pgadmin4: apply patch for CVE-2024-2044

pgadmin-org/pgadmin4#7258
LeSuisse · Mar 17, 2024 · 66f2aff · 66f2aff
1 parent 00ec0ef
commit 66f2aff
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkgs/tools/admin/pgadmin/default.nix b/pkgs/tools/admin/pgadmin/default.nix
@@ -103,6 +103,12 @@ pythonPackages.buildPythonApplication rec {
     ./expose-setup.py.patch
     # check for permission of /etc/pgadmin/config_system and don't fail
     ./check-system-config-dir.patch
+    (fetchpatch {
+      name = "CVE-2024-2044.patch";
+      url = "https://github.com/pgadmin-org/pgadmin4/commit/4e49d752fba72953acceeb7f4aa2e6e32d25853d.patch";
+      hash = "sha256-uIOWefMjbequVfS6haJeSbXv/I6ZdA7uCEwCZSnCtRM=";
+      excludes = [ "docs/en_US/release_notes_8_4.rst" ];
+    })
   ];
 
   postPatch = ''