From 4bdffb4a37fbf85c6f3b43a76a1f28c5e685c93f Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Thu, 8 May 2025 10:49:25 +0200 Subject: [PATCH] deepin.dde-api-proxy: 1.0.16 -> 1.0.20 Fixes CVE-2025-23222. https://security.opensuse.org/2025/01/24/dde-api-proxy-privilege-escalation.html https://github.com/linuxdeepin/dde-api-proxy/blob/1.0.20/debian/changelog --- pkgs/desktops/deepin/core/dde-api-proxy/default.nix | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pkgs/desktops/deepin/core/dde-api-proxy/default.nix b/pkgs/desktops/deepin/core/dde-api-proxy/default.nix index 9cc0942990e1..80af772b00c4 100644 --- a/pkgs/desktops/deepin/core/dde-api-proxy/default.nix +++ b/pkgs/desktops/deepin/core/dde-api-proxy/default.nix @@ -11,13 +11,13 @@ stdenv.mkDerivation rec { pname = "dde-api-proxy"; - version = "1.0.16"; + version = "1.0.20"; src = fetchFromGitHub { owner = "linuxdeepin"; repo = "dde-api-proxy"; rev = version; - hash = "sha256-kWodNftOPLIiQNPHAIC9p3VHFAis8FAI7vLJTqahAtU="; + hash = "sha256-QE31BOh2LFlY6te+2+nSHGbhLsikSX8V7xSvcLzCWRA="; }; postPatch = '' @@ -33,6 +33,7 @@ stdenv.mkDerivation rec { cmake pkg-config libsForQt5.wrapQtAppsHook + libsForQt5.polkit-qt ]; buildInputs = [