diff options
| author | Martin Weinelt <hexa@darmstadt.ccc.de> | 2020-11-04 13:36:12 +0100 |
|---|---|---|
| committer | Martin Weinelt <hexa@darmstadt.ccc.de> | 2020-11-24 20:35:55 +0100 |
| commit | 16ee69c8720b8a96f4d0935d0688d4e4d6df52db (patch) | |
| tree | 7b6b0c716293bf41bdc059b544a29e37323eeb82 | |
| parent | linux: 5.4.79 -> 5.4.80 (diff) | |
| download | nixpkgs-16ee69c8720b8a96f4d0935d0688d4e4d6df52db.tar.gz | |
sddm: add patch for CVE-2020-28049
> Local privilege escalation due to race condition in creation of the Xauthority file.
Fixes: CVE-2020-28049
(cherry picked from commit faf436ea7915672835fce7a6b99576f491595d15)
| -rw-r--r-- | pkgs/applications/display-managers/sddm/default.nix | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/pkgs/applications/display-managers/sddm/default.nix b/pkgs/applications/display-managers/sddm/default.nix index 735e83a0842a..7de299e88aa3 100644 --- a/pkgs/applications/display-managers/sddm/default.nix +++ b/pkgs/applications/display-managers/sddm/default.nix @@ -1,4 +1,4 @@ -{ mkDerivation, lib, fetchFromGitHub +{ mkDerivation, lib, fetchFromGitHub, fetchpatch , cmake, extra-cmake-modules, pkgconfig, libxcb, libpthreadstubs , libXdmcp, libXau, qtbase, qtdeclarative, qtquickcontrols2, qttools, pam, systemd }: @@ -19,6 +19,11 @@ in mkDerivation { patches = [ ./sddm-ignore-config-mtime.patch + (fetchpatch { + name = "CVE-2020-28049.patch"; + url = "https://github.com/sddm/sddm/commit/be202f533ab98a684c6a007e8d5b4357846bc222.patch"; + sha256 = "119zqfldaqs4066wifn64n1xmhv1qd2acd9hcshw9hyl2j84pz8h"; + }) ]; postPatch = |