Merge pull request #296624 from LeSuisse/23.11-pgadmin-7.7-CVE-2024-2044

[23.11] pgadmin4: apply patch for CVE-2024-2044
NixOS · Mar 18, 2024 · 01f5bf7 · 01f5bf7
2 parents 3c4f159 + 66f2aff
commit 01f5bf7
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkgs/tools/admin/pgadmin/default.nix b/pkgs/tools/admin/pgadmin/default.nix
@@ -103,6 +103,12 @@ pythonPackages.buildPythonApplication rec {
     ./expose-setup.py.patch
     # check for permission of /etc/pgadmin/config_system and don't fail
     ./check-system-config-dir.patch
+    (fetchpatch {
+      name = "CVE-2024-2044.patch";
+      url = "https://github.com/pgadmin-org/pgadmin4/commit/4e49d752fba72953acceeb7f4aa2e6e32d25853d.patch";
+      hash = "sha256-uIOWefMjbequVfS6haJeSbXv/I6ZdA7uCEwCZSnCtRM=";
+      excludes = [ "docs/en_US/release_notes_8_4.rst" ];
+    })
   ];
 
   postPatch = ''