brave: 1.25.68 -> 1.30.87
this fixes many high-severity CVEs (cherry picked from commit b2f46b6e80c80953a64927bb9333cdef94ccbffe)
This commit is contained in:
parent
2406a0b2b8
commit
a3903d58c2
|
@ -90,11 +90,11 @@ in
|
||||||
|
|
||||||
stdenv.mkDerivation rec {
|
stdenv.mkDerivation rec {
|
||||||
pname = "brave";
|
pname = "brave";
|
||||||
version = "1.25.68";
|
version = "1.30.87";
|
||||||
|
|
||||||
src = fetchurl {
|
src = fetchurl {
|
||||||
url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_amd64.deb";
|
url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_amd64.deb";
|
||||||
sha256 = "OBf42L6pctflNLjtcbnw2wKo7TisRSMF3SriDPFlB6I=";
|
sha256 = "0mx1vnrip1y87g6zj9sdcf5siihwn0b6v1q106d9kz89znpzd64s";
|
||||||
};
|
};
|
||||||
|
|
||||||
dontConfigure = true;
|
dontConfigure = true;
|
||||||
|
@ -124,9 +124,11 @@ stdenv.mkDerivation rec {
|
||||||
|
|
||||||
ln -sf $BINARYWRAPPER $out/bin/brave
|
ln -sf $BINARYWRAPPER $out/bin/brave
|
||||||
|
|
||||||
|
for exe in $out/opt/brave.com/brave/{brave,chrome_crashpad_handler}; do
|
||||||
patchelf \
|
patchelf \
|
||||||
--set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" \
|
--set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" \
|
||||||
--set-rpath "${rpath}" $out/opt/brave.com/brave/brave
|
--set-rpath "${rpath}" $exe
|
||||||
|
done
|
||||||
|
|
||||||
# Fix paths
|
# Fix paths
|
||||||
substituteInPlace $out/share/applications/brave-browser.desktop \
|
substituteInPlace $out/share/applications/brave-browser.desktop \
|
||||||
|
|
Loading…
Reference in New Issue