From 40da13660ef92b0915fb9a7b57fc3abb39adfebb Mon Sep 17 00:00:00 2001
From: Thomas Tuegel <ttuegel@mailbox.org>
Date: Mon, 4 Apr 2022 14:25:31 -0500
Subject: [PATCH] ktexteditor: patch for CVE-2022-23853

---
 .../libraries/kde-frameworks/ktexteditor.nix  | 21 ++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/libraries/kde-frameworks/ktexteditor.nix b/pkgs/development/libraries/kde-frameworks/ktexteditor.nix
index 6a74dca7b4bd..b8055a51949c 100644
--- a/pkgs/development/libraries/kde-frameworks/ktexteditor.nix
+++ b/pkgs/development/libraries/kde-frameworks/ktexteditor.nix
@@ -1,5 +1,5 @@
 {
-  mkDerivation,
+  mkDerivation, fetchpatch,
   extra-cmake-modules, perl,
   karchive, kconfig, kguiaddons, ki18n, kiconthemes, kio, kparts, libgit2,
   qtscript, qtxmlpatterns, sonnet, syntax-highlighting, qtquickcontrols,
@@ -15,4 +15,23 @@ mkDerivation {
     editorconfig-core-c
   ];
   propagatedBuildInputs = [ kparts ];
+  patches = [
+    # Dependency of the next patch
+    (fetchpatch {
+      url = "https://invent.kde.org/frameworks/ktexteditor/-/commit/da5fced478a91c58ad95ef8925bd92a2e4a45336.patch";
+      sha256 = "04w9y99z7n0917q16dfvpiqjvy6rdj0hz4dyavj13jrf4hyasp19";
+    })
+    # https://kde.org/info/security/advisory-20220131-1.txt
+    # CVE-2022-23853
+    (fetchpatch {
+      url = "https://invent.kde.org/frameworks/ktexteditor/-/commit/804e49444c093fe58ec0df2ab436565e50dc147e.patch";
+      sha256 = "0q3vdwylskc0gb1qqga215bpx08al3l8a6m1krf1rxp55yl4jh3k";
+    })
+    # https://kde.org/info/security/advisory-20220131-1.txt
+    # CVE-2022-23853
+    (fetchpatch {
+      url = "https://invent.kde.org/frameworks/ktexteditor/-/commit/c80f935c345de2e2fb10635202800839ca9697bf.patch";
+      sha256 = "1si43sm3x3w73fddpz00jh7nfj1hwsgyw17s3zr8ivn9r61mikpb";
+    })
+  ];
 }