python310Packages.get-video-properties: remove vulnerable binaries
We patched out their usage, but never removed the binaries from the package. A good time to migrate the package to the headless version of ffmpeg.
This commit is contained in:
parent
623644ec74
commit
746a974464
@ -1,7 +1,7 @@
|
|||||||
{ lib
|
{ lib
|
||||||
, buildPythonPackage
|
, buildPythonPackage
|
||||||
, fetchFromGitHub
|
, fetchFromGitHub
|
||||||
, ffmpeg
|
, ffmpeg-headless
|
||||||
}:
|
}:
|
||||||
|
|
||||||
buildPythonPackage rec {
|
buildPythonPackage rec {
|
||||||
@ -20,7 +20,10 @@ buildPythonPackage rec {
|
|||||||
|
|
||||||
postPatch = ''
|
postPatch = ''
|
||||||
substituteInPlace videoprops/__init__.py \
|
substituteInPlace videoprops/__init__.py \
|
||||||
--replace "which('ffprobe')" "'${ffmpeg}/bin/ffprobe'"
|
--replace "which('ffprobe')" "'${ffmpeg-headless}/bin/ffprobe'"
|
||||||
|
|
||||||
|
# unused and vulnerable to various CVEs
|
||||||
|
rm -r videoprops/binary_dependencies
|
||||||
'';
|
'';
|
||||||
|
|
||||||
pythonImportsCheck = [ "videoprops" ];
|
pythonImportsCheck = [ "videoprops" ];
|
||||||
|
Loading…
Reference in New Issue
Block a user