silnrsi/graphite/archive/1.3.9.tar.gz"
|
||||
mirror "https://mirrors.ocf.berkeley.edu/debian/pool/main/g/graphite2/graphite2_1.3.9.orig.tar.gz"
|
||||
sha256 "f82f92d86a63da79eba10a37c80d943dce883bd72dbc99ebe5bdb7022d3e2391"
|
||||
revision 1
|
||||
|
||||
head "https://github.com/silnrsi/graphite.git"
|
||||
|
||||
stable do
|
||||
url "https://github.com/silnrsi/graphite/releases/download/1.3.9/graphite2-1.3.9.tgz"
|
||||
# Debian mirror the release tarball, not the GitHub archive tarball.
|
||||
mirror "https://mirrors.ocf.berkeley.edu/debian/pool/main/g/graphite2/graphite2_1.3.9.orig.tar.gz"
|
||||
sha256 "ec0185b663059553fd46e8c4a4f0dede60a02f13a7a1fefc2ce70332ea814567"
|
||||
|
||||
# Patch for CVE-2017-5436.
|
||||
# https://www.vuxml.org/freebsd/cf133acc-82e7-4755-a66a-5ddf90dacbe6.html
|
||||
patch do
|
||||
url "https://github.com/silnrsi/graphite/commit/1ce331d5548b.patch"
|
||||
sha256 "39613db98f959b48adc2387d37a5f384566172b906d949edad452fcd48c3874c"
|
||||
end
|
||||
end
|
||||
|
||||
bottle do
|
||||
cellar :any
|
||||
sha256 "cae141f3980ef8bbac6953e3fb1807a460dd80de277e15043289f4598f389005" => :sierra
|
||||
|
|
Loading…
Reference in a new issue