discord: don't leak bundled nss via LD_LIBRARY_PATH

Discord pins an older nss (currently 3.112.3) that is exported via `LD_LIBRARY_PATH` and leaks to xdg-open's children Discord's own ELF has libnss3.so in DT_NEEDED, so autoPatchelfHook resolves it via rpath; LD_LIBRARY_PATH is not needed. Fixes #514859
2026-04-30 23:20:54 +03:00
parent 7176fd715a
commit bc657814a1
1 changed files with 3 additions and 1 deletions
@@ -151,7 +151,9 @@ let
      libxrender
      libxtst
      nspr
-      nss
+      # nss is intentionally NOT in libPath: it would leak via LD_LIBRARY_PATH
+      # to xdg-open and break Firefox children when versions diverge (#514859,
+      # PR #186603)
      libxcb
      libxkbcommon
      pango