primrose/.files
1
0
Fork 0
mirror of https://codeberg.org/leana8959/.files.git synced 2025-12-06 06:39:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

vanadium: temporary sudo patch

Browse source
This commit is contained in:
Primrose 2025-07-01 09:21:13 +02:00
parent f75238767f
commit 9eb882e06e
Signed by: primrose
GPG key ID: 4E887A4CA9714ADA
1 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

14
nix/configurations/vanadium/overlay.nix
View file

@ -54,4 +54,18 @@ in
./patches/fcitx5-chinese-addons/disable-fullwidth.patch ./patches/fcitx5-chinese-addons/disable-fullwidth.patch
# Note: disabling pinyin helper breaks canjie # Note: disabling pinyin helper breaks canjie
]; ];
# TODO: remove this when upstream is updated
sudo.__output.patches.__append = [
(final.fetchpatch {
name = "CVE-2025-32462";
url = "https://github.com/sudo-project/sudo/commit/d530367828e3713d09489872743eb92d31fb11ff.patch";
hash = "sha256-mS8fcPV1QDv9SDuGN7dfDLtVLSBP+apotYW1UsEBPvU=";
})
(final.fetchpatch {
name = "CVE-2025-32463";
url = "https://github.com/sudo-project/sudo/commit/fdafc2ceb36382b07e604c0f39903d56bef54016.patch";
hash = "sha256-4FP8z5pKwcOfJxjJ9X/IbCgriKJm1H/HnswuvYjBlt8=";
})
];
} }