xdg-desktop-portal-hyprland: add security patch

This patch fixes a long-standing RCE vulnerability in
xdg-desktop-portal-hyprland
(https://github.com/hyprwm/xdg-desktop-portal-hyprland/issues/242),
which was only discovered recently.
This commit is contained in:
Mihai Fufezan 2024-07-23 21:40:56 +03:00
parent 8adff84f43
commit 300e06cf56
No known key found for this signature in database

View File

@ -1,5 +1,6 @@
{ lib { lib
, stdenv , stdenv
, fetchpatch
, fetchFromGitHub , fetchFromGitHub
, cmake , cmake
, pkg-config , pkg-config
@ -33,6 +34,15 @@ stdenv.mkDerivation (self: {
hash = "sha256-wP611tGIWBA4IXShWbah7TxqdbvhfcfT2vnXalX/qzk="; hash = "sha256-wP611tGIWBA4IXShWbah7TxqdbvhfcfT2vnXalX/qzk=";
}; };
patches = [
# Fixes a long-standing RCE vulnerability (hyprwm/xdg-desktop-portal-hyprland#242)
# Can be removed after v1.3.3
(fetchpatch {
url = "https://github.com/hyprwm/xdg-desktop-portal-hyprland/commit/84a9cdca3adcf1cb288c2d38f8c6fc1835a3ae23.patch";
hash = "sha256-rdu+8KDa1o125GZKTYquZfS8JG05odlzDzz8QxRoQYk=";
})
];
nativeBuildInputs = [ nativeBuildInputs = [
cmake cmake
pkg-config pkg-config