From bc657814a10f12fad8fcafec8a2a1ef8f6d08d8d Mon Sep 17 00:00:00 2001 From: FlameFlag Date: Thu, 30 Apr 2026 22:28:00 +0300 Subject: [PATCH] discord: don't leak bundled nss via `LD_LIBRARY_PATH` Discord pins an older nss (currently 3.112.3) that is exported via `LD_LIBRARY_PATH` and leaks to xdg-open's children Discord's own ELF has libnss3.so in DT_NEEDED, so autoPatchelfHook resolves it via rpath; LD_LIBRARY_PATH is not needed. Fixes #514859 --- .../networking/instant-messengers/discord/linux.nix | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/pkgs/applications/networking/instant-messengers/discord/linux.nix b/pkgs/applications/networking/instant-messengers/discord/linux.nix index 8304d23ce9ce..22a815d4f3f7 100644 --- a/pkgs/applications/networking/instant-messengers/discord/linux.nix +++ b/pkgs/applications/networking/instant-messengers/discord/linux.nix @@ -151,7 +151,9 @@ let libxrender libxtst nspr - nss + # nss is intentionally NOT in libPath: it would leak via LD_LIBRARY_PATH + # to xdg-open and break Firefox children when versions diverge (#514859, + # PR #186603) libxcb libxkbcommon pango