nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

glib: apply patch for CVE-2025-7039

Browse Source 
Not-cherry-picked-because: unstable will be bumped to 2.86.0 as part of
the GNOME 49 upgrade.
This commit is contained in:
Thomas Gerbet
2025-11-01 22:02:08 +01:00
parent 8c8d7a0198
commit d81c0d0ae3
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
pkgs/by-name/gl/glib/package.nix
View File

@@ -3,6 +3,7 @@
lib,
stdenv,
fetchurl,
fetchpatch,
gettext,
meson,
ninja,
@@ -99,6 +100,12 @@ stdenv.mkDerivation (finalAttrs: {
./gobject_init_on_demand.patch
]
++ [
(fetchpatch {
name = "CVE-2025-7039.patch";
url = "https://gitlab.gnome.org/GNOME/glib/-/commit/61e963284889ddb4544e6f1d5261c16120f6fcc3.patch";
hash = "sha256-g0TIvKk5XEb4+iiDsDBkDH62ldlQ/jjGsMhHORD806k=";
})
# This patch lets GLib's GDesktopAppInfo API watch and notice changes
# to the Nix user and system profiles. That way, the list of available
# applications shown by the desktop environment is immediately updated